Untitled

<?php
	$username = $_POST['username'];
	$password = $_POST['password'];

	$connection = mysqli_connect("localhost", "root", "", "telefonija");
	$query = mysqli_query($connection, "SELECT id, username, password, brojposiljki, limitposiljki FROM korisnici WHERE username = '$username'");
	if (mysqli_num_rows($query) == 0) {
		echo "Pogresio si username";
		header("Refresh:3; ../index.php");
	} else {
		if ($password == "") {
			echo "Password ne sme biti prazno polje";
			header("Refresh:3; ../index.php");
		} else {
			$data = mysqli_fetch_assoc($query);

			session_start();
				if ($password == $data['password']) {
					$_SESSION['id'] = $data['id'];
					$_SESSION['username'] = $username;
					$_SESSION['brojposiljki'] = $data['brojposiljki'];
					$_SESSION['limitposiljki'] = $data['limitposiljki'];

					header("Location: ../telefonija.php");
				} else {
					echo "Pogresio si lozinku ili username.";
					header("Refresh:3; url='../index.php");
				}
			session_commit();
		};
	};
?>

<html>
	<title>Loading...</title>
</html>