Untitled

<?php @session_start();


if(isset($_REQUEST['btnUlogujse'])){

	$username=$_REQUEST['tbUsername'];
	$password=$_REQUEST['tbPassword'];
	include('konn.php');
	$upitUlog="SELECT * FROM korisnici WHERE username='$username' AND password='$password'";
	$rezUlog=mysqli_query($conn,$upitUlog);
	if($rezUlog){
		$niz=mysqli_fetch_array($rezUlog);
		$_SESSION['idKor']=$niz['idKor'];
		$_SESSION['username']=$niz['username'];
		$_SESSION['idUloge']=$niz['idUloge'];
		$_SESSION['uloga']=$idUloga;
		switch($idUloga){

			case '1':
			header("location:index.php?1");
			break;
			case '2':
			header("location:index.php?2");
			break;
		}

	}else{


		echo "Ne postoji korisnik sa tim kor.imenom i lozinkom";
	}mysqli_close($conn);
}

 ?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
  <script type="text/javascript" >
  function kreiranje(str)
{
	if (str.length==0) {
    document.getElementById("search").innerHTML="";

    return;
  }
  if (window.XMLHttpRequest) {
    // code for IE7+, Firefox, Chrome, Opera, Safari
    xmlhttp=new XMLHttpRequest();
  } else {  // code for IE6, IE5
    xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");
  }
  xmlhttp.onreadystatechange=function() {
    if (xmlhttp.readyState==4 && xmlhttp.status==200) {
      document.getElementById("ispisPretrage").innerHTML=xmlhttp.responseText;

    }
  }
  xmlhttp.open("GET","pretraga.php?search_text="+str,true);
  xmlhttp.send();
}


  </script>
</head>
<body>
<form action='index.php' method='post'>
<?php if(!isset($_SESSION['idKor'])){ ?>
<table border="1">
<tr><th colspan='2'>Logovanje</th></tr>
<tr><th>username</th><th>password</th></tr>
<tr><td><input type="text" name="tbUsername"/></td><td><input type="password" name="tbPassword"/></td></tr>
<tr><td colspan='2'align="center"><input type="submit" name="btnUlogujse" value="Uloguj se"/></td></tr>
</table>
<a href="registracija.php">Registruj se!</a>
<?php }else{?>
<a href="logout.php">logout</a>
<p>
<?php
			if(isset($_SESSION['idUloge'])){

			print "Dobrodošli:".$_SESSION['username'];
			}
			?>
<?php  } ?>
</form><br/>

 <div id="pretraga">
<form action="" method="post" name="search" id="search">
 <input type="text" name="search_text" placeholder="pretrazi dela" onkeyup="kreiranje(this.value);"/><br/><br/>
 <?php


 if(isset($_GET['izabranoDelo'])){

	 $search_text=$_REQUEST['izabranoDelo'];
	 if(!empty($search_text)){
	  include("konn.php");

	 $upitP=" SELECT * FROM umetnickadela WHERE naziv LIKE '%$search_text%'";
	 $rezP=mysqli_query($conn,$upitP) or die("greska u upitu".mysqli_error());
	 echo '<table border="1">';
	 while($niz=mysqli_fetch_array($rezP)){
		 echo"<tr><td><a href='dodatneslike.php?idDela=".$niz["idDela"]."'>".$niz['naziv']."</a></td>
		           <td>".$niz['podaci']."</td>
				   <td><img src=".$niz['slika']." width=100 height=100/></td>";
	 if($_SESSION['idKor']){
				  echo "<td>".$niz['datumPostavke']."</td>
				   <td>".$niz['cena']."</td>";
				   }
		echo"</tr>";

	 }echo '</table>';
 }  }

 echo'</form>';
 echo'<div id="ispisPretrage"></div>';
 echo'</div><div>';


  include("konn.php");
  $upit1="select * from umetnickadela";
  $rez1=mysqli_query($conn,$upit1) or die("greska u upitu".mysqli_error());
  	 echo '<form action="" method="request"><table border="1">';
	 while($niz1=mysqli_fetch_array($rez1)){
		 echo"<tr><td>".$niz1['naziv']."</td>
		           <td>".$niz1['podaci']."</td>
				   <td><img src=".$niz1['slika']." width=100 height=100/></td>";
	 if($_SESSION['idKor']){
				  echo "<td>".$niz1['datumPostavke']."</td>
				   <td>".$niz1['cena']."</td>";
				   }
		echo"</tr>";

	 }echo '</table></form>';
 ?>

 </div>
 </body></html>