<?php

session_unset();

error_reporting(0);

session_start();

include 'connect.php';

if( isset($_POST['userName']) && isset($_POST['password']) ){

$usernameEntered = $_POST['userName'];

$passwordEntered = $_POST['password'];

$conn = db2_connect( $database , $dbusername , $dbpassword );

$sqlquery = "SELECT password FROM OWNER.USERS WHERE email = '$usernameEntered' ";

$stmt = db2_prepare($conn, $sqlquery);

if ($stmt) {

$result = db2_execute($stmt);

if (!$result){

db2_stmt_errormsg($stmt);

}

while ($row = db2_fetch_array($stmt)) {

$passwordFromDb = $row[0];

}

db2_close($conn);

echo $passwordFromDb;

if($passwordEntered == $passwordFromDb){

$_SESSION['username'] = $usernameEntered;

header('Location: nav.php');

}

else{

header('Location: login.php');

}

}

}

else{

http_response_code(400);

}

?>