<?php

$dsn = 'mysql:host=localhost;dbname=social';
$user = 'root';
$pass = '1234';

try{
    $pdo = new PDO($dsn, $user, $pass);

}catch(PDOException $e){
    echo 'Connection error!' . $e->getMessage();
}?>

<?php
include 'includes/connection.php';
include 'classes/user.php';
include 'classes/tweet.php';
include 'classes/follow.php';

global $pdo;

session_start();

$getFromU = new User($pdo);
$getFromT = new Tweet($pdo);
$getFromF = new Follow($pdo);

define("BASE_URL", "http://localhost/finalproject/src/");?>

<?php

 class User{
     protected $pdo;

     function __construct($pdo){
       $this->pdo = $pdo;
     }

     public function checkInput($var){
         $var = htmlspecialchars($var);
         $var = trim($var);
         $var = stripcslashes($var);
         return $var;
     }

      public function login($email, $password){
         $stmt = $this->pdo->prepare("SELECT 'user_id' FROM 'users' WHERE
        'email' = :email AND 'password' = :password");
         $stmt->bindParam(":email", $email, PDO::PARAM_STR);
         $stmt->bindParam(":password", md5($password), PDO::PARAM_STR);
         $stmt->execute();

         $user = $stmt->fetch(PDO::FETCH_OBJ);
         $count = $stmt->rowCount();

         if($count > 0){
             $_SESSION['user_id'] = $user->user_id;
             header('Location: home.php');
         }else{
              return false;
          }
     }
}?>

<?php

if(isset($_POST['login']) && !empty($_POST['login'])){
    $email = $_POST['email'];
    $password = $_POST['password'];

    if(!empty($email) or !empty($password)){
        $email = $getFromU->checkInput($email);
        $password = $getFromU->checkInput($password);

        if(!filter_var($email, FILTER_VALIDATE_EMAIL)){
            $error = "Invalid format";
        }else{
            if($getFromU->login($email, $password) === false){
                echo $email;
                echo $password;
                $error = "The email or password is incorrect!";
            }
        }
    }else{
        $error = "Please enter username and password!";
    }
}?>