Only load page if

Don’t use isset($_POST['submit']). Read this article.

http://stackoverflow.com/questions/10943060/isset-postsubmit-vs-serverrequest-method-post#comment14373814_10943179

Then read this one.

http://stackoverflow.com/a/29255185

I’ve noticed that a lot of people who use isset($_POST['submit']) all still use MySQL_*. So bad practice with deprecated functions = not a very secure website.