<?php
    session_start();

     //if(!isset($_SESSION['username'])){

    $_SESSION['messageLogin'] = "";


    $mysqli = new mysqli('localhost', 'root', '', 'persec');
    if (isset($_POST['username']) and isset($_POST['password'])){
        $username = $mysqli->real_escape_string($_POST['username']);
        $password = trim($_POST['password']);





        $sql = "SELECT * FROM acesso WHERE username='$username'";

        $result = $mysqli->query($sql);



        if($result->num_rows === 1){
            $row = $result->fetch_array(MYSQLI_ASSOC);
            if(password_verify($password, $row['password'])){
                 $_SESSION['username'] = $username;
            header("location: perfil.php");
            }



        }else if(empty($_POST['username'])){
            $_SESSION['messageLogin'] = "Insira um Username!";
        }else if(empty($_POST['password'])){
            $_SESSION['messageLogin'] = "Insira uma Password";
        }else{
            $_SESSION['messageLogin'] = "Username e Password inválidos!";
        }
    }
?>