diff --git a/var/www/loginCheck.php b/var/www/loginCheck.php index f479258..982d862 100644 --- a/var/www/loginCheck.php +++ b/var/www/loginCheck.php @@ -1,39 +1,40 @@ setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); - echo "Connected successfully"; - if(count($_POST) > 0){ - $matchingUsers = $connection->query("SELECT COUNT(*) FROM login WHERE username = '".$_POST["Username"]."' and pword = '".$_POST["Password"]."'"); - if($matchingUsers > 0){ - // User has been authenticated; set user as logged in - $_SESSION["loggedInUser"] = "".$_POST["Username"].""; - $_SESSION["loginError"] = ""; - // Move onto landing page - header("Location: /landingPage.html"); - die(); + try{ + $connection = new PDO("mysql:host=$server;dbname=$database", $username, $password); + $connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); + echo "Connected successfully"; + if(count($_POST) > 0){ + $matchingUsers = $connection->query("SELECT COUNT(*) FROM login WHERE username = '".$_POST["Username"]."' and pword = '".$_POST["Password"]."'"); + if($matchingUsers > 0){ + // User has been authenticated; set user as logged in + $_SESSION["loggedInUser"] = "".$_POST["Username"].""; + $_SESSION["loginError"] = ""; + // Move onto landing page + header("Location: /landingPage.html"); + die(); + }else{ + // No matching users found, send user error + $_SESSION["loginError"] = "Invalid Username or Password"; + // Return to login page + header("Location: /login.php"); + die(); + } }else{ - // No matching users found, send user error - $_SESSION["loginError"] = "Invalid Username or Password"; - // Return to login page + // Return to login page, as credentials were not captured + $_SESSION["loginError"] = "Login credentials not found, please try again"; header("Location: /login.php"); die(); } - }else{ - // Return to login page, as credentials were not captured - $_SESSION["loginError"] = "Login credentials not found, please try again"; - header("Location: /login.php"); - die(); } -} -catch(PDOException $e){ - echo "Error: " . $e->getMessage(); -} + catch(PDOException $e){ + echo "Error: " . $e->getMessage(); + } + $connection = null; ?> \ No newline at end of file