Quote:<?php
//start new PHP session array
session_start();
//check if login form is submitted
if(isset($_POST['login'])){
//assign variables to post values
$email = $_POST['email'];
$password = $_POST['password'];
//include our database connection
include 'conn.php';
//get the user with email
$stmt = $pdo->prepare('SELECT * FROM mydbtable WHERE email = :email');
try{
$stmt->execute(['email' => $email]);
//check if email in this instance exists
if($stmt->rowCount() > 0){
//get the row
$user = $stmt->fetch();
//validate the password with $user[password]
if(password_verify($password, $user['password'])){
//action after a successful login
//for now just message a successful login
$_SESSION['success'] = 'User verification successful';
catch (PDOException $e){
$_SESSION['exception'] = $e->getMessage();
}
// if email and password are OK, go to the desired webpage
header('location: mywebpage.html.php');
exit();
}
?>