<?php
    session_start();
    include 'config.php';
    $email=$db->real_escape_string($_POST['email']);
    $password=$db->real_escape_string(md5($_POST['password']));

    $query="SELECT ID_account,email,password FROM account WHERE email='$email';";

    $risultato=$db->query($query);
    if($risultato->num_rows>0){
        $riga=$risultato->fetch_assoc();
        $db_pass=$db->real_escape_string($riga['password']);
        if(strcmp($password,$db_pass)==0){
            $_SESSION['account']=$riga['ID_account'];
            header("Location:../home.php");
        }
        else
            header("Location: ../errore.php?errore=pass&&form_pass=$password&&db_pass=$db_pass");
    }
    else
        header("Location: ../errore.php?errore=email");

?>