query("SELECT * FROM user where Email='$EM' AND isactive=1");
$row = $result->fetch_array(MYSQLI_BOTH);
}else{
$result = $con->query("SELECT * FROM user where Username='$EM' AND isactive=1");
$row = $result->fetch_array(MYSQLI_BOTH);
};
#Password überprüfen
if(password_verify($PW, $row['Password'] )){
if($row['privacy_policy'] != 1){
print '
Neue Datenschutzerklärung
';
}else{
#Session varialen deklarieren
$_SESSION["UserID"] = $row['UserID'];
$_SESSION["Fname"] = $row['Fname'];
$_SESSION["Lname"] = $row['Lname'];
$_SESSION["Email"] = $row['Email'];
$_SESSION["IsActive"] = $row['isactive'];
$_SESSION["Uname"] = $row['Username'];
$_SESSION["UserLevel"] = $row['UserLevel'];
#weiterleiten zum Bestell Bereich
header('Location: Bestellen.php');
}
}else{
#Login auf fehlgeschlagen setzen
$_SESSION["LogInFail"] = "Yes";
}
}
if(isset($_POST['Datenschutz'])){
#Variablen umsetzen
$EM = $_POST['Email'];
if(isset($_POST['privacy'])){
$privacy = 1;
}
#Prüfen ob login mit Mail oder Username stattfindet und wariablen setzen
if(filter_var($EM,FILTER_VALIDATE_EMAIL)){
$result = $con->query("Update user set privacy_policy = '$privacy' where Email='$EM' AND isactive=1");
}else{
$result = $con->query("Update user set privacy_policy = '$privacy' where Username='$EM' AND isactive=1");
}
}
#Header und menü einbinden
$webpagetitle = "Login";
include "Includes/Header.php";
include "Includes/Menu.php";
#html Content ausgeben
#Timestamp auslesen für Countdown
$timestamp = $con->query("Select timestamp from timestamp")->fetch_object()->timestamp;
?>