<?php

    include "db.php";

    session_start();

    if ($_SERVER['REQUEST_METHOD'] == 'POST') {

        $enteredUsername = strtolower($_POST['inputUsername']);

        $enteredPassword = $_POST['inputPassword'];

        $hashedPassword = hash('tiger192,4', $enteredPassword);

        if (("" == trim($_POST['inputUsername'])) or ("" == trim($_POST['inputPassword']))) {

            echo '<div class="alert alert-danger text-center" style="margin:20px;" role="alert">No data has been entered, please check and try again.</div>';

        }

        else {

            $sql1 = "SELECT `username` FROM `login` WHERE `username`='$enteredUsername' AND `password`='$hashedPassword'";

            if ($query_run = mysqli_query($conn,$sql1)) {

                $query_num_rows = mysqli_num_rows($query_run);

                if ($query_num_rows == 0) {

                    echo '<div class="alert alert-danger text-center" style="margin:20px;" role="alert">Username or Password was invalid, please check and try again.</div>';

                }

                else if ($query_num_rows == 1) {

                    echo '<div class="alert alert-success text-center" style="margin:20px;" role="alert">Login successful.</div>';

                    $_SESSION['loggedin'] = 'yes';

                    $_SESSION["username"] = $enteredUsername;

                    //$locationLogin = 'Location: ;

                    //header($locationLogin);

                }

            }

        }

    }

?>