Untitled

<?php
session_start();
if(!empty($_SESSION['user'])) {
echo '<script>location.replace("index.php");</script>';
}
include('../connect_main.php');
?>
<html>
<head>
<title>Admin Panel | Login</title>

</head>
<body>
<center>
<form method='post'>
Username :<br /><input type='text' name='username'><br />
Password :<br /><input type='text' name='password'><br />
<input type='submit' value='Login' name='login'>
</form>
<br /><br />
<?php
if(isset($_POST['login'])) {
$username = $_POST['username'];
$password = $_POST['password'];

$query=mysql_query("SELECT * FROM adm WHERE un='$username' AND pw='$password'");
$count=mysql_num_rows($query);

if($count == 1) {
$_SESSION['user'] = $username;
echo '<script>location.replace("index.php");</script>';
}else {
echo "Pogresan password ili username!";
}
}
?>
</center>
</body>
</html>
<?php
session_start();
if(empty($_SESSION['user'])) {
echo '<script>location.replace("login.php");</script>';
}
include('../connect_main.php');
?>
<html>
<head>
<title>Admin Panel | Pocetna</title>

</head>
<body>
<center>
<h3>Dodaj obavestenje!</h3><br />
<form method='post'>
Naslov :<br /><input type='text' name='naslov'><br />
Text :<br /><textarea name='text'></textarea><br />
<input type='submit' value='Dodaj' name='subm'>
</form>
<br /><br />
<?php
if(isset($_POST['subm'])) {
$naslov = $_POST['naslov'];
$text = $_POST['text'];

mysql_query("INSERT INTO obavestenja(naslov, text) VALUES('$naslov', '$text')") or die("Greska!");

echo "Uspesno!";
}
?>
<br /><br />
<br />
<?php
$query=mysql_query("SELECT * FROM obavestenja");
while($red=mysql_fetch_array($query)) {
echo "". $red['naslov'] ." - <a href='del.php?naslov=". $red['naslov'] ."'>Obrisi</a><br />";
}
?>
<br /><br />
<a href='logout.php'>Logout</a>
</center>
</body>
</html>