<?php
    session_start();
    header("Cache-Control: no-cache, must-revalidate");header("Pragma: no-cache");
    include("../includes/function.php");


    $db_name = 'user';
    $username = $_POST['user'];
    //$password = MD5($_POST['pass']);
    $password = $_POST['pass'];

    $querySelect = "SELECT * FROM tb_members WHERE username =:user AND password =:pass";
    $bindQuery = array(":user" => "$username",
                        ":pass" => "$password");

    $result = select_data($db_name, $querySelect, $bindQuery);

    if($result->rowCount() == 1){
        //เก็บ username และสิทธิ ให้ session
        while($ans = $result->fetch(PDO::FETCH_ASSOC)){
            $_SESSION['ssUserName'] =  $ans[username];
            $_SESSION['ssRole'] = $ans[role_id];
        }
        if($_POST['autolog'] == 'true'){
            switch($_POST['loginTime']){
                case 1: $expire = 0; break;
                case 2: $expire = time()+60*60*24*7; break;
                case 3: $expire = time()+60*60*24*30; break;
                case 4: $expire = time()+60*60*24*365; break;
                case 5: $expire = time()+60*60*24*365; break;
            }
            setcookie('user',$_SESSION['ssUserName'],$expire);   //มีปัญหาบรรทัดนี้อ่ะครับ
        }
        //update ข้อมูลเข้าสู่ระบบของสมาชิก
        $sqlUpdate = "UPDATE tb_members SET lastlogindate = NOW() , freqlogin = freqlogin+1 WHERE username =:user";
        $bindQuery = array(":user" =>$_SESSION['ssUserName']);
        $result = update_data($db_name, $sqlUpdate, $bindQuery);
        echo 'Correct';
    }else{
        echo 'Incorrect';
    }
?>