<?php

include '../User.class.php';
session_start();
include '../bdd.php';
if(isset($_POST['submit'])){
	$username = htmlspecialchars(trim($_POST['username']));
	$password = htmlspecialchars(trim($_POST['password']));
	if(empty($username)){
		$_SESSION['error'] = "Veuillez saisir votre nom d'utilisateur !";
		header('Location:../member.php');
	}else if(empty($password)){
		$_SESSION['error'] = "Veuillez saisir votre mot de passe !";
		header('Location:../member.php');
	}else{
		$password = md5($password);
		$req = $bdd->prepare('SELECT email FROM users WHERE username = :username AND password = :password');
				$req->execute(array(
				    'username' => $username,
				    'password' => $password
				   ));
				$resultat = $req->fetch();
				if (!$resultat){
				    $_SESSION['error'] = "Mauvais nom d'utilisateur ou mot de passe !";
				    header('Location:../member.php');
				}else{
					$email = $resultat[0];
					$user = new User($username, $email, $password);
				    $_SESSION['user'] = $user;
				    $_SESSION['action'] = "";
				    $_SESSION['error'] = "";
				    header('Location: ../member.php');
				}
	}
}else{
	header('Location:../member.php');
}
?>