<?php

session_start();

if(!isset($_POST['login']) || !isset($_POST['password'])){
  header('Location: index.php');
  exit();
}


require_once "connect.php";

$connection = @new mysqli($host, $db_user, $db_password, $db_name);

if($connection->connect_errno != 0){
  echo "Error:".$connection->connect.errno . " Opis: " . $connection->connect_error;
}

else{
  $login = $_POST['login'];
  $password = $_POST['password'];

  $login = htmlentities($login, ENT_QUOTES, "UTF-8");
  $password = htmlentities($password, ENT_QUOTES, "UTF-8");

  $sql = "SELECT * FROM uzytkownicy WHERE user='$login' AND pass='$password'";

  if($result = @$connection->query(
    sprintf("SELECT * FROM uzytkownicy WHERE user='%s' AND pass='%s'",
            mysqli_real_escape_string($connection, $login),
            mysqli_real_escape_string($connection, $password)
      )
    )
  )
  {
    $amountOfUsers = $result->num_rows;

    if($amountOfUsers>0){
      $_SESSION['logged'] = true;

      $record = $result->fetch_assoc();

      $_SESSION['user'] = $record;

      unset($_SESSION['blad']);

      $result->close();

      header('Location: game.php');
    }
    else{
      $_SESSION['blad'] = '<span style="color: red">Niepoprawny login lub haslo!</span>';
      header('Location: index.php');
    }


  }

  $connection->close();
}



?>