<?php

require_once 'DBConnect.php';

function login($dbh, $name, $password) {
    global $status;
    $actived = 1;
    $deleted = 0;
    $sth = $dbh->prepare("SELECT * FROM `user` WHERE `loginname` = ? AND `loginpw` = ? AND `actived` = ? AND `deleted` = ?");
    $sth->bindParam(1, $name);
    $sth->bindParam(2, md5($password));
    $sth->bindParam(3, $actived);
    $sth->bindParam(4, $deleted);
    $sth->execute();
    $ResultSet = $sth->fetch(PDO::FETCH_ASSOC);

    if (!empty($ResultSet)) {
        $_SESSION['MIS_login'] = $ResultSet;
        header('Location: ./main.php');
    } else {
        $status=false;
    }
}

?>