<?php
	// Connection
	require_once '../connection.php';
	// Helper
	require_once '../helper.php';
	// Get value from form
	$username = $_POST['username'];
	$password = $_POST['password'];

	// Anti inject - inject club
	$username = mysqli_real_escape_string($conn, $_POST['username']);
	$password = mysqli_real_escape_string($conn, $_POST['password']);

	// Encrypt password to sha1
	$password = sha1($password);

	// Sql
	$sql = "SELECT * FROM m_users WHERE username = '$username' AND password = '$password' LIMIT 1";

	// Execute Sql id or username and password from form
	$checking = mysqli_query($conn, $sql);

	if (mysqli_num_rows($checking) == 1) {
		// Get level user success sign in
		$user = mysqli_fetch_assoc($checking);
		// Save username and level
		$_SESSION['user'] = $user['username'];
		$_SESSION['level'] = $user['level'];

		// Redirect to dashboard account
		echo "1";
	} else {
		echo "0";
	}

?>