大家帮我看看这个php语句有什么问题

我在做一个网站，现在要判断用户登录：
1.log.php:
<form method="post" target="_blank" action="refreshindex.php">
     用户名:<input type="text" name="username" width="10"  /><br /><br />
     密&nbsp;&nbsp;码:<input type="password" name="password" width="10"  /><br /><br />
         &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="submit" size="20" value="登录" οnclick="window.location.assign('logindex.php')" />     
</form>


2:logindex
<?php 
if($_POST['username']!=" "&&$_POST['password']!=" ")
{
$conn=new mysqli("localhost","root","910523","classweb");
$conn->query('set sql_mode=""');
$conn->query('set names utf8');
$username=$_POST['username'];
$password=$_POST['password'];
    if($conn->query("call pro_reges2('$username','$password')"))
    {
         echo "<script>alert('用户登录成功');</script>";
    }
    else
    {
    echo "<script>alert('用户登录失败');</script>";
    }
    
}
?>


3数据库储存过程：
delimiter //
create procedure pro_reges2(in username varchar(50),
in password varchar(50))
  begin 
    select * from user where userno=username and pwd=password;
    end;
    //