fgdsgsd

<?php
// LOGOVANJE
	function LoginUser($username, $password)
	{
		global $config;
		global $string;

		if (empty($username))
		{
			$_SESSION['error_msg'] = "Niste upisali korisnicku ime.";
		}
		else if(empty($password))
		{
			$_SESSION['error_msg'] = "Niste upisali korisnicku sifru.";
		}

		else if(isset($username) && isset($password))
		{
			$Username = mysql_real_escape_string($username);
			$accpass = WhirlpoolHash($password);
			$Password = mysql_real_escape_string($accpass);

			$sql = "SELECT * FROM accounts WHERE `name` = '$Username' AND `password` = '$Password'";
			$query = mysql_query($sql);

			$sql2 = "SELECT * FROM accounts WHERE `name` = '$Username'";
			$query2 = mysql_query($sql2);

			if(mysql_num_rows($query2) == 1)
			{
				if(mysql_num_rows($query) == 1)
				{
					$_SESSION['logged'] = "true";
					$_SESSION['username'] = $Username;
					$_SESSION['error_msg'] = "Logirani ste.";
					header("Location: panel.php");
					exit();
				}
				else
				{
					$_SESSION['error_msg'] = "Pogresna sifra.";
					return true;
				}
			}
			else
			{
				$_SESSION['error_msg'] = "Korisnik <b>$Username</b> nije pronadjen.";
				return true;
			}
		}
	}