<?php
/**
 * Created by PhpStorm.
 * User: Teije Uilkema
 * Date: 12-11-2018
 * Time: 19:16
 */
include('../database.php');
session_start();
$username = str_replace(" ", "", $_POST['username']);
$password = $_POST['password'];
// Checking input fields login page
if ($username != null && $password != null) {
    // Executing SQL statement for student accounts
    $sql = "SELECT * FROM leerlingusers WHERE login_username='$username' AND password='$password'";
    $result = mysqli_query($con, $sql);
    if (!$row = mysqli_fetch_assoc($result)) {
        // Executing SQL statement for teacher accounts
        $sql = "SELECT * FROM docentusers WHERE login_username='$username' AND password='$password'";
        $result = mysqli_query($con, $sql);
        if (!$row = mysqli_fetch_assoc($result)) {
            // Executing SQL statement for admin accounts
            $sql = "SELECT * FROM adminusers WHERE login_username='$username' AND password='$password'";
            $result = mysqli_query($con, $sql);
            if (!$row = mysqli_fetch_assoc($result)) {
                $_SESSION['login_error'] = "Onjuiste gebruikersnaam of wachtwoord!";
                header('Location: index.php');
            } else {
                setUsername($username, $con, "adminusers", $password);
                setSessionRank(2);
                header('Location: ../redirect.php');
            }
        } else {
            setUsername($username, $con, "docentusers", $password);
            setSessionRank(1);
            header('Location: ../redirect.php');
        }
    } else {
        setUsername($username, $con, "leerlingusers", $password);
        setSessionRank(0);
        header('Location: ../redirect.php');
    }
} else {
    $_SESSION['login_error'] = "Voer alle velden in!";
    header('Location: index.php');
}
function setSessionRank($rank) {
    $_SESSION['rank'] = $rank;
}
function setUsername($username, $con, $table, $password) {
    $sql = "SELECT username FROM ".$table." WHERE login_username='$username'";
    $result = mysqli_query($con, $sql);
    $count = mysqli_num_rows($result);
    if ($count > 0) {
        if ($row = mysqli_fetch_assoc($result)) {
            $_SESSION['username'] = $row["username"];
        }
    } else {
        $_SESSION['username'] = "No username found.";
    }
}