session_start();
    $Msg ="";

  if(isset($_POST['submit'])){

    $username = $_POST["username"];
    $password = $_POST["password"];

    if(empty($username) || empty($password)) {
      $Msg = "vul alle bij de velden in";
    } else {

      try {
        include 'DBconnect.php';
        $stmt = $db->prepare("SELECT IDklant,username, SaveCodeUser, IDmedewerker FROM klant WHERE username = :username ");
        $stmt ->bindValue(':username',$username);
        $stmt->execute();
        $results = $stmt->fetch();
        if($stmt->rowCount() == 1) {

          if(!password_verify($password, $results['SaveCodeUser'])) {
            $Msg = "het wachtwoord en username komen niet overeen";

          } else {
              $_SESSION['username'] = $username;
              $_SESSION['IDklant'] = $results['IDklant'];

              if($results['IDmedewerker'] == 1) {
                $_SESSION['blogin'] = true;
                header('Refresh: 2; ../beheerder/beheerderindex.php');
                $Msg = "u bent succesvol ingelogd als beheerder " . $results['username'];
              }elseif ($results['IDmedewerker'] == 0) {
              $_SESSION['klogin'] = true;
              header('Refresh: 2; ../klant/klantindex.php');
              $Msg = "u bent succesvol ingelogd " . $results['username'];
            }
          }
        } else {
          $Msg = "er zijn geen accounts gevonden met het username dat u invoerde";
        }
      } catch(PDOException $e) {
        die("error!: " . $e->getMessage());
      }
    }
  }

      if ($Msg != "") {
        echo '<div class="bg-dark text-danger container" id="errormes">';
        echo $Msg . "<br><br>";
        echo '</div>';
      }
    ?>