<?php

include '../f-connect.php';

if(isset($_POST) && !empty($_POST['login']) && !empty($_POST['password'])){
     extract($_POST);
     $password = sha1($password);
     $sql = "SELECT u.*, r.* FROM users as u INNER JOIN roles AS r ON r.id_roles = u.roles_id WHERE u.login = '$login' AND u.password = '$password' AND r.name  = 'provider'";
     $req = $db->prepare($sql);
     $req->execute();
    if($req->rowCount() > 0){
        $data = $req->fetch();
        $_SESSION['Auth']= array(
            'id_user' => $data['id_user'],
            'firstname' => $data['firstname'],
            'lastname' => $data['lastname'],
            'login' => $data['login'],
            'password' => $data['password'],
            'roles_id' => $data['roles_id'],
            'id_roles' => $data['id_roles'],
            'name' => $data['name'],

        );




            $_SESSION['flash']['success'] = "You are now connected";
        header("Location:../Provider/profilProvider.php");
    }else{
        echo '<div class ="alert alert-warning">Login or password incorrect</div>';
    }

}elseif(isset($_POST) && !empty($_POST['login']) && !empty($_POST['password'])){
     extract($_POST);
     $password = sha1($password);
     $sql = "SELECT u.*, r.* FROM users as u INNER JOIN roles AS r ON r.id_roles = u.roles_id WHERE u.login = '$login' AND u.password = '$password' AND r.name  = 'customer'";
     $req = $db->prepare($sql);
     $req->execute();
    if($req->rowCount() > 0){
        $data = $req->fetch();
        $_SESSION['Auth']= array(
            'id_user' => $data['id_user'],
            'firstname' => $data['firstname'],
            'lastname' => $data['lastname'],
            'login' => $data['login'],
            'password' => $data['password'],
            'roles_id' => $data['roles_id'],
            'id_roles' => $data['id_roles'],
            'name' => $data['name'],

        );


            $_SESSION['flash']['success'] = "You are now connected";
        header("Location:../customer/profilCustomer.php");
    }else{
        echo '<div class ="alert alert-warning">Login or password incorrect</div>';
    }

}
?>

folder one :
provider :
   ->profilProvider.php
   ->listProviders.php
   ->addProvider.php
   ->updateProvider.php



folder two :
   customer :
    ->profilCustomer.php
    ->listCustomers.php
    ->addCustomer.php
    ->updateCustomer.php

- id_user : int
 - firstname :varchar(100)
 - lastname : varchar(100)
 - login : varchar(100)
 - password : varchar(100)
 - roles_id : int

- id_roles : int
- name : varchar(100)  ['provider', 'costumer']