Files
php-genz/login.php
T

63 lines
2.2 KiB
PHP

<!DOCTYPE html>
<html lang="it">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Accesso</title>
<link rel="stylesheet" href="assets/style.css">
</head>
<body>
<?php
session_start();
include 'db_conf.php';
$error = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$email = $_POST['email'];
$password = $_POST['password'];
$sql = "SELECT id_utente, nome, cognome, password FROM Utenti WHERE email = ?";
if ($stmt = $conn->prepare($sql)) {
$stmt->bind_param("s", $email);
$stmt->execute();
$stmt->store_result();
if ($stmt->num_rows > 0) {
$stmt->bind_result($user_id, $name, $surname, $hashed_password);
$stmt->fetch();
if (password_verify($password, $hashed_password)) {
$_SESSION['id'] = $user_id;
$_SESSION['name'] = $name;
$_SESSION['surname'] = $surname;
header('Location: index.php');
exit();
} else {
$error = 'Credenziali errate.';
}
} else {
$error = 'Credenziali errate.';
}
$stmt->close();
} else {
$error = 'Errore nel database.';
}
}
?>
<form action="" method="POST">
<h2>Login</h2>
<label for="email">Indirizzo e-mail:</label>
<input type="email" id="email" name="email" required><br>
<label for="password">Password:</label>
<input type="password" id="password" name="password" required><br>
<?php if ($error): ?>
<p style="color: red; text-align: center;"><?php echo htmlspecialchars($error); ?></p>
<?php endif; ?>
<br>
<input type="submit" value="Accedi">
<p>Non hai un account? <a href="register.php">Registrati</a></p>
</form>
</body>
</html>