<?php
// Connectie naar Database
mysql_connect('localhost', 'bartbergma_meeeeep', 'meeep');
mysql_select_db('meeeeeep');

// Gegevens ophalen uit login form en benoemen
$username = $_POST['username'];
$password = $_POST['password'];

// Controleren of iets is ingevuld
if (!empty($username) || !empty($password))
{
    // Beveiligen tegen SQL Injections
    $username = stripslashes($username);
    $password = stripslashes($password);
    $username = mysql_real_escape_string($username);
    $password = mysql_real_escape_string($password);

    // Controleren of inlog gegevens kloppen
    $hash = hash_password($username, $password);

    $query = "SELECT * FROM users WHERE username='$username' and password='$hash'";
    $result = mysql_query($query);

    $count = myql_num_rows($result);
    if($count == 1)
    {
        session_register("username");
        session_register("password");
        header("location:login_succes.php");
    }
    else
    {
        echo "Wachtwoord of gebruikersnaam verkeerd";
    }
}
else
{
    echo "Er is iets niet ingevuld.";
}
?>