<?php
  require "../include/db_connect.php";

  $username = $_POST['username'];
  $password = $_POST['password'];

  $username = mysql_real_escape_string($username);
  $password = mysql_real_escape_string($password);

  //if($username == '' || $password == ''){
  //  Header( "Location: ../index.php");
  //}

  $provera = mysql_query("select USERNAME, PASSWORD from users where username = '$username' and password = '$password'") or die(mysql_error());
  $red = mysql_fetch_object($provera);

  $user = $red -> USERNAME;
  $pass = $red -> PASSWORD;

  if($user == $username && $pass == $password){
      Header( "Location: ../home.php" );
  }
  else{
      Header( "Location: ../index.php" );

      }

?>