<?php
require 'mysql.php';

if (isset($_POST["login"])){

    $username = $_POST["username"];
    $password = $_POST["password"];

    $stmt = $connect->prepare("SELECT username,password FROM users WHERE username= ? ");
    $stmt->bind_param("s",$username);
    $stmt->execute();
    $rowcount = $stmt->num_rows;
    $result = $stmt->get_result();
        echo $username;
        echo $password;
        echo $rowcount;
        if ($rowcount > 0){

                while ($row = $result->fetch_assoc()) {
                    if ($row["username"] == $username && $row["pass"] == $password){

                        if(!isset($_SESSION)) {
                             session_start();
                        }
                            $_SESSION["username"] = $username;
                            $_SESSION["usertype"] = $row["usertype"];
                            $_SESSION["userid"] = $row["id"];
                            $_SESSION["CREATED"] = time();
                        header('Location: main.php');

                    } else {
                        $error_msg2 = "Username or password does not mach";
                        $error2 = "error";
                    }
                }
        } else {
            $error_msg2 = "No such user";
            $error2 = "error";
        }

    $stmt->close();
    $connect->close();

    echo $error_msg2;
}

?>