<?php
require 'connect.php';
$x=getVar();

function validate() {
       $x=getVar();
       $temp=true;

       if(($x["uname"]==""||$x["uname"]==null)&&($x["pass"]==""||$x["pass"]==null)){
          echo " Enter username and password!";
          $temp=false;
          return $temp;
        }

        if($x["uname"]==""||$x["uname"]==null){
          echo "Enter username!";
          $temp=false;
          return $temp;
        }

        if($x["pass"]==""||$x["pass"]==null){
          echo "Enter password!";
          $temp=false;
          return $temp;
        }

       else return $temp;
    }
    $x["pass"]=$conn->real_escape_string($x["pass"]);
    $string="SELECT username FROM signup WHERE username='".$x["uname"]."' AND password='".$x["pass"]."';";
    $res=$conn->query($string);
if(isset($_COOKIE["stcookie"])==false&&isset($x["uname"])==true) {

    if(validate()) {

        if($res->num_rows>0) {

            $str="SELECT firstname,surname,id FROM signup WHERE username='".$x["uname"]."'AND password='".$x["pass"]."';";
            $re=$conn->query($str);
            //$x["pass"];
            //$x["uname"];
            while($row=$re->fetch_assoc()){
                     echo "Welcome"." ".$row["firstname"]." ".$row["surname"];
                     setcookie("stcookie",md5($x["uname"]), time()+3600);
                     echo $_COOKIE["stcookie"];
                     $s="UPDATE signup SET cookies =".$_COOKIE["stcookie"]." WHERE id='".$row["id"]."' ;";
                     echo $s;
                     $r=$conn->query($s);
             ?>
            <br><br>
            <a href='logout.php'> logout ? </a>
             <?php
        }

        }
     else echo "User doesnt exist!";
    }
}
else if (isset($_COOKIE["stcookie"])) {
    $s="SELECT firstname FROM signup WHERE cookies='".$_COOKIE["stcookie"]."';";
    $r=$conn->query($s);

    while($row=$r->fetch_assoc()) {
     echo "You have already logged in".$row["firstname"]; }
    ?>
    <br><br>
     <a href='logout.php'> logout ? </a>
             <?php

}

else {
header("location:loginpage.html"); }
?>