<?php
	require 'connect.php';
	$sql = "SELECT * FROM usuarios WHERE mail='". $l_username ."'";
	$result = $conn->query($sql);
	$dato = mysqli_fetch_assoc($result);


	if(isset($_POST["button"])){
		$btn=$_POST["button"];
		if($btn=="Entrar"){
			$l_username = $conn->real_escape_string($_POST["usr"]);
			$l_password = $conn->real_escape_string($_POST["pwd"]);

			if($l_username == $dato["mail"]) {
				if($l_password == $dato["contrasena"]) {
					echo '<script type="text/javascript">alert("Logged In");</script>';
					if($dato["tipo"] == "administrador") {
						$_SESSION["tipo"] = "administrador";
					} elseif ($dato["tipo"] == "moderador") {
						$_SESSION["tipo"] = "moderador";
					} else {
						$_SESSION["tipo"] = "usuario";
					}
					echo '<script>window.location = "../index.php";</script>';
				} else {
					echo '<script type="text/javascript">alert("Bad password");</script>';
				}
			} else {
				echo 'user: '. $l_username .' pass: '. $l_password .'  -  Dato Mail:'. $dato["mail"] .' Dato pw:'. $dato["contrasena"] .' Dato tipo: ' . $dato["tipo"] .'';
				echo '<script type="text/javascript">alert("Bad username");</script>';
			}
		}
	}
?>