Login

<?php
include 'includes/header.php';
include 'includes/navbar.php';
?>
<br>
<div class="container">
   <h2 style="text-align: center">Login</h2>
   <center>
       <form method="post">
           <div class="input-group mb-3" style="width: 30%">
               <div class="input-group-prepend">
                   <span class="input-group-text"><i class="fa fa-user prefix white-text"></i></span>
               </div>
               <input type="text" class="form-control" id="email"  placeholder="Username" name="username">
           </div>
           <div class="input-group mb-3" style="width: 30%">
               <div class="input-group-prepend">
                   <span class="input-group-text"><i class="fa fa-lock prefix white-text"></i></span>
               </div>
               <input type="password" class="form-control" id="pwd" style="width: 30%" placeholder="Password" name="password">
           </div>
           <button type="submit" class="btn btn-primary" name="login" style="width: 30%">Login</button><br><br>
           <a href="register.php" class="btn btn-primary" role="button" style="width: 30%">Not a member?</a>
       </form>
   </center>
</div>

<?php
if (isset($_POST['login'])) {
session_start();
include('includes/db_connect.php');

   $username  = $_POST['username'];
   $password = $_POST['password'];
   mysqli_real_escape_string($conn, $username);
   mysqli_real_escape_string($conn, $password);
   $query = "SELECT * FROM members WHERE username = '$username'";
   $result = mysqli_query($conn , $query) or die (mysqli_error($conn));
   if (mysqli_num_rows($result) > 0) {
       while ($row = mysqli_fetch_array($result)) {
           $matric = $row['matric'];
           $name = $row['name'];
           $email = $row['email'];
           $semester = $row['semester'];
           $inasis = $row['inasis'];
           $phone = $row['phone'];
           $user = $row['username'];
           $pass = $row['password'];
           $picture = $row['picture'];
           $role= $row['role'];
           $regdate = $row['regdate'];


           if (password_verify($password, $pass )) {
                   $_SESSION['matric'] = $matric;
                   $_SESSION['name'] = $name;
                   $_SESSION['email'] = $email;
                   $_SESSION['semester'] = $semester;
                   $_SESSION['inasis'] = $inasis;
                   $_SESSION['phone'] = $phone;
                   $_SESSION['username'] = $user;
                   $_SESSION['picture'] = $picture;
                   $_SESSION['regdate']  = $regdate;
                   $_SESSION['role'] = $role;
                   if($role=="member"){
                       header('location: m_index.php');
                   }elseif($role=="admin"){
                       header('location: a_index.php');
                   }
           }else {
                   echo "<script>alert('invalid username/password');
                   window.location.href= 'login.php';</script>";
           }
       }
   } else {
       echo "<script>alert('invalid username/password');
       window.location.href= 'login.php';</script>";
   }
}
?>
</body>
</html>