/** * @param Request $request * @param Application $app * @return RedirectResponse */ public function loginProcessAction(Request $request, Application $app) { $userRepository = new UserRepository($app['pdo']); $user = $userRepository->getByUsername($request->get('username')); if (!empty($user)) { if (password_verify($request->get('password'), $user->getPassword())) { $app['session']->set('logged', true); $app['session']->set('user_id', $user->getId()); return new RedirectResponse('/admin'); } } return $app['twig']->render('public/login.html.twig', ['message' => 'Invalid email or password', 'username' => $request->get('username')]); }