Untitled

<?php
session_start();
if(!isset($_SESSION['ID'])) {
	if(isset($_POST['submit'])) {
		$user_username = mysqli_real_escape_string($dbc, trim($_POST['username']));
		$user_password = mysqli_real_escape_string($dbc, trim($_POST['password']));
    $password = strtoupper(hash("whirlpool", $user_password));

    $user_username = strip_tags($user_username);
    $user_password = strip_tags($user_password);
    $password = strip_tags($password);

		if(!empty($user_username) && !empty($user_password)) {
			$query = "SELECT * FROM `accounts` WHERE Username = '$user_username' AND Password = '$password'";
			$data = mysqli_query($dbc,$query);
			if(mysqli_num_rows($data) == 1) {
				$row = mysqli_fetch_assoc($data);
                $_SESSION['ID'] = $row['ID'];
                $_SESSION['IP'] = $row['IP'];
                $_SESSION['Username']=$row['Username'];
                $_SESSION['username']=$row['Username'];
                $_SESSION['email']=$row['email'];
                $_SESSION['adminlevel'] = $row['adminlevel'];
                $_SESSION['RegisterDate'] = $row['RegisterDate'];
                $_SESSION['LoginDate'] = $row['LoginDate'];
                $home_url = 'https://' . $_SERVER['HTTP_HOST'];
                header('Location: '. $home_url);
			}
			else {
				echo '<div class="alert alert-danger" role="alert">
    <strong>Ошибка! </strong> Вы ввели неправильные данные.
    </div>';
			}
		}
    else {
    echo '<div class="alert alert-danger" role="alert">
    <strong>Ошибка!</strong> Вы не заполнили все поля.
    </div>';
		}
	}
}
?>
<!DOCTYPE html>
<html>
<?php
include 'includes/head.php';
?>
<body>
  <?php
include 'includes/header.php';
?>
  <div class="container-fluid">
    <div class="container-fluid" style="padding-top: 5em;">
     <div class="row">
     <div class="col-md-1"></div>
     <div class="col-md-10">
     <br><br>
		 <?php
 if(empty($_SESSION['Username'])) {
				?>
      <h1 class="text-center">Вход в систему</h1><br>
      <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">
    <div class="input-group margin-bottom-sm">
      <span class="input-group-addon"><i class="fa fa-user fa-fw" aria-hidden="true"></i></span>
      <input class="form-control" type="text" placeholder="Логин" name="username">
    </div><br>
    <div class="input-group">
      <span class="input-group-addon"><i class="fa fa-key fa-fw" aria-hidden="true"></i></span>
      <input class="form-control" type="password" placeholder="Пароль" name="password" autocomplete="off">
    </div>
 <br>
    <button type="submit" name="submit" class="btn btn-outline-success btn-block">Вход</button>
    </form>
    <br>
    <div class="container">
    <a href="registration.php"> Регистрация</a><br>
    </div>
    </div>
    </div>
    <?php
    include 'includes/footer.php';
}
else {
	?>
	<div class="text-center">
	<h2>Вы авторизованы.</h2>
	<p>Здравствуйте, <?php echo $_SESSION['Username']; ?>.</p>
	</div>
	<?php
    include "includes/footer.php";
    ?>
<?php
}
?>
<div class="col-sm-1"></div>
   <script src="https://code.jquery.com/jquery-3.1.1.slim.min.js" integrity="sha384-A7FZj7v+d/sdmMqp/nOQwliLvUsJfDHW+k9Omg/a/EheAdgtzNs3hpfag6Ed950n" crossorigin="anonymous"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js" integrity="sha384-DztdAPBWPRXSA/3eYEEUWrWCy7G5KFbe8fFjk5JAIxUYHKkDx6Qin1DkWx51bBrb" crossorigin="anonymous"></script>
    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/js/bootstrap.min.js" integrity="sha384-vBWWzlZJ8ea9aCX4pEW3rVHjgjt7zpkNpZk+02D9phzyeVkE+jo0ieGizqPLForn" crossorigin="anonymous"></script>