<?php
session_start();


if(isset($_POST['LOGINKNAPPEN'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];

    if(!preg_match('/^[a-zA-Z0-9]{3,}$/', $username)) {
        // Brukernavnet inneholder ulovlige tegn.
        // Tillater tall og bokstaver over 3 tegn.


    } else {
        mysql_connect("localhost", "root", "");
        mysql_select_db("sync");

        $username = mysql_real_escape_string($username);
        $password = mysql_real_escape_string($password);

        $query = mysql_query("select * from brukere where username = '$username' and password = '$password'") or die("Failed to query database ".mysql_error());
        $check = mysql_num_rows($query);

        if($check) {
            // Riktig passord
            $row = mysql_fetch_array($query);

            $_SESSION['username'] = $username;
            header("Location: userdata/".$_SESSION["username"]."/"); die();

        } else {
            echo "Username or password incorrect!";
        }
    }
}

?>