<?php
require_once 'config.inc.php';

$username = $_POST['username'];
$password = $_POST['password'];

if (strlen($username) > 0 && strlen($password) > 0) {

  $password = md5($password);

  $query = "SELECT * FROM users
            WHERE username = '$username'
            AND password = '$password'";

            $result = mysqli_query($mysqli, $query);

            if (mysqli_num_rows($result) == 1) {
              session_start();

              $_SESSION['username'] = $username;
              header("location:home.php");
            } else {
              header("location:index.php");
              exit;
            }
} else {
  echo "Niet alle velden zijn ingevuld!";
  exit;
}
?>