<?php
include 'config.php';
if (isset($_REQUEST['submit_Login']))
{
    if (empty($_REQUEST['username']))
    {
        die('Nezadal si jméno');
    }
    if (empty($_REQUEST['password']))
    {
        die('Nezadal si heslo');
    }

    $username = $_REQUEST['username'];
    $password = $_REQUEST['password'];
    $username = mysqli_real_escape_string($conn, $username);
    $password = mysqli_real_escape_string($conn, $password);
    $hash = password_hash($password, PASSWORD_BCRYPT);
    $hash = mysqli_real_escape_string($conn, $hash);
    $sql = "SELECT * FROM login WHERE username  = '$username'";
    $query = $conn->query($sql);
    if ($query == false)
    {
        die('Query přikaz nebyl vykonan');
    }
    if ($query->num_rows > 0)
    {
        while ($row = $query->fetch_assoc())
        {
            $password_Db = $row['heslo'];
            if (password_verify($password, $password_Db))
            {
                session_start();
                $_SESSION['username'] = $username;
                $_SESSION['valid'] = 'valid';
                header('Location: index.php');
            }
            else
            {
                die('Špatně zadané heslo');
            }
        }

    }
}
?>


<form action="login.php" method="post">

<input placeholder="Jméno" type="text" name="username"><br>
<input placeholder="Heslo" type="password" name="password"><br>
<button type="submit" name="submit_Login">Odeslat</button><br>



</form>