Walidacja logowania

Witam!
Nie mam pojęcia dlaczego mimo braku danych zwracana jest nice

C#:

            byte[] bD = Encoding.UTF8.GetBytes(string.Format("login={0}&haslo={1}", textBox1.Text, textBox2.TabIndex));
            System.Net.HttpWebRequest request = (System.Net.HttpWebRequest)System.Net.WebRequest.Create("http://example.com/check.php");
            request.Method = "POST";
            request.ContentType = "application/x-www-form-urlencoded";
            request.UserAgent = "Mój super program do logowania i rejestracji";
            request.ContentLength = bD.Length;
            System.IO.Stream stream = request.GetRequestStream();
            stream.Write(bD, 0, bD.Length);
            stream.Close();
            System.Net.HttpWebResponse odp = (System.Net.HttpWebResponse)request.GetResponse();
            System.IO.StreamReader sr = new System.IO.StreamReader(odp.GetResponseStream());
            string zaw = sr.ReadToEnd();
            sr.Close();
            odp.Close();


            if (zaw.Equals("1"))
                MessageBox.Show("nice");
            else
                MessageBox.Show("ERROR");

PHP:
<?
mysql_connect("localhost", "admin_dane", "password");
mysql_select_db("admin_dane");
$login = mysql_real_escape_string($_POST['login']);
$haslo = mysql_real_escape_string($_POST['haslo']);
$zap = mysql_query("SELECT `id` FROM `uzytkownicy` where (login = '" . mysql_real_escape_string($_POST['login']) . "') and (haslo = '" . mysql_real_escape_string($_POST['haslo']) . "')");
$r = mysql_fetch_array($zap);
if ($r['id'] >= 0)
echo '1';
?>