/*
            *
            *
            *******Начало регистрации*********
            *
            *
            */

            if(!empty($_POST['reg'])) {
                if(!empty($_POST['login']) && !empty($_POST['password'])) {

                    $login = $_POST['login'];
                    $secret = 'hhJNE63';
                    $password = md5($_POST['password'].$secret);

                    $userExists = "SELECT login FROM users WHERE login = '".$login."'";
                    $queryUser = $pdo->query($userExists);
                    $queryUser->setFetchMode(PDO::FETCH_ASSOC);

                if((count($queryUser->fetchAll()) > 0)) {
                    echo '<p>Такой пользователь уже существует<p>';
                    die();
                }
                else {
                    $newUser = "INSERT INTO users(login, password) VALUES(:login, :password)";
                    $newUserPrepare = $pdo->prepare($newUser);
                    $newUserPrepare->bindValue(':login', trim($login), PDO::PARAM_STR);
                    $newUserPrepare->bindValue(':password', trim($password), PDO::PARAM_STR);
                    $newUserPrepare->execute();
                    echo '<p>Регистрация завершена</p>';
                }
                }

                else {
                    echo '<p class="mudak">Заполните все поля</p>';
                }
            }

            /*
            *
            *
            *******Конец регистрации*********
            *
            *
            */


            /*
            *
            *
            *******Начало авторизации*********
            *
            *
            */

            if(!empty($_POST['auth'])) {
                if(!empty($_POST['login']) && !empty($_POST['password'])) {

                    $login = $_POST['login'];
                    $secret = 'hhJNE63';
                    $password = md5($_POST['password'].$secret);

                    $user = "SELECT `id`, `login`, `password` FROM users WHERE login = :login AND password = :password";
                    $resUser = $pdo->prepare($user);
                    $resUser->bindValue(':login', trim($login), PDO::PARAM_STR);
                    $resUser->bindValue(':password', trim($password), PDO::PARAM_STR);

                    $resUser->execute();
                    $resUser2 = $resUser->fetchAll();
                    $userId = $resUser2[0]['id'];

                    if(count($resUser2) === 0){
                        die('Неверный логин или пароль');
                    }
                    else {

                        $salt = $login;
                        $tokenstr = strval(date('s')) . $salt;
                        $token = md5($tokenstr);


                        $sql = "UPDATE users SET token ='" . $token . "' WHERE login = '" . $login . "'";

                        $queryToket = $pdo->query($sql);

                        setcookie ("user", $token, time()+3600);


                        $_SESSION['token'] = $token;
                        $_SESSION['user'] = $login;
                        $_SESSION['id'] = $userId;
                        output_add_rewrite_var('token', $token);
                        header('Location: ./index.php');

                    }
                }