<?php
session_start();
$username= $_POST['username'];
$password1= $_POST['password'];
$password=md5($password1);
if ($username && $password)
{
$connect= mysql_connect("localhost","root","")
or die ("nemorem se povezati");
mysql_select_db("avtohisa") or die ("Ne najdem baze");

$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$numrow= mysql_num_rows($query);

if ($numrow!=0)
{
 //code to login
while ($row= mysql_fetch_assoc($query))
{
    $dbusername =$row['username'];
    $dbpassword=$row['user_password'];
}
//check to see if they match
if ($username==$dbusername&& $password == $dbpassword)
{
 //echo "Prijavljen si! klikni <a href ='test.php'>sem</a> za vstop na skrito stran";
 $_SESSION['username']=$dbusername;
 $_SESSION['prijava']=true;

 header("Location:index.php");
 }
else
{
$_SESSION['nepravilnogeslo']=true;
header("Location:napake.php");

}
 }
else
    {
$_SESSION['uporabnikneobstaja']=true;
    header("Location:napake.php");

}


}
else
    {
    $_SESSION['prazno']=true;
    header("Location:napake.php");
    }

?>