<?php
 // Dobiti variable sifre iz forme u login.php fajlu
 $username = addslashes($_POST['username']);
 $password = addslashes($_POST['password']);

 // Mysql inject (ZA USER I PASS)

 // povezati sa data bazom
$dbhost = 'localhost';  // Mysqli HOST
$dbuser = 'root';  // Mysqli nick
$dbpass = "";  // mysqli Lozinka
$dbname = 'login'; // Ime Databaze

$conn = new mysqli($dbhost, $dbuser, $dbpass, $dbname);

 // Query data baze sa username
 $result = mysql_query($conn, "select * from users where username = '$username' and password = '$password'")       or die("Failed to query database " .mysql_error());
 $row = mysql_fetch_array($result);
 if ($row['username'] == $username && $row['password'] == $password ){
    echo "Uspesan login! Dobrodosao" .$row['username'];
 } else {
    echo "Login nije uspesan :(";
 }

?>