auth.php

<?php
include 'dbcon.php';

if(isset($_POST['submit'])){


        $firstname = $_POST['fname'];
        $lastname = $_POST['lname'];
        $email = $_POST['email'];
        $password = $_POST['password'];

        if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
             $emailErr = "Invalid email format";
        }

    $dir = "users/$firstname";

    try{
        $sql = 'SELECT COUNT(*) FROM users WHERE email = :email AND password = :password';
        $s = $pdo->prepare($sql);
        $s->bindValue(':email', $email);
        $s->bindValue(':password', $password);
        $s->execute();

    }catch(PDOException $e){
        $error  = 'error checking if user already exists';
        echo $error;
        exit();
    }

    $row = $s->fetch();


    if ($row[0] > 0) {
        $alreadExists="This user already exists";
        include 'index.php';
    }else{
            try{
            $sql = 'INSERT INTO users SET
            first_name = :first_name,
            last_name = :last_name,
            email = :email,
            password = :password';
            $s = $pdo->prepare($sql);
            $s->bindValue(':first_name', $firstname);
            $s->bindValue(':last_name', $lastname);
            $s->bindValue(':email', $email);
            $s->bindValue(':password', $password);
            $s->execute();

        If(!file_exists($dir)){
            $createfolder = mkdir("$dir", 0777);
        }

    }
    catch(PDOException $e){
        $error  = 'error adding user ';
        echo $error;
        exit();
    }
    session_start();
    include 'main.php';
    }
}

if(isset($_POST['signin'])){
    $email = $_POST['email'];
    $password = $_POST['password'];

    try{
        $sql = 'SELECT * FROM users WHERE email = :email AND password = :password';
        $s = $pdo->prepare($sql);
        $s->bindValue(':email', $email);
        $s->bindValue(':password', $password);
        $s->execute();

    }catch(PDOException $e){
        $error  = 'error loggin in ' . $e->getMessage();
        include 'error.php';
        exit();
    }

    $row = $s->fetch();

    if ($row[0] > 0){
        session_start();
        $_SESSION['loggedIn'] = TRUE;
        $_SESSION['email'] = $_POST['email'];
        $_SESSION['password'] = $password;
        $_SESSION['id'] = $row[0];
        $_SESSION['first_name'] = $row[1];
        include 'main.php';
    }
    else{
        session_start();
        unset($_SESSION['loggedIn']);
        unset($_SESSION['email']);
        unset($_SESSION['password']);
        $message = "email address or password was incorrect";
        include 'index.php';
    }
}
?>