<?php

if $_POST['login']{
$user = htmlspecialchars(mysql_real_escape_string(trim($_POST['user'])));
$pass = htmlspecialchars(mysql_real_escape_string(trim($_POST['pass'])));
$sifpass md5($pass);
//OVERENI
$vysledek = mysql_query("SELECT * FROM uzivatele WHERE uzivatel=".$user." AND heslo=".$sifpass." LIMIT 1");
$overeni = mysql_num_rows($vysledek);
$overeniprosession = mysql_fetch_array($vysledek);

if($overeni == 1){
	session_start();

  $hash = generovat_hash(15);
  mysql_query("UPDATE uzivatele SET uzivatel_hash='".$hash."' WHERE uzivatel='".$jmeno."'");
  $_SESSION['nick'] = $jmeno;
  $_SESSION['hash'] = $hash;
  $_COKIES['nick'] = $jmeno;
  $_SESSION['row'] = $overeni;
}else{echo "No lol!:D";}
}

echo "<div class='log'> \n";
echo "<form name='login' method='post'> \n";
echo "Uživatelské jmeno: <input name='user' class='' /><br /> \n";
echo "Uživatelské heslo: <input name='pass' type='password' class='' /><br /> \n";
echo "<input type='submit' name='login' value='Přihlásit' /> \n";
echo "</form>";
echo "</div>";

if(!empty($_GET['logout']) && $_GET['logout']="yes") {session_destroy();}

?>