<?php
include "connect.php";

if(isset($_SESSION['name'])){
  //login is not necessary
  include 'logged-in.php';
}else{
  //show the login
  ?>
  <link rel="stylesheet" type="text/css" href="login.css">
  <center>
    <form class="form" method="POST" action="">
      <p class="logintext">Username:</p><input type="text" name="username"/><br><br>
      <p class="logintext">Password:</p><input type="password" name="pass"/><br><br><br>
      <input type="submit" name="submit"/><br>
    </form>
  </center>
  <?php
  if(isset($_POST['username'])){
    $username = $_POST['username'];
    $password = $_POST['pass'];

    $sql = "SELECT * FROM smf_members WHERE member_name = '$username'" or die ('query did not work');
    $query = mysqli_query($conn, $sql);

    if ($query = 1) {
      $row = mysqli_fetch_row($query);
      $userId = $row[0];
      $dbUsername = $row[1];
      $dbPassword = $row[2];
    }else{
      echo 'query = 0';
    }

    //if submited check that everything is ok
    if ($username == $dbUsername && $password == $dbPassword){
      //if correct show logged-in.php and set the session name to the username
      include 'logged-in.php';
      $_SESSION['name'] = $_POST['username'];
    }else{
      //if not correct display "Did you type the right password?"
      echo "did you type the right password? :/";
    }
  }
}
?>