View difference between Paste ID: hhHShNLX and m71cH5Bc

 <?php
 
 session_start();
 
 
 if (isset($_POST['username']) && isset($_POST['password'])) {
 
-	$user = $_POST['username'];
+	$preparedQuery = $oConn->stmt_init();
-	$pass = $_POST['password'];
+	if($preparedQuery->prepare("SELECT username, password, firm_users.fk_rankID FROM firm_users INNER JOIN firm_rank ON firm_users.fk_rankID = firm_rank.rankID WHERE username=? AND password=?")){
 		$preparedQuery->bind_param("ss", $user, $pass);
 		$user = $_POST['username'];
-	if($preparedQuery = $oConn->prepare("SELECT username, password, firm_users.fk_rankID, firm_rank.rankID FROM firm_users INNER JOIN firm_rank ON firm_users.fk_rankID = firm_rank.rankID WHERE username=? AND password=?")){
+		$pass = $_POST['password'];
 		$preparedQuery->execute();
 
 		$preparedQuery->bind_result($username, $password, $fkRankID);
-		$row = $preparedQuery->fetch();
+
 		if($preparedQuery->fetch()){
 			$rank 	= $fkRankID;
 			$name   = $username;
 		}
 
-	$rank = $row['fk_rankID'];
+
-	$name= $row['username'];
+
 
 
 
 	if($rank == 1){
-		$_SESSION['admin'] = $user;
+
 		$_SESSION['admin'] = $name;
 		header('Location: ../index.php');
 	}
 		elseif($rank == 0) {
-			$_SESSION['user'] = $user;
+
 			$_SESSION['user'] = $name;
 			header('Location: ../index.php');
 		}
 
 } else{
 	$errorMessage .= "Insert your username and password.";
 	}
 
 
 
 echo $errormessage;
 
 
 
 
 
 
 ?>