set_charset("utf8");
$email=$_POST['email'];
$password=md5($_POST['pass']);
$sql = "SELECT * FROM `".SHOP_ID."_user` WHERE `email`=? AND `pass`=?";
$stmt= $link->prepare($sql);
$stmt->bind_param("ss",$email,$password);
$stmt->execute();
$result= $stmt->get_result();
// print_r($result);
// exit;
$row = $result->fetch_assoc();
if ($result->num_rows == 1){
$_SESSION["loggedin"] = true; $_SESSION["shop"] = SHOP_ID; $_SESSION["name"] = $row["name"]; $_SESSION["id"] = $row["id"];$_SESSION["email"] = $row["email"]; //var_dump($_SESSION);
echo '';
//echo"Yes";
}
else echo "credentials did not match";
$link->close();
}
?>