From 17a654ee6977e8cdb4318d535b5dc3693b6a7e43 Mon Sep 17 00:00:00 2001
From: TARANG0503 <40140984+TARANG0503@users.noreply.github.com>
Date: Tue, 1 Oct 2019 19:20:10 +0530
Subject: [PATCH] Create login-backend

---
 login-backend | 48 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 login-backend

diff --git a/login-backend b/login-backend
new file mode 100644
index 0000000..cfb9fb1
--- /dev/null
+++ b/login-backend
@@ -0,0 +1,48 @@
+<?php
+if(isset($_POST['login-submit'])){
+    require "db.inc.php";
+    $mailId = $_POST['mailId'];
+    $password = $_POST['pwd'];
+    if (empty($mailId) || empty($password)){
+        header("Location: ../index.php?error=emptyfields");
+        exit();
+    }
+    else {
+        $sql = "SELECT * FROM users WHERE Username=? OR Email=?;";
+        $stmt = mysqli_stmt_init($conn);
+        if(!mysqli_stmt_prepare($stmt,$sql)){
+            header("Location: ../index.php?error=sqlerrror");
+            exit();
+        }
+        else {
+            mysqli_stmt_bind_param($stmt,"ss",$mailId, $mailId );
+            mysqli_stmt_execute($stmt);
+            $result = mysqli_stmt_get_result($stmt);
+            if($row = mysqli_fetch_assoc($result)) {
+                $pwdCheck = password_verify($password, $row['PWd']);
+                if($pwdCheck == false ){
+                    header("Location: ../index.php?error=wrongpwd");
+                    exit();
+                }
+                else  if($pwdCheck == true){
+                    session_start();
+                    $_SESSION['Id'] = $row['SerialNo'];
+                    $_SESSION['UserId'] = $row['UserName'];
+                    header("Location: ../index.php?login=success");
+                    exit();
+                }
+                else {
+                    header("Location: ../index.php?error=wrongpwd");
+                    exit();
+                }
+
+            }
+        }
+        
+    }
+    
+}
+else {
+    header("Location: ../index.php");
+    exit();
+}