//login.php
<?php
session_start();
$errors = array();
include("server.php");

if(isset($_POST["log_user"])){
	$username = $_POST['username'];
    $password = $_POST['password'];
}

if(empty($username)){
array_push($errors, "Il nome utente utente è richiesto");}
if(empty($password)){
array_push($errors, "La password è richiesta");
}

if(count($errors) == 0){
$stam = $conn -> prepare("Select user, pwd from funzionari WHERE user = :user AND pwd = :pwd");
$stam -> bindParam(":user", $username, PDO::PARAM_STRING);
$stam -> bindParam(":pwd", sha1($password), PDO::PARAM_STRING);

if($stam->exec()){
$token = sha1(uniqid($username));
$_SESSION['id'] = $token;
$url = "caffetime.altervista.org/dashboard.php";
$variabili = array(
'username' => $username,
'token' => $token
);
$build = http_build_query($variabili);
$ch = curl_init();

// set the url, number of POST vars, POST data
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_POST, count($variabili));
curl_setopt($ch, CURLOPT_POSTFIELDS, $build);

// execute post
$result = curl_exec($ch);

// close connection
curl_close($ch);

header('Location: http://caffetime.altervista.org/dashboard.php');
}else{
array_push($errors, "login fallito, controlla l'username e la password");
header('errors.php');
}
}else{
header('errors.php');
}

?>

//dashboard.php
<?php
session_start();
if($_SESSION['id'] == $_POST['token']){
echo ("benvenuto/a, ".$_POST['username']);
}
?>