<?php

session_start();

$usrName = $_POST['logInName'];
$pass = $_POST['logInPass'];
$servername = "censored";
$username = "censored";
$password = "censored";
$db_name = "censored";
$conn = mysqli_connect($servername, $username, $password, $db_name);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

$sql = "SELECT usrName FROM loginInfo WHERE usrName='" . $usrName . "';";
$result = mysqli_query($conn,$sql);

if ($conn->query($sql) == TRUE) {
    while ($row = $result->fetch_assoc()) {
        $retrievedUsrName = $row["usrName"];
    }
} else {
    echo 'Error: ' . $conn->error;
}

$result->free;

if ($retrievedUsrName == $usrName) {
    $sql2 = "SELECT pw FROM logininfo WHERE pw='" . $pass . "';";
    $result2 = mysqli_query($conn,$sql2);

    while ($row = $result2->fetch_assoc()) {
        $retrievedPass = $row["pw"];
    }
} else {
    echo 'Fant ikke brukernavnet i databasen. Spør Tommy.';
}

if ($retrievedPass == $pass) {
    header('Location: index.php');
} else {
    echo 'Fant ikke passordet i databasen. Spør Tommy.';
}

$result->free;

$conn->close;

?>