<?php

if (!empty($_POST)) {

    if(isset($name)){

        if(isset($pass)){

            if($pass !== 0 && $name !== 0){

                include "conexion.php";

                $sql = "SELECT * FROM user WHERE username == :name OR email == :name AND password == :pass";

                $query = $con -> prepare($sql);

                $query->bindParam(':name', $name);
                $query->bindParam(':pass', $pass);
                $query->execute();

                $contador = $query -> rowCount();

                while ($r = $query->fetch_array()) {

                    $user_id = $r["id"];
                    $user_rank = $r["CONF"];
                    break;

                }

                if ($user_id == null && $user_rank == null) {

                    print "<script>alert("Acceso invalido.");window.location='../login';</script>";

                } else {

                    session_start();
                    $_SESSION["user_id"] = $user_id;
                    $_SESSION["rank"] = $user_rank;
                    print "<script>window.location='../home.php';</script>";

                }

            } else {

                echo "<script>alert("Valores no aceptados"); window.location='../login';</script>";

            }

        } else {

            echo "<script>alert("No escribiste la contraseña"); window.location='../login';</script>";

        }

    } else {

        echo "<script>alert("No escribiste el usuario"); window.location='../login';</script>";

    }

} else {

    echo "<script>alert("No escribiste nada"); window.location='../login';</script>";

}