Untitled

<!DOCTYPE html>

<html lang="de" class="blue-grey lighten-5">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <title>Todo-App / Todo-App</title>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css">
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
    <link rel="stylesheet" href="css/eigenes.css">


<!--Start of Tawk.to Script-->
<script type="text/javascript">
var Tawk_API=Tawk_API||{}, Tawk_LoadStart=new Date();
(function(){
var s1=document.createElement("script"),s0=document.getElementsByTagName("script")[0];
s1.async=true;
s1.src='https://embed.tawk.to/5c2de8107a79fc1bddf319e9/default';
s1.charset='UTF-8';
s1.setAttribute('crossorigin','*');
s0.parentNode.insertBefore(s1,s0);
})();
</script>
<!--End of Tawk.to Script-->


</head>

<body>
    <div class="container">
        <nav>
            <div class="nav-wrapper z-depth-1">
                   <a href="index.php" class="brand-logo center hide-on-small-only marginDown"><img src="images/logo.png"></a>
                   <?php
                   if(!isset($_COOKIE["user"])){
                       echo '<a href="index.php" class="brand-logo left hide-on-med-and-up marginDown"><img id="kleinesLogo" src="images/logo.png"></a>';
                      }
                    ?>
                <a href="index.php" class="right" id="register">Zurück</a>
            </div>
        </nav>
        <div class="row">
            <div id="margin-down" class="col s12 m6 offset-m3 blue-grey darken-1 rund">
                <h3 class="white-text center-align">Einloggen</h3>
                <form id="loginForm" class="col s12" action="landing.php" method="post">
                    <div class="row">
                        <div class="input-field col s6">
                            <input id="username" name="usernamelog" type="text" class="validate">
                            <label for="username">Benutzername</label>
                        </div>
                        <div class="input-field col s6">
                            <input id="password" name="passwordlog" type="password" class="validate">
                            <label for="password">Passwort</label>
                        </div>
                    </div>
                    <div class="row">
                        <input id="landinglog" type="submit" class="btn waves-effect waves-light" value="Login">
                          <a href="register.php" class="right " id="login">Registrieren</a>
                            <a href="reset.php" class="right marginRechts" id="pwreset">Passwort vergessen</a>
                    </div>
                </form>
            </div>
          </div>

          <h1 class="center-align cyan-text">ODER</h1>

          <div class="row">
              <div id="margin-down" class="col s12 m6 offset-m3 blue-grey darken-1 rund">

                  <h3 class="white-text center-align">Registrieren</h3>
                  <form class="col s12" action="landing.php" method="post">
                      <div class="row">
                          <div class="input-field col s12">
                              <input id="username" name="usernamereg" type="text" class="validate">
                              <label for="username">Benutzername</label>
                          </div>
                          <div class="input-field col s6">
                              <input id="password" name="passwordreg" type="password" class="validate">
                              <label for="password">Passwort</label>
                          </div>
                           <div class="input-field col s6">
                              <input id="password2" name="passwordreg2" type="password" class="validate">
                              <label for="password2">Passwort wiederholen</label>
                          </div>
                      </div>
                      <div class="row">
                          <input type="submit" class="btn waves-effect waves-light" value="Registrieren">
                      </div>
                  </form>

              </div>
            </div>
        </div>
          <div class="spacer">

          </div>
          <footer class="footer">
            <h6 class="marginRechts marginNull">Copyright © 2019 Todo-App.net</h6>
            <a href="privacy.html">Privacy Policy</a>
          </footer>
            <script
            			  src="https://code.jquery.com/jquery-3.3.1.js"
            			  integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60="
            			  crossorigin="anonymous"></script>
     <script src="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js"></script>
</body>
</html>
<?php
ini_set('display_errors', 'On');
ini_set('html_errors', 0);

$db_host = ...
$db_name = ...
$db_user = ...
$db_pass = ...

try{
  $db = new PDO('mysql:host='.$db_host.'; dbname='.$db_name, $db_user, $db_pass);
} catch(PDOException $e) {
  echo "Fehler: " .htmlspecialchars($e->getMessage());
exit();
}


if (isset($_POST["usernamelog"]) && isset($_POST["passwordlog"]))
{
  $usernamelog = $_POST["usernamelog"];
  $passwordlog = $_POST["passwordlog"];

  $sql = "SELECT username FROM user WHERE username = :feldwert";
  $kommando = $db->prepare($sql);
  $wert = $usernamelog;
  $kommando -> bindParam(':feldwert', $wert);
  $kommando -> execute();
  if($kommando->rowCount() > 0){
      $sql = "SELECT username, password FROM user WHERE username = :username;";
      $kommando = $db->prepare($sql);
      $kommando -> bindParam(':username', $usernamelog);
      $kommando -> execute();

      foreach ($kommando as $row){
          $user = $row["username"];
          $pass = $row["password"];

          if(password_verify($passwordlog, $pass)){
              setcookie("user", $user, time() + 60*60*12);
              header("Location: index.php");

          }else {
              echo "Falschen Benutzernamen oder Passwort eingegeben!";
          }
      }

  } else {
      echo "Benutzerkonto existiert nicht!";
  }
}
else {
  //check if registration-form is filled.
}
?>