<?php
session_start();
session_destroy();
 require_once
'../actualizaciones/actualizaciones/historiaclinica.control.php';
require_once '../actualizaciones/actualizaciones/historiaclinica.model.php';
$histclin = new historiaclinica();
$model = new historiaclinicaModel();
require_once("/../Login/controlador/login.php");

require_once("../Login/modelo/conexion.php");
$auth_user = new conexion();


$user_id = $_session['idPersonas'];

$stmt = $auth_user->runQuery("SELECT * FROM personas WHERE
idPersonas=:udoc");
$stmt->execute(array(":udoc"=>$udoc));

$userRow=$stmt->fetch(PDO::FETCH_ASSOC);
?>

<?php

class conexion{

    private $conexion;
    private $host = "localhost";
    private $usu = "root";
    private $pass = "";
    private $db = "gimnasio";
    private $user;
    private $password;

    public function __construct(){

        $this->conexion = new mysqli($this->host, $this->usu, $this->pass, $this->db);

        if($this->conexion->connect_errno){

            die("error no se conecto con mysql:(".$this->conexion->connect_errno.")");
        }
    }



    public function cerrar(){

        $this->conexion->close();
    }

    public function login($usuario, $pass){

        $this->user = $usuario;
        $this->password = $pass;

        $query = "SELECT idPersonas, Contrasena, roles_idRoles FROM personas WHERE idPersonas ='".$this->user."' AND Contrasena = '".$this->password."'";


        $consulta = $this->conexion->query($query);

        if($row = mysqli_fetch_array($consulta)){

            session_start();

            $_session['idPersonas'] = $row['idPersonas'];
            $_session['Contrasena'] = $row['Contrasena'];
            $_session['roles_idRoles'] = $row['roles_idRoles'];

            if($_session['roles_idRoles'] == 1){
            header("Location:../vista/interfaz_admi_nueva.php");
             }else{
                header('Location:/index/Usuario/index.php');
             }
        }else {

            echo "usuario o password incorrectos";
        }

    }

}?>

<?php
include("/../modelo/conexion.php");
$user = $_POST['idPersonas'];
$pass = $_POST['Contrasena'];
$gimnasio = new conexion;
$gimnasio->login($user, $pass);
$gimnasio->cerrar();
?>

<?php
session_start();
session_destroy();
  ?>
   <div class="form">
    <form action="../Login/controlador/login.php" method="post"
      class="login_form">
        <h2>Bienvenido Ingresa</h2>
        <input type="text" class="form-control" placeholder= "ID usuario"
          name="idPersonas">
    <br>
    <input type="password" placeholder="contrasena" class="form-control"
     name="Contrasena"><br>
    <input type="submit" class="btn btn-default" value="ingresar">
    </form>
  </div>