<?php

session_start();


if (isset($_POST['username']) && isset($_POST['password'])) {

    $user = $_POST['username'];
    $pass = $_POST['password'];


    if($preparedQuery = $oConn->prepare("SELECT username, password, firm_users.fk_rankID, firm_rank.rankID FROM firm_users INNER JOIN firm_rank ON firm_users.fk_rankID = firm_rank.rankID WHERE username=? AND password=?")){
        $preparedQuery->bind_param("ss", $user, $pass);
        $preparedQuery->execute();

        $row = $preparedQuery->fetch();

        $preparedQuery->close();
    }


    $rank = $row['fk_rankID'];
    $name= $row['username'];


    if($rank == 1){

        $_SESSION['admin'] = $user;
        header('Location: ../index.php');
    }
        elseif($rank == 0) {

            $_SESSION['user'] = $user;
            header('Location: ../index.php');
        }

} else{
    $errorMessage .= "Insert your username and password.";
    }



echo $errormessage;






?>