Untitled

<!DOCTYPE html>

<html lang="de" class="blue-grey lighten-5">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <title>Login / Todo-App</title>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css">
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
    <link rel="stylesheet" href="css/eigenes.css">


<!--Start of Tawk.to Script-->
<script type="text/javascript">
var Tawk_API=Tawk_API||{}, Tawk_LoadStart=new Date();
(function(){
var s1=document.createElement("script"),s0=document.getElementsByTagName("script")[0];
s1.async=true;
s1.src='https://embed.tawk.to/5c2de8107a79fc1bddf319e9/default';
s1.charset='UTF-8';
s1.setAttribute('crossorigin','*');
s0.parentNode.insertBefore(s1,s0);
})();
</script>
<!--End of Tawk.to Script-->


</head>

<body>
    <div class="container">
        <nav>
            <div class="nav-wrapper z-depth-1">
                   <a href="index.php" class="brand-logo center hide-on-small-only marginDown"><img src="images/logo.png"></a>
                   <?php
                   if(!isset($_COOKIE["user"])){
                       echo '<a href="index.php" class="brand-logo left hide-on-med-and-up marginDown"><img id="kleinesLogo" src="images/logo.png"></a>';
                      }
                    ?>
                <a href="index.php" class="right" id="register">Zurück</a>
                 <a href="register.php" class="right" id="register">Registrieren</a>
            </div>
        </nav>
        <div class="row">
            <div id="margin-down" class="col s12 m6 offset-m3 blue-grey darken-1 rund">

                <h3 class="white-text center-align">Einloggen</h3>
                <form class="col s12" action="login.php" method="post">
                    <div class="row">
                        <div class="input-field col s6">
                            <input id="username" name="username" type="text" class="validate">
                            <label for="username">Benutzername</label>
                        </div>
                        <div class="input-field col s6">
                            <input id="password" name="password" type="password" class="validate">
                            <label for="password">Passwort</label>
                        </div>
                    </div>
                    <div class="row">
                        <input type="submit" class="btn waves-effect waves-light" value="Login">
                          <a href="register.php" class="right " id="login">Registrieren</a>
                            <a href="reset.php" class="right marginRechts" id="pwreset">Passwort vergessen</a>
                    </div>
                </form>
            </div>
          </div>
        </div>
          <div class="spacer">

          </div>
          <footer class="footer">
            <h6 class="marginRechts marginNull">Copyright © 2019 Todo-App.net</h6>
            <a href="privacy.html">Privacy Policy</a>
          </footer>
            <script
            			  src="https://code.jquery.com/jquery-3.3.1.js"
            			  integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60="
            			  crossorigin="anonymous"></script>
     <script src="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js"></script>

</body>
</html>

<?php
    error_reporting(-1);
    ini_set('display_errors', true);


    try {
    $db = new PDO("mysql:dbname=todo;host=localhost",
                        "..",
                        "...");
    }catch (PDOException $e) {
        echo "Fehler: " . htmlspecialchars($e->getMessage());
        exit();
    }


    if (isset($_POST["username"]) && isset($_POST["password"]))
    {
    $username = $_POST["username"];
    $password = $_POST["password"];

    $sql = "SELECT username FROM user WHERE username = :feldwert";
    $kommando = $db->prepare($sql);
    $wert = $username;
    $kommando -> bindParam(':feldwert', $wert);
    $kommando -> execute();
    if($kommando->rowCount() > 0){
        $sql = "SELECT username, password FROM user WHERE username = :username;";
        $kommando = $db->prepare($sql);
        $kommando -> bindParam(':username', $username);
        $kommando -> execute();

        foreach ($kommando as $row){
            $user = $row["username"];
            $pass = $row["password"];

            if(password_verify($password, $pass)){
                setcookie("user", $user, time() + 60*60*12);
                header("Location: index.php");

            }else {
                echo "Falschen Benutzernamen oder Passwort eingegeben!";
            }
        }

    } else {
        echo "Benutzerkonto existiert nicht!";
    }


    }

    ?>