<?php
    require 'NFSKGBER7GI5HGIT7G54IHGJHGDFK/config.php';

    error_reporting(E_ERROR | E_PARSE);


    // Get data from FORM
        $username = $_GET["u"];
        $password = $_GET["p"];
        $action = $_GET["a"];

        //Remove '
        //$username = str_replace("'", "", $username1);
        //$password = str_replace("'", "", $password1);


    if($action == 'login') {
        $errMsg = '';





        if(isset($_GET['u']) && !isset($_GET['p'])){

            echo 'invalid login';


        }else{

            try {
                $stmt = $connect->prepare('SELECT id, fullname, username, password, secretpin FROM pdo WHERE username = :username');
                $stmt->execute(array(
                    ':username' => $username
                    ));
                $data = $stmt->fetch(PDO::FETCH_ASSOC);

                if($data == false){
                    //$errMsg = "User $username not found.";
                    echo 'invalid login';
                }
                else {
                    if($password == $data['password']) {
                        $_SESSION['name'] = $data['fullname'];
                        $_SESSION['username'] = $data['username'];
                        $_SESSION['password'] = $data['password'];
                        $_SESSION['secretpin'] = $data['secretpin'];

                        //User Loggedin
                        echo 'valid login';

                        //header('Location: dashboard.php');
                        //exit;
                    }
                    else
                        echo 'invalid login';
                }
            }
            catch(PDOException $e) {
                //$errMsg = $e->getMessage();
                echo 'server down';
            }

    }

    }else{
            echo 'no action';
    }
?>