<?php
session_start();

if(isset($_SESSION['username'])){

  $session_user = $_SESSION['username'];
  $session_pass = $_SESSION['password'];
  $session_user = htmlspecialchars($session_user);
  $session_pass = $session_pass;

  if(is_numeric($session_user)){
    include("db.php");
    $session_user = str_replace("geheim","",$session_user);
    $session_user = htmlspecialchars($session_user);
    $getmemberlogged=$connect->query("SELECT id, password FROM user_data2 WHERE id = '$session_user' LIMIT 1");
    $getmemberloggedcount = $getmemberlogged -> num_rows;
    if($getmemberloggedcount>0){

      while($row=$getmemberlogged->fech_assoc()){
        $user_db_pass=$row['password'];
      }

      if($session_pass == $user_db_pass){
        $_SESSION['username'] = $session_user;
        $_SESSION['password'] = $session_pass;
        $logged = 1;
      }else{
        header("Location:logout.php");
        exit();
      }

      $connect->close;

    }else{
      header("Location:logout.php");
      exit();
    }
  }else{
  header("Location:logout.php");
  exit();
}
}else if(isset($_COOKIE['user_cookie'])){

  $session_user = htmlspecialchars($_COOKIE['username_cookie']);
  $session_pass = $_COOKIE['password_cookie'];

  if(is_numeric($session_user)){
    include("db.php");
  $session_user = str_replace("geheim","",$session_user);
  $session_user = htmlspecialchars($session_user);
  $getmemberlogged=$connect->query("SELECT id, password FROM user_data2 WHERE id = '$session_user' LIMIT 1");
  $getmemberloggedcount = $getmemberlogged -> num_rows;
  if($getmemberloggedcount>0){

    while($row=$getmemberlogged->fech_assoc()){
      $user_db_pass=$row['password'];
    }

    if($session_pass == $user_db_pass){
      $_SESSION['username'] = $session_user;
      $_SESSION['password'] = $session_pass;
      $logged = 1;
    }else {
      header("Location:logout.php");
      exit();
    }

    $connect->close;

  }else{
    header("Location:logout.php");
    exit();
  }
}else{
  header("Location:logout.php");
  exit();
}
}else{
  $logged = 0;
}

if(isset($_SESSION['logout'])){
$logged = 0;
header("Location: index.php");
exit();
}
?>