<?php
  $username = $_POST['username'];
  $password = md5($_POST['password']);

  if($username && $password){
    require_once 'Db_functions.php';
    $conn = db_open();
      $userStr = "SELECT GEBRUIKERSNAAM FROM GEBRUIKER WHERE GEBRUIKERSNAAM = '" . $username . "'";

      $result = sqlsrv_query($conn, $userStr, null);
      if($result === false) {
        session_destroy();
        die();
      }

      $passStr = "SELECT WACHTWOORD FROM GEBRUIKER WHERE GEBRUIKERSNAAM = '" . $username . "'";

      $result = sqlsrv_query($conn, $passStr, null);
      if($result === false) {
        session_destroy();
        die();
      }

      while($row = sqlsrv_fetch_array($result, SQLSRV_FETCH_ASSOC)){
        if($row['WACHTWOORD'] == $password){
          $SESSION['username'] = $username;
          db_close($conn);
          echo'login succesvol';
        }
        else{
          session_destroy();
          db_close($conn);
        }
      }
  }
?>