<?php
session_start();
require_once 'database\database.php';

$login = $_POST['login'];
$haslo = $_POST['haslo'];


$user_query = $db->prepare('SELECT user FROM users WHERE user=:user AND pass=:pass');
$user_query->bindValue(':user', $login, PDO::PARAM_STR);
$user_query->bindValue(':pass',$haslo, PDO::PARAM_STR);
$user_query->execute();

$istnienie_uzytkownika = $user_query->rowCount();

if ($istnienie_uzytkownika>0)
{
    $wiersz = $user_query->fetch(PDO::FETCH_ASSOC);
    header('Location: form.php');
    $_SESSION['zalogowany'] = true;
    $_SESSION['id'] = $wiersz['id'];
}
else
{
    $_SESSION['user_e'] = "Nieprawidłowy login lub hasło";
    header('Location: login.php');
}