<?php
require_once "user.php";
require_once "database.php";
require_once "misc.php";

session_start();

$username=$_POST["username"];
$password=$_POST["password"];
/*server side verification*/
if(gettype($username)!="string" || gettype($password)!="string")
{
	die("You didn't specify the pass or the username");
}

$user=$database->authenticate($username,$password);
if(!$user)
{
	die("Password or username is incorrect");
}

$_SESSION['user_object'] = $user;

header('Location: /');

?>