require 'connect.php';

$username = $_POST['login'];
$password = $_POST['password'];

$username = stripcslashes($username);
$password = stripcslashes($password);
$username = mysqli_real_escape_string($connection, $username);
$password = mysqli_real_escape_string($connection, $password);


$querry = mysqli_query($connection, "SELECT * FROM rejestracja WHERE login='$username' AND haslo='$password'")
        or die("Failed to querry database " . mysqli_error());
$row = mysqli_fetch_array($querry);
    if ($row['login'] == $username && $row['haslo'] == $password){
        $usid = $row['uczen_id'];
        $secQ = "SELECT * FROM uczen WHERE uczen_id='$usid'";
        $urow = mysqli_fetch_array($secQ);
        echo "login success!!";
        session_start();
        session_destroy();
        session_start();
        $_SESSION['loggedin'] = true;
        $_SESSION['username'] = $username;
        $_SESSION['firstName'] = $urow['imie'];
        $_SESSION['lastName'] = $urow ['nazwisko'];
        $_SESSION['user_id'] = $usid;
        header('Location: home.php');
}else{
    session_start();
    $_SESSION['correct'] = false;
    header('Location: logowanie.php');
}