<?php
$db = new PDO("mysql:host=localhost;dbname=practice", "root", "");

$message = '';

if(isset($_POST['reg'])){
  $password = $_POST['password'];
  $password = password_hash("$password", PASSWORD_DEFAULT);

  $query = "
    INSERT INTO password_hash
    (username, email, password) VALUES
    (:username, :email, :password)
  ";
  $statement = $db->prepare($query);
  $statement->execute(
    array(
      ':username' => $_POST['username'],
      ':email'    => $_POST['email'],
      ':password' => $password
    )
  );
  if($statement){
    $message = '
    <div class="alert alert-success alert-dismissible" role="alert">
    <button type="button" class="close" data-dismiss="alert" aria-label="Close"><i class="zmdi zmdi-close"></i></button>
    <strong><i class="zmdi zmdi-close-circle"></i>Success! </strong>Registered Sucessfully</div>';

  }else{
    $message = '<div class="alert alert-danger alert-dismissible" role="alert">
    <button type="button" class="close" data-dismiss="alert" aria-label="Close"><i class="zmdi zmdi-close"></i></button>
    <strong><i class="zmdi zmdi-close-circle"></i>Error!! </strong>Unable to insert data</div>';
  }
}

if(isset($_POST['login'])){
  $query = '
    SELECT * FROM password_hash
    WHERE username = :username
  ';
  $statement = $db->prepare($query);
  $statement->execute(
    array(
      ':username' => $_POST['username']
    )
  );
  $count = $statement->rowCount();

  if($count > 0){
    $result = $statement->fetchAll();
    foreach($result as $row){
      if(password_verify($_POST['password'], $row['password'])){
        $message = '<div class="alert alert-success alert-dismissible" role="alert">
        <button type="button" class="close" data-dismiss="alert" aria-label="Close"><i class="zmdi zmdi-close"></i></button>
        <strong><i class="zmdi zmdi-close-circle"></i>Success! </strong>Login was Sucessful</div>';

        // or you can redirect user to a page

      }else{
        $message = '<div class="alert alert-danger alert-dismissible" role="alert">
        <button type="button" class="close" data-dismiss="alert" aria-label="Close"><i class="zmdi zmdi-close"></i></button>
        <strong><i class="zmdi zmdi-close-circle"></i>Error! </strong>Wrong Password</div>';
      }
    }
  }else{
    $message = '<div class="alert alert-danger alert-dismissible" role="alert">
    <button type="button" class="close" data-dismiss="alert" aria-label="Close"><i class="zmdi zmdi-close"></i></button>
    <strong><i class="zmdi zmdi-close-circle"></i>Error! </strong>Wrong Username</div>';
  }
}



?>