<?php
   $connect = mysqli_connect("localhost", "root", "", "testing");
   session_start();
   if(isset($_SESSION["username"]))
   {
       header("location:entry.php");
   }

   if(isset($_POST["login"]))
   {
       if($_POST["username"] == '' || $_POST["pin"] == '')
       {
            echo '<script>alert("Alle felter SKAL udfyldes!")</script>';
       }
       else
       {
           $username = mysqli_real_escape_string($connect, $_POST["username"]);
           $password = mysqli_real_escape_string($connect, $_POST["password"]);
           $pin = mysqli_real_escape_string($connect, $_POST["pin"]);
           $password = sha1($password);
           $pin = sha1($pin);
           $query = "SELECT * FROM users WHERE username = '$username'";
           $result = mysqli_query($connect, $query);
           if(mysqli_num_rows($result) > 0)
           {
                $row = mysqli_fetch_assoc($result) ;
                $pass = $row['password'] ;
                $check_pin = $row['pin'] ;

                if ($password == $pass && $pin == $check_pin){
                   $_SESSION['username'] = $username;
                   header("location:entry.php");
                }
           }
           else
           {
                echo '<script>alert("Forkert brugernavn, adgangskode eller pin-kode")</script>';
           }
      }
 }
 ?>