<?php
session_start();
// Połączenie z bazą danych
$host = "localhost";
$user = "root";
$password = "";
$dbname = "test_db";
$conn = new mysqli($host, $user, $password, $dbname);
if ($conn->connect_error) {
die("Błąd połączenia: " . $conn->connect_error);
}
if ($_SERVER["REQUEST_METHOD"] == "POST") {
$username = $conn->real_escape_string($_POST['username']);
$password = $conn->real_escape_string($_POST['password']);
$sql = "SELECT * FROM users WHERE username = ?";
$stmt = $conn->prepare($sql);
$stmt->bind_param("s", $username);
$stmt->execute();
$result = $stmt->get_result();
if ($result->num_rows == 1) {
$user = $result->fetch_assoc();
if (password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['username'] = $user['username'];
header("Location: dashboard.php");
exit();
} else {
echo "Nieprawidłowe hasło.";
}
} else {
echo "Nieprawidłowa nazwa użytkownika.";
}
$stmt->close();
}
$conn->close();
?>
<!DOCTYPE html>
<html lang="pl">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Logowanie</title>
</head>
<body>
<form method="POST">
<label>Nazwa użytkownika:</label>
<input type="text" name="username" required><br>
<label>Hasło:</label>
<input type="password" name="password" required><br>
<button type="submit">Zaloguj</button>
</form>
</body>
</html>