Untitled

<?php
    session_start();
    if (is_logged()) { //als ingelogged
        header("Location: welcome.php"); //ga naar welcome pagina
    }

    function login($mysql,$username,$password){
        $sql = "SELECT * from GEBRUIKERS WHERE username LIKE '{$username}' AND password LIKE '{$password}' LIMIT 1";
        $result = $mysqli->query($sql);
        if (!$result->num_rows == 1) {
            return false;
        } else {
            return true;
        }
    }
    function is_logged() {
        if (isset($_SESSION['username'])) return true;
        //else return false;
        return false; //want als het niet gesset is dan return je false sowieso, dus geen `else` nodig.
    }

?>


<html>
<head>
    <title>Login</title>
</head>
<body>
<?php
if (!isset($_POST['submit'])){
?>
<!-- The HTML login form -->
    <form action="<?=$_SERVER['PHP_SELF']?>" method="post">
        Username: <input type="text" name="username" /><br />
        Password: <input type="password" name="password" /><br />
        <input type="submit" name="submit" value="Login" />
    </form>
<?php
} else {
    $username = $_POST["username"];
    $password = $_POST["password"];
    require_once("db_const.php"); //krijg de constanten (zoals je ze beneden ziet, ook niet echt veilig, maar ach)
    $mysqli = new mysqli(DB_HOST, DB_USER, DB_PASS, DB_NAME); //maak connectie aan
    if ($mysqli->connect_errno) { //check of er een connectie fout is
        echo "<p>MySQL error no {$mysqli->connect_errno} : {$mysqli->connect_error}</p>";
        exit();
    }
    if(login($mysqli,$usename,$password)){
        header("Location: welcome.php");
    }else{
        echo "Invalid username or password";
    }
}
mysqli_close($con)
?>
</body>
</html>