zaloguj.php

<?php
unset($_SESSION['zalogowany'];
    session_start();
    ob_start();
    require_once "connect.php";


        $login = filter_input(INPUT_POST, 'login', FILTER_SANITIZE_STRING);
        $haslo = $_POST['haslo'];



        if(!$login || empty($haslo)){
        $_SESSION['blad'] = '<span style="color:red">Uzupełnij wszystkie pola</span>';
            header('Location: index.php');

}

        $rezultat= $polaczenie->prepare("SELECT * FROM uzytkownicy WHERE user=:user LIMIT 1");
        $rezultat->bindParam(":user", $login,PDO::PARAM_STR);
        $user = null;
       $rezultat->execute();

    $wiersze = $rezultat->RowCount();
    if($wiersze ==0)
    {
        $_SESSION['blad'] = '<span style="color:red; font-size:18px;"><i>Nie ma takiego loginu w bazie danych</i></span>';
        echo "nie udalo sie";
ob_end_flush();
        exit();
    }

            $user = $rezultat->fetch(PDO::FETCH_OBJ);
        //  $hash = password_hash($user->pass, PASSWORD_BCRYPT);


            if (password_verify($haslo, $user->pass)) {

                $_SESSION['zalogowany'] = true;
                $_SESSION['id'] = $user->id;
                $_SESSION['user'] = $user->user;
                $_SESSION['drewno'] = $user->drewno;
                $_SESSION['kamien'] = $user->kamien;
                $_SESSION['zboze'] = $user->zboze;
                $_SESSION['email'] = $user->email;
                $_SESSION['dnipremium'] = $user->dnipremium;

                unset($_SESSION['blad']);
                $rezultat->closeCursor();
                header('Location: gra.php');
        }
        else
        {

    echo "blad";
ob_end_flush();
exit;
        }



ob_end_flush();
?>