0)
{
header('location:home.php');
}
elseif(isset($_POST['login'])){
$username = htmlspecialchars($_POST['username']);
$password = htmlspecialchars($_POST['password']);
$sql = "SELECT
employees.first_name,
employees.surname,
employees.second_name,
employees.personal_number,
employees.password,
employees.role_id,
employees.avatar
from employees
WHERE employees.personal_number=:username";
$query = $dbh->prepare($sql);
$query->bindParam(':username',$username,PDO::PARAM_STR);
$query-> execute();
$results=$query->fetchAll(PDO::FETCH_OBJ);
if($query->rowCount() > 0){
foreach ($results as $row) {
$hashpass=$row->password;
$firstname = $row->first_name;
$lastname = $row->surname;
}//verifying Password
if (password_verify($password, $hashpass)) {
$_SESSION['userlogin']=$firstname . ' ' . $lastname;
$_SESSION['UserId']=$row->personal_number;
$_SESSION['UserRole']=$row->role_id;
$_SESSION['UserImage']=$row->avatar;
echo "";
}
else {
$wrongpassword='
Oh Snapp!😕 Alert Password: You entered wrong password.
';
}
}
//if username or email not found in database
else{
$wrongusername='
Oh Snapp!🙃 Alert UserName: You entered a wrong UserName.
';
}
}
?>
Login - HRMS
HR Documents Portal
Sign-In
