<?php
session_start();
require_once 'database.php';
?>

<?php
if (isset($_POST)) {
    if (!empty(htmlspecialchars($_POST['username'])) AND !empty(htmlspecialchars($_POST['password']))) {
        $req = $db->prepare('SELECT * FROM admin WHERE username = :username AND password = :password');
        $req->execute(array('username' => $_POST['username'], 'password' => $_POST['password']));
        $user = $req->fetch();
        if($user) {
            $_SESSION['admin'] = $_POST['username'];
        }
        else {
            $error = 'Identifiants incorrects';
        }
    }
    else {
        $error = 'Veuillez remplir tous les champs';
    }
}
?>