index.txt

<!DOCTYPE html>
<html>
<head>
	<title></title>
	<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
</head>
<body>
<div class="text-center">
<h1>Anmeldung zur Benutzerverwaltung!</h1>
	<div class="container">
		<form method="POST" action="index.php">
			<div class="form-group row">
			<input class="form-control" type="text" placeholder="Benutzername" name="username" id="username">
			</div>
			<div class="form-group row">
				<input class="form-control" type="password" placeholder="Password" name="password" id="password">
			</div>
			<div class="form-group row">
				<input class="form-control" type="submit" value="Einloggen">
			</div>
		</form>
	</div>
	<p>Noch kein Account? <a href="register.php">Registriere dich hier!</a></p>
	</div>


	<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
</body>
</html>

<?php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

if($_SERVER['REQUEST_METHOD'] == "POST" && isset($_POST["username"])){
	session_start();
	include "LoginClass.php";
	include "dbconfig.php";

	$error = array();

	$username = trim($_POST["username"]);
	$password = $_POST["password"];

	$user = new LoginClass();
	$user->setUsername($username);
	$user->setPassword($password);

	if(!$user->checkIfUsernameExists($user->getUsername(), $DB_con)){
		array_push($error, "Benutzername existiert nicht.");
	}

	if(!empty($error)){
		foreach ($error as $e) {
			echo $e . "<br>";
		}
	}
	else{
		if($user->checkLogin($user->getUsername(), $user->getPassword(), $DB_con)){
			echo "passwort stimmt!";
			$_SESSION["is_logged_in"] = true;
			$_SESSION["role"] = $user->getRole($username, $DB_con);
			if($_SESSION["role"] == "admin"){
				header('Location: admin.php');
			}
			else{
				header('Location: secret.php');
			}
		}
		else{
			echo "passwort stimmt nicht :c";
		}
	}


}
?>