Untitled

<!DOCTYPE html>
<html lang="en">
<head>
    <title>Autoroute | Connexion</title>
    <meta charset="utf-8">
    <style>
        .error{color: #b90000;}
        .valid{color: #31a765;}
    </style>
    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
</head>
<body>

<?php

require_once("header.php");


$username = $password = "";
$test="";

if ($_SERVER["REQUEST_METHOD"]=="POST") {

    $username=$_POST["username"];
    $password=$_POST["password"];

}


?>


<div class="container">
    <div id="loginbox" style="margin-top:50px;" class="mainbox col-md-6 col-md-offset-3 col-sm-8 col-sm-offset-2">
        <div class="panel panel-info" >
            <div class="panel-heading">
                <div class="panel-title">Se connecter</div>
            </div>

            <div style="padding-top:30px" class="panel-body" >

                <div style="display:none" id="login-alert" class="alert alert-danger col-sm-12"></div>

                <form id="loginform" class="form-horizontal" role="form" method="post">

                    <div style="margin-bottom: 25px" class="input-group">
                        <span class="input-group-addon"><i class="glyphicon glyphicon-user"></i></span>
                        <input id="login-username" type="text" class="form-control" name="username" placeholder="Nom d'utilisateur">
                    </div>

                    <div style="margin-bottom: 25px" class="input-group">
                        <span class="input-group-addon"><i class="glyphicon glyphicon-lock"></i></span>
                        <input id="login-password" type="password" class="form-control" name="password" placeholder="Mot de passe">
                    </div>

                    <div style="margin-top:10px" class="form-group">
                        <div class="col-md-offset-3 col-md-9">
                            <button id="btn-signup" name="submit" type="submit" value="submit" class="btn btn-info"><i class="icon-hand-right"></i>Connexion</button>
                        </div>
                    </div>

                    <div class="form-group">
                        <div class="col-md-12 control">
                            <div style="border-top: 1px solid#888; padding-top:15px; font-size:85%" >
                                Vous n'avez pas de compte ?
                                <a href="SignUp.php" onClick="$('#loginbox').hide(); $('#signupbox').show()">
                                    Inscrivez-vous ici !
                                </a>
                            </div>
                        </div>
                    </div>
                </form>


            </div>
        </div>
    </div>
</div>

<?php

if (isset($_POST['submit'])!="") {

    if ($username!="" && $password!="") {

        $username=$_POST["username"];
        $password=hash('sha256',$_POST["password"]);

        $request = $bdd->prepare('SELECT * FROM users WHERE Username = :username AND Password = :password');
        $request->execute(array(
            'username'     => $username,
            'password'  => $password
        ));
        $data = $request->fetch();

        if ($data['Username']==$username && $data['Password']==$password) {
            $_SESSION['user']=$data['FirstName'];

            if($data['admin']==1) {
                $_SESSION['admin'] = 1;
                ?>
                <br><br><h3 align="center"><span
                            class="valid">Connexion admin ! Bienvenue <?php echo $data['FirstName'] . " " . $data['LastName']; ?></span>
                </h3>
                <?php if (headers_sent()) {
                    ?>
                    <h3 align="center"><?php die("Cliquez <a href=index.php>ici</a> sur ce lien pour continuer"); ?></h3>
                <?php }
                else{
                    exit(header("Location: index.php"));
                }
            }
            else {
                $_SESSION['admin']=0;
                ?>
                <br><br><h3 align="center"><span class="valid">Connexion client ! Bienvenue <?php echo $data['FirstName']." ".$data['LastName'];?></span></h3>
<?php
                if (headers_sent()) {
                    ?><h3 align="center"><?php die("Cliquez <a href=DBaccess.php>ici</a> sur ce lien pour continuer");?></h3>
<?php                }
                else{
                    exit(header("Location: DBaccess.php"));
                }
            }


        }
        else {?>
            <br><br><h3 align="center"><span class="error">Nom utilisateur ou mot de passe incorrect</span></h3>
<?php        }


    }
    else {
?>
        <br><br><h3 align="center"><span class="error">Remplir tout le formulaire</span></h3>
    <?php    }
}

?>
</body>
</html>