<?php

session_start();

include "conn.php";

$timenow = date('Y-m-d H:i:s', time());

$username = mysqli_real_escape_string($conn,$_POST['user']);
$password = mysqli_real_escape_string($conn,$_POST['pass']);

//checking for member user
$sql = "Select * From member Where Mem_Name='".$username."' and Mem_Password = '".md5($password)."'";

$result = mysqli_query($conn, $sql);

if(mysqli_num_rows($result)<=0){
	//sql checking for the manager user
	$sql = "Select  * From manager Where Man_Name = '".$username."' and Man_Password = '".$password."'";
	$result = mysqli_query($conn, $sql);

	if(mysqli_num_rows($result)<=0){
		//sql checking for the staff user
		$sql = "Select  * From staff Where Sta_Name = '".$username."' and Sta_Password = '".$password."'";
		$result = mysqli_query($conn, $sql);

		if(mysqli_num_rows($result)<=0){
			echo "<script>alert('Invalid username/password! Please Try Again!');";
			die("window.location.href='login.html';</script>");
		}
		else{
			$row=mysqli_fetch_array($result);

			$_SESSION['staname'] = $row['Sta_Name'];

			echo "<script>alert('Welcome back! ".$_SESSION['staname']."');";
			echo "window.location.href='staff_page.php';</script>";

			//update the user last login datetime
			$update = "UPDATE staff SET User_Last_Login = '$timenow' WHERE Sta_Name = '$username'";
			$result1 = mysqli_query($conn, $update);
		}
	}else{
		$row=mysqli_fetch_array($result);

		$_SESSION['manname'] = $row['Man_Name'];

		echo "<script>alert('Welcome back! ".$_SESSION['manname']."');";
		echo "window.location.href='manager_userinfo.php';</script>";

		//update the user last login datetime
		$update = "UPDATE manager SET User_Last_Login = '$timenow' WHERE Man_Name = '$username'";
		$result1 = mysqli_query($conn, $update);
	}
	
}else{
	$row=mysqli_fetch_array($result);

	$_SESSION['memid'] = $row['Mem_ID'];
	$_SESSION['memname'] = $row['Mem_Name'];//Mem session
	$_SESSION['password'] = $row['Mem_Password'];
	$_SESSION['address'] = $row['Mem_Address'];
	$_SESSION['email'] = $row['Mem_Email'];
	$_SESSION['phone'] = $row['Mem_Phone'];
	$_SESSION['role'] = $row['User_Role'];
	$timenow = date('Y-m-d H:i:s', time());

	echo "<script>alert('Welcome back! ".$_SESSION['memname']."');";
	echo "window.location.href='index.php';</script>";

	//update the user last login datetime
	$update = "UPDATE member SET User_Last_Login = '$timenow' WHERE Mem_Name = '$username'";
	$result1 = mysqli_query($conn, $update);

}

?>