<?php

//sessie starten en database connectie vastleggen
session_start();
require_once 'dbconnect.php';

// isset stelt vast of het "NOT NULL" is.
if (isset($_SESSION['userSession'])!="") {
 header("Location: home.php");
 exit;
}

if (isset($_POST['submit'])) {

 $username = strip_tags($_POST['username']);
 $password = strip_tags($_POST['password']);

 $username = $conn->real_escape_string($username);
 $password = $conn->real_escape_string($password);

 $password = md5($password);

 $query = $conn->query("SELECT * FROM kerntaak1.medewerkers WHERE gebruikersnaam = '$username' ");
 $row=$query->fetch_array();

 $count = $query->num_rows; // als gebruikersnaam/wachtwoord correct is geeft deze 1 row terug.

 if ($password = $row['wachtwoord'] && $count==1) {
  $_SESSION['userSession'] = $row['medewerkerscode'];
  header("Location: locaties.php");
 } else {
  $msg = "<div class='errorlogin'>
    Invalid Username or Password !
    </div>";
 }
 $conn->close();
}
?>