<?php
include('database.php');
include('../login.php');

session_start();

$username = $_POST['username'];
$password = $_POST['password'];

$result = $con->query("select * from accounts where username='$username' and password='$password'")
	or die("Failed to query database ".mysql_error());


$date = date('Y-m-d H:i:s');
$query = $con->query("UPDATE accounts SET last_login='$date' WHERE username='$username'")
	or die("Failed to query database ".mysql_error());

$row = $result->fetch_array(MYSQLI_ASSOC);
if ($row['username'] == $username && $row['password'] == $password){
	$_SESSION['naam'] = $row['username'];
	$_SESSION['login_error'] = "";
	header("Location:../userpage.php");
} else {
	header("Location:../login.php");
	$_SESSION['login_error'] = "Onjuist wachtwoord of gebruikersnaam";


}
	?>