ghjz

<?php

ob_start();

include 'inc/database.php';
include 'php/sanitize.php';

$result = mysqli_query($con, "SELECT * FROM `settings` LIMIT 1") or die(mysqli_error($con));
while($row = mysqli_fetch_assoc($result)){
	$website = $row['website'];
	$favicon = $row['favicon'];
}

if (!isset($_SESSION)) {
	session_start();
}

if (isset($_SESSION['username'])) {
	header('Location: Home');
	exit();
}

if(isset($_POST['username']) && isset($_POST['password'])){

	$username = sanitizeInput($_POST['username']);
	$password = sanitizeInput($_POST['password']);
	$bcryptFunc = password_hash($password, PASSWORD_BCRYPT);

	$result = mysqli_query($con, "SELECT * FROM users WHERE username = '$username'") or die(mysqli_error($con));
	if(mysqli_num_rows($result) < 1){
		$msg = '<div class="alert alert-danger">No user exists</div>';
	}
	while($row = mysqli_fetch_array($result)){
		if(!password_verify($bcryptFunc, $row['password'])) {
			$msg = '<div class="alert alert-danger">The Passwords You Entered Didn\'t Match</div>';
		}elseif($row['status'] == "0"){
			$msg = '<div class="alert alert-danger">You were banned</div>';
		}else{
			$_SESSION['id'] = $row['id'];
			$_SESSION['username'] = $username;
			$_SESSION['email'] = $row['email'];
			$_SESSION['rank'] = $row['rank'];
			header("location: Home");
		}
}

}

?>