<?php

	session_start();

	if ((!isset($_POST['text'])) || (!isset($_POST['inputPassword'])))
	{
		header('Location: index.php');
		exit();
	}

	require_once "connect.php";

	$polaczenie = @new mysqli($host, $db_user, $db_password, $db_name);

	if ($polaczenie->connect_errno!=0)
	{
		echo "Error: ".$polaczenie->connect_errno;
	}
	else
	{
		$text = $_POST['text'];
		$inputPassword = $_POST['inputPassword'];

		$text = htmlentities($text, ENT_QUOTES, "UTF-8");
		$haslo = htmlentities($inputPassword, ENT_QUOTES, "UTF-8");

		if ($rezultat = @$polaczenie->query(
		sprintf("SELECT * FROM uzytkownicy WHERE user='%s' AND pass='%s'",
		mysqli_real_escape_string($polaczenie,$login),
		mysqli_real_escape_string($polaczenie,$haslo))))
		{
			$ilu_userow = $rezultat->num_rows;
			if($ilu_userow>0)
			{
				$_SESSION['zalogowany'] = true;


				$wiersz = $rezultat->fetch_assoc();
				$_SESSION['id'] = $wiersz['id'];
				$_SESSION['user'] = $wiersz['user'];
				$_SESSION['saldo'] = $wiersz['saldo'];
				$_SESSION['imie'] = $wiersz['imie'];
				$_SESSION['nazwisko'] = $wiersz['nazwisko'];
				$_SESSION['email'] = $wiersz['email'];
				unset($_SESSION['blad']);
				$rezultat->free_result();
				header('Location: client.php');

			} else {

				$_SESSION['blad'] = '<span style="color:red">Nieprawidłowy login lub hasło!</span>';
				header('Location: index.php');

			}

		}

		$polaczenie->close();
	}

?>