<?php
        session_start();
        error_reporting(0);
        if($_POST['login']){
        $username = $_POST['nick'];
        $password = $_POST['pw'];
        $username = str_replace("'","",$username);
        $username = str_replace("<","",$username);
        $password = str_replace("<","",$password);
        $password = str_replace("'","",$password);
        $username = str_replace("š","a",$username);
        $username = str_replace("ž","z",$username);
        $password = str_replace("ć","c",$password);
        $password = str_replace("č","c",$password);
        $password = str_replace("đ","d",$password);
        $vrati = md5($password);
        $isto = mysql_query("SELECT * FROM slusaoci WHERE username='$username' and password='$password'") or die(mysql_error());
        if(mysql_num_rows($isto) == 1){

        if(isset($_POST['remember'])){
        setcookie("username", $username, time()+60*60*24*100, "/");
        setcookie("password", $vrati, time()+60*60*24*100, "/");
        echo "<script>window.location=\"index.php\"</script>";
        } else {
        setcookie("username", $username);
        setcookie("password", $vrati);
        echo "<script>window.location=\"index.php\"</script>";
        }
        $ip2 = getenv('REMOTE_ADDR');
        mysql_query("UPDATE slusaoci SET ip='$ip2' WHERE username='$username'")or die(mysql_error());
        } else {
        echo "<center><p style='color:red;font-size:12px;'>Netacan username ili password</p></center>";
        } }?>