<?php
if(isset($_COOKIE['userid'])){
      //header("Location: index.php");

    } else {

             if(isset($_POST['submit'])){
                 $connect=mysql_connect("localhost","root","vertrigo") or die(mysql_error());
                 mysql_select_db("nowaday",$connect) or die(mysql_error());

                 $user=mysql_real_escape_string(htmlspecialchars($_POST['user']));
                 $password=mysql_real_escape_string(htmlspecialchars($_POST['password']));
                 $password=md5($password);
                 $sql=mysql_query("SELECT id,password,cookie FROM `users` WHERE username='{$user}' AND password='{$password}' LIMIT 1",$connect) or die(mysql_error());
                    if(mysql_num_rows($sql)){
                        echo "El select dio true valor!";
                    }
                     if($row = mysql_fetch_array($sql)){
                           $id=$row['id'];
                           $password=$row['password'];
                           $time=md5(time().$password);
                           $userid=$id.":".$time;


                                     setcookie("userid",$userid,time() +3600*24*120);
                                     list($id_user,$hash) = explode(':',$_COOKIE['userid']);
                                     $vamoAver = mysql_query("UPDATE `users` SET cookie='{$hash}' WHERE id='{$id}'",$connect) or die(mysql_error());
                                     if($vamoAver){
                                        echo "El query dio true asi que esto tiene que funcar :P";
                                     }
                                     //header("Location: index.php");


                     } else {

                        // header("Location: error.php");

                     }

            } else {
//mostrar contenido oculto
}
}
?>