<?PHP
    session_start();

    require_once('helloPage.php');
    require_once('connect.php');
    require_once('postPage.php');

    $login = $_POST['login'];
    $haslo = $_POST['haslo'];

    $_SESSION['login'] = $login;
    $_SESSION['haslo'] = $haslo;

    if($login == NULL || $haslo == NULL)
    {
        header('Location: helloPage.php');
        $_SESSION['error_login_blank'] = "Login i hasło nie mogą pozostać puste!";
        exit();
    }

    $connect = mysqli_connect($host, $db_user, $db_password) or die ('Serwer jest wyłączony');
    mysqli_select_db($connect, $db_name) or die ('Baza danych jest wyłączona');

    $login_db = mysqli_real_escape_string($connect, $login);
    $haslo_db = mysqli_real_escape_string($connect, $haslo);

    $connect_result_login = mysqli_query($connect, 'SELECT user FROM konta WHERE user = "'.$login_db.'";');
    $connect_row_login = mysqli_fetch_array($connect_result_login);
    $connect_string_login = $connect_row_login['user'];

    $connect_result_password = mysqli_query($connect, 'SELECT pass FROM konta WHERE user = "'.$login_db.'";');
    $connect_row_password = mysqli_fetch_array($connect_result_password);
    $connect_string_password = $connect_row_password['pass'];
    if(password_verify($haslo, $connect_string_password) && $login == $connect_string_login){
        header('Location: postPage.php');
    }  else {
        header('Location: helloPage.php');
        $_SESSION['error_login_and_password'] = "Nieprawidłowy login lub hasło!";
        exit();
    }
?>