<?php

		session_start();
		$_SESSION['message'] = "";
		$mysqli = new mysqli("localhost", "root", "", "accounts") or die ("Cannot connect");
		if ($_SERVER['REQUEST_METHOD'] == 'POST') {

			$fusername = $mysqli->real_escape_string($_POST['username']);
		    $fpassword = $mysqli->real_escape_string(hash('sha256', $_POST['password']));

		    if (empty($fusername) && empty($fpassword)) {
		    	$_SESSION['message'] = "Syötä käyttäjätieodt";
		    }else{
		    	$sql = "SELECT `id`, `username`, `email`, `password`, `active` FROM `users` WHERE username = '$fusername' AND password = '$fpassword'";

			    $query = mysqli_query($mysqli, $sql);

			    $count = mysqli_num_rows($query);

			    if ($count > 0) {
			    	while($row = mysqli_fetch_array($query)){
			    	$_SESSION['username'] = $row['username'];
			    	$_SESSION['email'] = $row['email'];
			    	$_SESSION['id'] = $row['id'];

			    	$_SESSION['message'] = "Sisäänkirjautuminen onnsitui.";
			    	header("location: index.php")
			    	}
			    }else{
			    	$_SESSION['message'] = "Väärä käyttäjänimi tai salasana.";
			    }

		    }
  		}

?>