Balkan SA:MP

<?php$con = mysqli_connect("localhost","root","","sa-mp");if (mysqli_connect_errno()){	echo "Greska sa SA-MP databazom: " . mysqli_connect_error();}  session_start();if(isset($_POST['pname']) && isset($_POST['ppass'])){	if(!isset($_SESSION['playername']))	{		$username = stripslashes($_REQUEST['pname']);		$username = mysqli_real_escape_string($con,$username);		$password = stripslashes($_REQUEST['ppass']);		$password = mysqli_real_escape_string($con,$password);		$query = "SELECT * FROM `igraci` WHERE ime='$username' and lozinka='$password'";		$result = mysqli_query($con,$query) or die(mysql_error());		$rows = mysqli_num_rows($result);		if($rows==1) // uspesan login		{			 $_SESSION['playername'] = $username;		}		else		{			$poruka = 'GreskaAAAAAAA';		}	}}function template_manual(){	global $context, $scripturl, $txt;	if(!isset($_SESSION['playername']))	{			echo '					<div class="tborder login">			<div class="cat_bar">				<h3 class="catbg">					<span class="ie6_header floatleft"><img src="http://localhost/boris/Themes/gearbox/images/icons/login_sm.gif" alt="" class="icon">Unesite korisničko ime i lozinku sa DM servera</span>				</h3>			</div>			<span class="upperframe"><span></span></span>			<div class="roundframe"><br class="clear">						<form action="index.php?action=ucp" method="POST">				<dl>					',$poruka,'					<dt>Korisničko ime:</dt>					<dd><input name="pname" size="20" value="" class="input_text" type="text"></dd>					<dt>Lozinka:</dt>					<dd><input name="ppass" value="" size="20" class="input_password" type="password"></dd>				</dl>				<p><input value="Prijava" class="button_submit" type="submit"></p>			</div>			</form>			<span class="lowerframe"><span></span></span>		</div>';	}	else	{		//unset($_SESSION['playername']);	}}