login.php

<?php
	session_start();
	require 'dbh.php';

	$username = $conn->escape_string($_POST['username']);
	$pass = $conn->escape_string($_POST['password']);
	$sql = "SELECT * FROM korisnici where imeKorisnika = '$username'";
	$resault = $conn->query($sql);
	if ($resault->num_rows > 0) {
		$user = $resault->fetch_assoc();
		if ($username == $user['imeKorisnika'] && $pass == $user['sifraKorisnika']) {
			$_SESSION['id'] = $user['id'];
			$_SESSION['logovan'] = 1;
			header("Location: ../logovan.php");
		}
		else{
			echo"Sifra ili username nisu ispravni";
		}
	}
	else{
		$_SESSION['message'] = "Nema takvih korisnika";
		header("Location: ../index.php");
	}