<?php
        $username = $_POST['nick'];
        $password = $_POST['pw'];
        $username = str_replace("'","",$username);
        $username = str_replace("<","",$username);
        $password = str_replace("<","",$password);
        $password = str_replace("'","",$password);
        $vrati = md5($password);
        if($_POST['login']){
        $isto = mysql_query("SELECT * FROM slusaoci WHERE username='$username' and password='$password'");
        if(mysql_num_rows($isto) == 1){

        if(isset($_POST['remember'])){
        setcookie("username",$username,time()+60*60*24*100);
        setcookie("password",$password,time()+60*60*24*100);
        echo "<script>window.location=\"index.php\"</script>";
        } else {
        setcookie("username",$username,false);
        setcookie("password",$password,false);
        echo "<script>window.location=\"index.php\"</script>";
        }
        $ip2 = getenv('REMOTE_ADDR');
        mysql_query("UPDATE slusaoci SET ip='$ip2' WHERE username='$username'");
        } else {
        echo "<center><p style='color:red;font-size:12px;'>Netacan username ili password</p></center>";
        } }?>