<?php
   include("dbconnection.php");
   $username = $_POST['userName'];
   $password = $_POST['password'];

   $sql = "SELECT hash FROM WD_Users WHERE Username = :username";
   $query = $con->prepare($sql);
   $query->execute(['username' => $username]);
   $hash = $query->fetchColumn();

   echo '<p>' . $hash . '</p>';
   echo '<p>' . hash('sha256', $password) . '</p>';

   if(password_verify($password, $hash) == true){
     session_start();
     $_SESSION['username'] = $username;
     $cookie_name = "username";
     $cookie_value = $username;
     setcookie($cookie_name, $cookie_value, time() + (86400 * 30), "/");
     header("Location: http://studentnet.dundeeandangus.ac.uk/~1502110/WebDev/?page=championList");
   } else {
     header("Location: http://studentnet.dundeeandangus.ac.uk/~1502110/WebDev/?page=loginFail");
   }
?>