<?php

include("mysql.php");

$user=$_POST['user'];
$pass=$_POST['pass'];


session_start();
session_create();
$_SESSION['logedin']= "1";
$_SESSION['id'] = $user;
$_SESSION['stuffForSecurity']="SOME STUFF";



$query="SELECT password, username FROM $users WHERE username='$user' AND password='$pass' ";


$q=mysql_query($query) or die(mysql_error());
$row=mysql_fetch_assoc($q);
    if($row['password'] != $pass) {
        echo "<SCRIPT language='JavaScript'>alert('Uporabniško ime ali geslo ni bilo pravilno. Preusmerjen boš nazaj.');</SCRIPT>";
        echo "<meta HTTP-EQUIV='REFRESH' content='0; url=index.html'>";
    } else {
        $_SESSION['myusername'] = $user;
        $_SESSION['mypassword'] = $pass;
        echo "<meta HTTP-EQUIV='REFRESH' content='0; url=user/index.php'>";
    }

?>