if (isset($_POST['username']) && isset($_POST['password']))
{
$username = addslashes($_POST['username']);
$password = addslashes($_POST['password']);

$kriptovan_pass = md5($password);
$query = "SELECT * FROM adm WHERE username='$username' and password='$kriptovan_pass'";
$rezultat = mysql_query($query) or die("SQL error: ".mysql_error()."<br />\n");

if (mysql_num_rows($rezultat) > 0)
{
    $_SESSION['admin'] = $username;
    echo 'Uspešno ste se prijavili, bicete redirektovani za 2 sekunde.';
    echo '<script type="text/javascript" language="JavaScript">
          <!--
          setTimeout("Redirect()",2000);
          function Redirect()
            {
            location.href = "?strana=adm";
            }
          // -->
          </script>
          ';
}
else{
    echo 'Netačno korisničko ime ili šifra.';
}

}