<?php # - main.php

if (!defined('BASE_URL')) {

  // Need the BASE_URL, defined in the config file:
  require_once('../includes/config.php');

  // Redirect to index page:
  $url = BASE_URL . 'index.php';
  header ("Location: $url");
  exit;

} // IF (!defined('BASE_URL'))

?>
    <?php
            if (isset($_POST['login_submit'])) {

                //echo "<pre>", print_r($_POST), "</pre>";

                $username = mysqli_real_escape_string($db, $_POST ['username']);
                $password = mysqli_real_escape_string($db, $_POST['password']);

                $errors = []; // betyder at det er et array()

                if ($username == "") {
                    $errors['username'] = "Brugernavn skal udfyldes";
                }

                if ($password == "") {
                    $errors['password'] = "Password skal udfyldes";
                }

                if (empty($errors)) {

                    $sql = "SELECT * FROM users WHERE username = '$username'";
                    $result = mysqli_query($db, $sql);

                       if(mysqli_num_rows($result) > 0) {
                            while($row = mysqli_fetch_array($result)) {
                                 if(password_verify($password, $row["password"])) {
                                    //return true;
                                    $_SESSION['user_id'] = $user_id;
                                    $_SESSION['username'] = $username;
                                    header("location: ../admin/");
                                 }
                                 else
                                 {
                                    //return false;
                                    $login_error = "Brugernavn eller adgangskode er forkert.";
                                 }
                            }
                       }
                       else
                       {
                            $login_error = "Brugernavn eller adgangskode er forkert.";
                       }

                }

            }

        ?>

        <div class="top-content">
            <div class="inner-bg">
                <div class="container">
                    <div class="row">
                        <div class="col-sm-6 col-sm-offset-3 form-box">
                            <div class="form-top">
                                <div class="form-top-left">
                                    <p><a href="../index.php"><i class="fa fa-arrow-circle-left" aria-hidden="true"></i> Tilbage</a></p>
                                    <h3>Log ind til Admin Panelet</h3>
                                    <p>Indtast dit brugernavn og adgangskode for at log ind:</p>
                                </div>
                                <div class="form-top-right">
                                    <i class="fa fa-lock"></i>
                                </div>
                            </div>
                            <div class="form-bottom">
                                <?php
                                    if (isset($login_error)) {
                                        echo "<p> $login_error </p>";
                                    }
                                ?>
                                <form role="form" action="?p=main" method="post" class="login-form">
                                    <?php
                                        if (isset($errors['username'])) {
                                             echo $errors['username'];
                                        }
                                    ?>
                                    <div class="form-group">
                                        <label class="sr-only" for="username">Username</label>
                                        <input type="text" name="username" placeholder="Username..." class="form-control" id="username">
                                    </div>
                                    <?php
                                        if (isset($errors['password'])) {
                                             echo $errors['password'];
                                        }
                                    ?>
                                    <div class="form-group">
                                        <label class="sr-only" for="password">Password</label>
                                        <input type="password" name="password" placeholder="Password..." class="form-control" id="password">
                                    </div>
                                    <button type="submit" name="login_submit" class="btn">Log ind</button>
                                </form>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>