<?php
session_start();

$username = $_POST["username"];
$password = $_POST["password"];
$remember = $_POST["remember"];

if ($remember === null)
  $remember = false;
elseif ($remember === "on")
  $remember = true;

if (in_array(null, [$username, $password, $remember], true) === true || in_array('', [$username, $password, $remember], true) === true) {
  header("HTTP/1.0 400 No Teapot here :(");
  header("Location: index.php");
  $_SESSION['error'] = "You didn't specify username or password or remember option";
  exit();
}

require_once "dbCredentials.php";

$pdo = new PDO("mysql:dbname=$dbName;host=$dbHost;charset=utf8mb4", $dbUser, $dbPassword);
$pdo->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
$stmt = $pdo->prepare("SELECT `firstname`, `lastname`, `email`, `user_type` FROM `cms_user` WHERE `login`=:login AND `password`=:password");
$stmt->execute(["login" => $username, "password" => $password]);
$user = $stmt->fetchAll(PDO::FETCH_ASSOC);
if (count($user) === 0) {
  header("HTTP/1.0 403 No Teapot for you :)");
  header("Location: index.php");
  $_SESSION['error'] = "Wrong username or password";
  exit();
}
$user = $user[0];
$_SESSION['firstname'] = $user['firstname'];
$_SESSION['lastname'] = $user['lastname'];
$_SESSION['email'] = $user['email'];
$_SESSION['user_type'] = $user['user_type'];
$_SESSION['logged'] = true;

if ($remember === true) {
  setcookie("username", $username, time() + 60 * 60 * 24 * 365);
} else {
  unset($_COOKIE['username']);
  setcookie('username', '', time() - 3600);
}

header("HTTP/1.0 200 Teapot for you :]");
header("Location: main.php");