<?php
    require_once 'connect.php';

    $email= ((isset($_POST['email']))?sanitize($_POST['email']):'');
    $email=trim($email);
    $password= ((isset($_POST['password']))?sanitize($_POST['password']):'');
    $password=trim($password);
    $errors=array();
?>

















<?php
        if($_POST)
        {
            //form validation
            if(empty($_POST['email'])|| empty($_POST['password']))
            {
            $errors[]='You must provide email & password.';
            }

            //validate email
            /* if(!filter_var($email,FILTER_VALIDATE_EMAIL)){
                $errors[]='You must enter a valid email';
            } */

            //password is more than 6 characters
            if(strlen($password)<6){
                $errors[]='Password must be atleast 6 characters.';
            }

            //check email exist in database
            $query=$db->query("SELECT * FROM register WHERE email='$email'");
            $user=mysqli_fetch_assoc($query);
            $userCount= mysqli_num_rows($query);
            if($userCount<1){
                $errors[]= 'That email doesn\'t exist in our databse';
            }

            if(!password_verify($password, $user['pass'])){
                $errors[]='Invalid Password.';

            }

            //check for errors
            if(!empty($errors)){
                echo dispaly_errors($errors);
            }else
                //log user in
                {
                    $user_id=$user['id'];
                    user_login($user_id);
                }
        }

    ?>