Assure Quality Certification Limited
prepare($sql)){
// Bind variables to the prepared statement as parameters
$stmt->bindParam(':username', $param_username, PDO::PARAM_STR);
// Set parameters
$param_username = trim($_POST["username"]);
// Attempt to execute the prepared statement
try{
if($stmt->execute()){
// Check if username exists, if yes then verify password
if($stmt->rowCount() == 1){
if($row = $stmt->fetch()){
$id = $row["id"];
$username = $row["username"];
$hashed_password = base64_decode($row["password"]);
$hash=password_hash($hashed_password, PASSWORD_DEFAULT);
if(password_verify($password,$hash)){
// Password is correct, so start a new session
session_start();
// Store data in session variables
$_SESSION["loggedin"] = true;
$_SESSION["id"] = $id;
$_SESSION["username"] = $username;
// Redirect user to welcome page
header("location: allcertificate.php");
} else{
// Display an error message if password is not valid
$password_err = "The password you entered was not valid.";
echo '';
header("location: login.php");
}
}
} else{
// Display an error message if username doesn't exist
$username_err = "No account found with that username.";
echo '';
header("location: login.php");
}
}
else{
echo "Oops! Something went wrong. Please try again later.";
echo '';
header("location: login.php");
}
}
catch(Exception $e){
'Message: ' .$e->getMessage();
echo '
Message: Oops! Something went wrong. Please try again later.
';
}
}
// Close statement
unset($stmt);
}
// Close connection
unset($pdo);
}
?>