<?php
    session_start();
    $local = 'localhost';
    $loginbd = 'root';
    $passbd = 'root';
    $namebd = 'crm';
    $link = mysqli_connect($local,$loginbd,$passbd,$namebd);

    if(!empty($_POST)){
        $login = $_POST['login'];
        $pass = $_POST['password'];
        $query = mysqli_query($link,"SELECT * FROM users WHERE login='$login'");
        $user = mysqli_fetch_assoc($query);
        $hash = $user['password'];
        if(!empty($user)){
            if(password_verify($pass,$hash)){
                $_SESSION['auto'] = true;
                $_SESSION['id'] = $user['id'];
                header("Location:/main");
                unset($error);
            } else {
                $error = "Неправильный логин или пароль1";
            }
        } else {
            $error = "Неправильный логин или пароль";
        }
    }
    include "html/autorization.html";
    echo $error;
?>