<?php

session_start();

require_once "connect.php";

$connect = @new mysqli($host, $db_user, $db_password, $db_name);

if ($connect->connect_errno!=0)
{
echo "ERROR:".$connect->connect_errno;
}
else
{
$login = $_POST['login'];
$password = $_POST['password'];

$login = htmlentities($login, ENT_QUOTES, "UTF-8");

if($result = @$connect->query(
  sprintf("SELECT * FROM uzytkownicy WHERE user='%s' AND pass='%s'",
   mysqli_real_escape_string($connect, $login),
   mysqli_real_escape_string($connect, $password))))
{
  $how = $result -> num_rows;
  if($how > 0)
  {
    $_SESSION['logged'] = true;

    $row = $result->fetch_assoc();
    $_SESSION['id'] = $row['id'];
    $_SESSION['user'] = $row['user'];
    $_SESSION['imie'] = $row['imie'];
    $_SESSION['nazwisko'] = $row['nazwisko'];
    $_SESSION['wiek'] = $row['wiek'];
    $_SESSION['szkola'] = $row['szkola'];
    $_SESSION['picture'] = $row['picture'];

    unset($_SESSION['error']);
    $result->free_result();

    Header('Location: myacc.php');

  }
     else
    {
      $_SESSION['error'] = '<span style="color:red">Nieprawidłowy login lub hasło!</span>';

      header('Location: login.php');
    }

}

$connect-> close();
}


 ?>