<?php
session_start();
require_once 'includes/db.php';

// Recup du password user
$password = $_POST['password'];
$username = $_POST['username'];

function getUser($username, $password) {
        $dbh = connectDB();
        $sql = 'SELECT * FROM user WHERE (username = :username AND password = :password)';
        $req = $dbh->prepare($sql);
        $req->execute(array(':username' => $username, ':password' => $password));
        $user = $req->fetch();
        return $user;
}

if (!empty($_POST) && !empty($username) && !empty($password)) {
    $flag = 0;
    $user = getUser($username, $password);
    if (!empty($user) && (strcmp($user['password'], $password) == 0)) {
        echo "<script>window.location.href='userspace.php';</script>";
        exit();
    }else {
        echo "Erreur lors de la connexion";
    }

}