<?php
session_start();

        require_once "connect.php";


                $login = filter_input(INPUT_POST, 'login', FILTER_SANITIZE_STRING);
                $haslo = $_POST['haslo'];



                if(!$login || empty($haslo)){
                $_SESSION['blad'] = '<span style="color:red">Uzupełnij wszystkie pola</span>';
                        header('Location: index.php');

}

                $rezultat= $polaczenie->prepare("SELECT * FROM uzytkownicy WHERE user=:user LIMIT 1");
        $rezultat->bindParam(":user", $login,PDO::PARAM_STR);
        $user = null;
       $rezultat->execute();

        $wiersze = $rezultat->RowCount();
        if($wiersze ==0)
        {
                $_SESSION['blad'] = '<span style="color:red; font-size:18px;"><i>Nie ma takiego loginu w bazie danych</i></span>';
                echo "nie udalo sie";

                exit();
        }

                        $user = $rezultat->fetch(PDO::FETCH_OBJ);
                //      $hash = password_hash($user->pass, PASSWORD_BCRYPT);


                        if (password_verify($haslo, $user->pass)) {

                                $_SESSION['zalogowany'] = true;
                                $_SESSION['id'] = $user->id;
                                $_SESSION['user'] = $user->user;
                                $_SESSION['drewno'] = $user->drewno;
                                $_SESSION['kamien'] = $user->kamien;
                                $_SESSION['zboze'] = $user->zboze;
                                $_SESSION['email'] = $user->email;
                                $_SESSION['dnipremium'] = $user->dnipremium;

                                unset($_SESSION['blad']);
                                $rezultat->closeCursor();
                                header('Location: gra.php');
                }
                else
                {

        echo "blad";

exit;
                }




?>