The problem is that the server does not see your login.php as a php page. So, instead of executing the code, it simply returns the entire page as-is.
There can be a few reasons for this:
short tags can be disabled. If this is true, you cannot start a php codeblock with , instead start it with
Otherwise, the server might not understand php at all. Does it run other scripts?