<? include 'header.php'; ?>

<div id="content">

<?

if (isset($_POST['username']) && isset($_POST['password']))
{
$username = addslashes($_POST['username']);
$password = addslashes($_POST['password']);

konekcija();

$kriptovan_pass = md5($password);
$query = "SELECT * FROM users WHERE username='$username' and password='$kriptovan_pass'";
$rezultat = mysql_query($query) or die("SQL error: ".mysql_error()."<br />\n");

if (mysql_num_rows($rezultat) > 0)
{
    while($row = mysql_fetch_array($rezultat)) {
    $uid = $row['uid'];
    $admin = $row['admin'];
    if ($admin == '1'){
    $_SESSION['admin'] = $username;
    }
    $_SESSION['uid'] = $uid;
    }
    $_SESSION['user'] = $username;
    echo 'Uspešno ste se prijavili, bićete redirektovani za 2 sekunde.';
    echo '<script type="text/javascript" language="JavaScript">
          <!--
          setTimeout("Redirect()",2000);
          function Redirect()
            {
            location.href = "admin.php";
            }
          // -->
          </script>
          ';
}
else{
    echo 'Netačan username ili šifra!';

}}

else{

?>

<form method="post" action="index.php">
Korisnicko ime:<br /> <input type="text" class="form" name="username" /><br />
Šifra:<br /> <input type="password" class="form" name="password"><br />
<input type="submit" name="submit" value="Login" class="button" />
</form>

<?
}

?>

<br class="clear" />

</div>

<? include 'footer.php'; ?>