<?php

	if (isset($_POST['авторизация']))
	{

		//create connection
		$conn = mysqli_connect('localhost', 'root', '', 'test');

		//check connection
		if (!$conn) {
			die ("Не удалось выполнить соединение" . mysqli_connect_error());
		}

		$login = $_POST['login'];
		$password = $_POST['password'];
        #$password_hash = password_hash($_POST['password'], PASSWORD_BCRYPT);

		//make sql request
		$sql = "SELECT password FROM users WHERE login = '$login'";
		$result = mysqli_query($conn, $sql);

		if (mysqli_num_rows($result) == 1) {
            $row =  mysqli_fetch_array($result);
            $p = $row['password'];
            if (password_verify($password, $p)) {
                session_start();
                include('info_empl.php');
                $_SESSION['login'] = $login;
                $_SESSION['name'] = $name;
                $_SESSION['surname'] = $surname;
                $_SESSION['id'] = $id;
                #require_once('personal-area.html');
                header("Location: __personal-area.php");
            }  else {
                    $error = "НЕ удалось войти. Попробуйте еще раз.";
                    include('__first.php');
            }
		} else {
            $error = "НЕ удалось войти. Попробуйте еще раз.";
			include('__first.php');
		}

	}

?>