Untitled

<?php
	session_start();

	if (isset($_REQUEST['inputName']))
		$_SESSION['Name'] = $_REQUEST['inputName'];

	$servername = "5bi_s01078";
	$username = "root";
	$password = "";

	// Create connection
	$conn = mysqli_connect("localhost", $username, $password, $servername);

	// Check connection
	if (!$conn) {
	  die("Connection failed: " . mysqli_connect_error());
	}
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
	"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
	<title>Index - Login</title>

	<style>
		div
		{
			border-radius: 10px;
			background-color: #ffd9b3;
			padding: 3%;
			width: 40%;
		}
		body
		{
			font-family: serif;
			font-size: 110%;
      padding: 200px;
		}
	</style>

	<script type="text/javascript" language="javascript">
      function validaForm() {
	  //funzione che controlla parzialmente i dati inseriti
		if (document.home.username.value=="") {
			alert("Inserire username");
			return false;
		}
      if (document.home.password.value=="") {
        alert("Inserire password");
        return false;
      }
      //alert("Dati inseriti correttamente");
      return true;
      }

			function validaLogin()
			{
				alert("Username o password non validi.");
				return false;
			}
    </script>
</head>

<body>
  <center>
	<div>
	<form action="home.php" name="submit" method="post">
	<h3>Cinefirns</h3>
	 <table>
			<tr>
				<td>Username</td>
				<td><input type="text" name="username" value=""></td>
			</tr>
      <tr>
				<td>Password</td>
				<td><input type="password" name="password" value=""></td>
			</tr>
	</table>
	<br />
	<table>
		<tr>
			<td>
				<center><input type="submit" value="Login"></center></form>
			</td>
			<td>
				<form action="signup.php" method="post">
					<center><input type="submit" value="Registrati"></center>
				</form>
			</td>
		</tr>
	</table>
	</div>

	<?php
		$new_password = password_hash($_POST['password'], PASSWORD_DEFAULT);
		$username = $_POST['username'];

		$sql = "SELECT Username, Password
		        FROM 090218Utente
						WHERE Username ='".$username."' AND Password ='".$new_password."'";

		$result = mysqli_query($conn, $sql);

		if ($result->num_rows > 0)
	  {
	    // output data of each row
	    while($row = $result->fetch_assoc())
	    {
	      $_SESSION['username'] = $username;
	    }

	    echo "</table><br />";
	  }
	  else
	  {
			echo '<script type="text/javascript">','validaLogin();','</script>';
	  }

		$conn->close();
	?>
</body>

</html>