<?php

$host_db = "xxxxx";
$user_db = "xxxxxx";
$pass_db = "xxxxx";
$db_name = "xxxxxx";

$conexion = new mysqli($host_db, $user_db, $pass_db, $db_name);

if ($conexion->connect_error) {
 print("La conexion falló: " . $conexion->connect_error);
}

$username = $_POST['username'];
$password = $_POST['password'];

$sql = "SELECT * FROM USUARIOS WHERE USUARIO = '$username'";

$result = $conexion->query($sql);


if ($result->num_rows > 0) {

 $row = $result->fetch_array(MYSQLI_ASSOC);

 }
 if (password_verify($password, $row['CONTRASENIA'])){

    $_SESSION['loggedin'] = true;
    $_SESSION['username'] = $username;
    $_SESSION['start'] = time();
    $_SESSION['expire'] = $_SESSION['start'] + (5 * 60);

    print "Bienvenido! " . $_SESSION['username'];
    print "<br><br><a href=panel-control.php>Panel de Control</a>";

 }else{
   print "Username o Password estan incorrectos.";
  print_r($row);
     print "<br><a href='index.html'>Volver a Intentarlo</a>";
 }
 mysqli_close($conexion);
 ?>