PreparedMeh

<?php
include_once "php/session.php";
include_once 'php/sqlite.php';

if (isset($_POST["passphrase"])) {
    try {
        $dbh = new PDO('sqlite:db/mdytdb');
        $dbh -> setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    } catch(PDOException $e) {
        print 'Exception : ' . $e -> getMessage();
    }
    $stmt = $dbh -> prepare("SELECT * FROM uzivatele WHERE jmeno = :jmeno AND heslo = :heslo LIMIT 1");
    $hash = crypt($_POST["passphrase"], '$2y$08$dvacetdvaznakuosumosum$');
    $stmt -> bindParam(':jmeno', $_POST["username"]);
    $stmt -> bindParam(':heslo', $hash);
    $stmt -> execute();
//protože PDO rowCount() v nasazený verzi php nefunguje:
    $rows = $stmt -> fetchAll();
    $rowsCount = count($rows);
    if ($rowsCount == 1) {
        echo "Login OK.";
    } else {
        echo "Login Not OK.";
    }
    terminateSQLite();
}
?>