<?php

session_start();

if (($_POST["login"]!="") and ($_POST["pass"]!="")) {

$AUTH_USER=$_POST["login"];

$AUTH_PW=$_POST["pass"];



    include "db.php";

    $sql = mysql_query("SELECT * FROM Spravce WHERE login = '$AUTH_USER' AND pass = '".md5($AUTH_PW)."' ");

    if (mysql_num_rows($sql) == 0)

        {

        mysql_close($con);

        Header('Location: ../index.php?pages=guestbook');

        exit;



        }

    else

        {

        $row = mysql_fetch_array($sql, MYSQL_ASSOC);

        $_SESSION['logged'] = $row["login"];//prihlaseny uzivatel

        $_SESSION['logged_id'] = $row["sid"];

        Header('Location: ../index.php');

        exit;

        }





    }

else

    {

    Header('Location: ../index.php?pages=login');

    exit;



}



?>