<?php
        session_start();
        error_reporting(0);
        if($_POST['login']){
        $username = $_POST['nick'];
        $password = $_POST['pw'];
        $username = str_replace("'","",$username);
        $username = str_replace("<","",$username);
        $password = str_replace("<","",$password);
        $password = str_replace("'","",$password);
        $username = str_replace("š","a",$username);
        $username = str_replace("ž","z",$username);
        $password = str_replace("ć","c",$password);
        $password = str_replace("č","c",$password);
        $password = str_replace("đ","d",$password);
        $vrati = md5($password);
        $isto = mysql_query("SELECT * FROM slusaoci WHERE username='$username' and password='$vrati'") or die(mysql_error());
        if(mysql_num_rows($isto) == 1){
        $_SESSION['username'] = $nick;
        $_SESSION['password'] = $password;  //Ako provjeravas na ostalim fajlovima md5 pw iz sesije onda ovdje stavi $vrati
        echo "<script>window.location=\"index.php\"</script>";
        $ip2 = getenv('REMOTE_ADDR');
        mysql_query("UPDATE slusaoci SET ip='$ip2' WHERE username='$username'")or die(mysql_error());
        }

        else {
        echo "<center><p style='color:red;font-size:12px;'>Netacan username ili password</p></center>";
        }
        }?>