<?php
	$username = $_POST['username'];
	$password = md5($_POST['password']);

	if($username && $password){
		require_once 'Db_functions.php';
		$conn = db_open();
		$userStr = "SELECT GEBRUIKERSNAAM FROM GEBRUIKER WHERE GEBRUIKERSNAAM = '" . $username . "'";
		$userresult = sqlsrv_query($conn, $userStr, null);
		if($userresult === false) {
			session_destroy();
			die();
	  	}
	  	$passStr = "SELECT WACHTWOORD FROM GEBRUIKER WHERE GEBRUIKERSNAAM = '" . $username . "'";
		$passresult = sqlsrv_query($conn, $passStr, null);
	  	if($passresult === false) {
			session_destroy();
			die();
	  	}

	  	while($row = sqlsrv_fetch_array($passresult, SQLSRV_FETCH_ASSOC)){
			if($row['WACHTWOORD'] == $password){
		  		$_SESSION['username'] = $username;
		  		db_close($conn);
		  		echo'login succesvol';
			}
			else{
		  		session_destroy();
		  		db_close($conn);
			}
		}
	}
?>