<?php
   session_start();

   unset($_SESSION["currentUser"]);
   unset($_SESSION["currentUserID"]);

   if (isset($_POST["login"])) {

      $formUser=$_POST["EmailAddress"];
      $formPass=$_POST["Password"];

      include("dbConnect.php");
      $dbQuery=$conn->prepare("select * from Profile where EmailAddress=:formUser");
      $dbParams=array('formUser'=>$formUser);
      $dbQuery->execute($dbParams);
      $dbRow = $dbQuery->fetch(PDO::FETCH_ASSOC);

      if ($dbRow["EmailAddress"]==$formUser) {
        if ($dbRow["Password"]==$formPass) {
            $_SESSION["currentUser"]=$formUser;
            $_SESSION["currentUserID"]=$dbRow["id"];
            header("Location: index.php");
         }
         else {
            header("Location: login.php?failCode=2");
         }
      } else {
            header("Location: login.php?failCode=1");
      }

   } else {

?>