Untitled

Login.php

<?php
//Start the session
session_start();

?>

<!DOCTYPE html>
<html>

   <head>
      <style>
         .error {color: #FF0000;}
      </style>
   </head>

   <body>
      <?php
         $useridErr = $wachtwoordErr = "";
         $userid = $wachtwoord =  "";
         $ok = true;
         if ($_SERVER["REQUEST_METHOD"] == "POST") {
            if (empty($_POST["userid"])) {
               $useridErr = "userid is verplicht!";
               $ok = false;
            }else {
               $userid = test_input ($_POST["userid"]);
            }

            if (empty($_POST["wachtwoord"])) {
               $wachtwoordErr = "wachtwoord is fout!";
            }else {
               $wachtwoord = test_input($_POST["wachtwoord"]);

            }

         }
         function test_input($data) {
            $data = trim($data);
            $data = stripslashes($data);
            $data = htmlspecialchars($data);
            return $data;
         }
      ?>

      <h2>Regristratie van uw info</h2>

      <p><span class = "error">* verplicht veld.</span></p>

      <form method = "POST" action = "<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>">
         <table>
            <tr>
               <td maxlength="30">userid:</td>
               <td><input type = "text" name = "userid" required maxlength="30" value="<?php echo $userid;?>">
                  <span class = "error">* <?php echo $useridErr;?></span>
               </td>
            </tr>
            <tr>
               <td>wachtwoord:</td>
               <td> <input type = "password" name = "wachtwoord" required  maxlength="30" value="<?php echo $wachtwoord;?>">
                  <span class = "error">* <?php echo $wachtwoordErr;?></span>
               </td>
            </tr>
            <tr>
               <td>
                  <input type = "submit" name = "submit" value = "Submit">
               </td>
            </tr>

         </table>

      </form>
     <?php
$servername = "localhost";
$username = "raifex";
$password = "";

try {
    $conn = new PDO("mysql:host=$servername;dbname=cijferlijst", $username, $password);
    // set the PDO error mode to exception
    $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    echo "Connected successfully";
    }
catch(PDOException $e)
    {
    echo "Connection failed: " . $e->getMessage();
    }

    if (isset($_POST["submit"])){
        $userid = $_POST["userid"];
        $wachtwoord = $_POST["wachtwoord"];
        $sql = "select * from User where userid = '$userid'and wachtwoord = '$wachtwoord'";
        $result = $conn->query($sql);

        $aantalRijen = $result->rowCount();
        if ($aantalRijen == 1) {
            $row = $result->fetch();
            $_SESSION["voornaam"] = $row["voornaam"];
            $_SESSION["achternaam"] = $row["achternaam"];
            header("location: ingelogd.php");

 } else {
            echo "ongeldige wachtwoord/userid";
        }

setcookie($cookie_naam, $cookie_waarde, time() + (86400 * 30), "/");
?>
<?php
$cookie_naam = "user";

if(!isset($_COOKIE[$cookie_naam])) {
    echo "Cookie genaamd'" . $cookie_naam . "'bestaat niet!";
} else {
    echo "waarde is: " . $_COOKIE[$cookie_naam];
}
   $conn =null;
   }
?>
   </body>
</html>

ingelogd.php

<!DOCTYPE html>
<html>

   <head>
   </head>

   <body>

<?php

session_start();

echo "Hallo Great Master" . " " . $_SESSION["voornaam"] . " " . $_SESSION["achternaam"];

?>
<form method = "POST" action = "<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>">
 <input type = "submit" name = "submit" value = "Uitloggen Great Master">
 </form>
<?php
$useridErr = $wachtwoordErr = "";
         $userid = $wachtwoord =  "";
         $ok = true;
         if ($_SERVER["REQUEST_METHOD"] == "POST") {
    if (isset($_POST["submit"])){

            header("location: login.php");
            session_destroy();
 } else {
            echo "Uitloggen mislukt";
        }
         }
?>


  </body>
</html>