<?php
session_start();

if ($_SERVER['REQUEST_METHOD'] == 'GET')
{
    session_destroy();
    header("location: ../public/resultateninvoer.php");
}

require_once("database.php");
$username = $_POST["username"];
$password = $_POST["password"];

$sql = "SELECT * FROM `tbl_users`
WHERE `username` = '$username';";
$user = $database->query($sql)->fetch(PDO::FETCH_ASSOC);

if (password_verify($password, $user["password"]))
{
    $_SESSION["logged"] = true;
    $_SESSION["user"] = $username;

    header("location: ../public/todolist.php");
}
else
{
    $_SESSION["logged"] = false;

    header("location: ../public/resultateninvoer.php");
}
?>