aboutsummaryrefslogtreecommitdiff
path: root/user/login.php
blob: a927d02d3686bd4c94cfbf12472b8f4ddaa57288 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
<?php
require '../config.php';
require_once(TEMPLATES_PATH . "/header.php");
session_start();

$conn = new PDO($config['db']['dsn'], $config['db']['username'], $config['db']['password']);
$query = "SELECT id, username, password FROM users WHERE username = '$_POST[username]'";
$result = $conn->query($query)->fetch();

if(password_verify($_POST['password'], $result['password'])) {
    echo 'password verified';
    $_SESSION['user_name'] = $result['username'];
    $_SESSION['user_id'] = $result['id'];
} else {
    echo 'wrong password';
}

header("Refresh: 2; URL=$_SERVER[HTTP_REFERER]");

require_once(TEMPLATES_PATH . "/footer.php");
?>