<?php 
// Initialize the session
session_start();

// Check if the user is already logged in, if yes then redirect to welcome page
if(isset($_SESSION["loggedin"]) && $_SESSION["loggedin"] === true){
    header("location: planetscards.php");
    exit;
}

// Include config file
require_once "dbconnexion.php";

// Define variables and initialize with empty values
$username = $password = "";
$username_err = $password_err = "";

// Processing form data when form is submitted
if($_SERVER["REQUEST_METHOD"] == "POST"){
    // Check if username is empty
    if(empty(trim($_POST["username"]))){

        $_SESSION['username_err'] = "Please enter username.";
        header("location: connection.php");
        exit;
    } else{
        $username = trim($_POST["username"]);
    }
    // Check if password is empty
    if(empty(trim($_POST["password"]))){
        $_SESSION['password_err'] = "Please enter your password.";
    } else{
        $password = trim($_POST["password"]);
    }
    // Validate credentials
    if(empty($username_err) && empty($password_err)){
        // Prepare a select statement
        $stmt = $pdo->prepare("SELECT id, username, password FROM users WHERE username = :username");
        $stmt->bindParam(':username', $username, PDO::PARAM_STR);
        $stmt->execute();
        $user = $stmt->fetch(PDO::FETCH_ASSOC);
        // checking if password is the same password hashed in database 
        if ($user && password_verify($password, $user['password'])) {
            //if true checking if checkbox remember me isset
            if (!isset($_POST['remember_me'])) {
            // if false stocking cookies 
            $expireTime = time() + 86400 * 30;
            setcookie('username', $user['username'], $expireTime);
            setcookie('email', $user['email'], $expireTime);
        }//if true stocking sessions 
        $_SESSION['id'] = $user['id'];
        $_SESSION['username'] = $user['username'];
        $_SESSION['email'] = $user['email'];
        header("location: planetscards.php");
      exit;}
         else{
            $_SESSION['password_err'] = "The password you entered was not valid.";
            header("location: connection.php");
            exit;

        }        
        // Close statement
        unset($stmt);

    }

    // Close connection
    unset($pdo);
}

<?php
// Include database connection file
require_once "dbconnexion.php";

// Define variables and initialize with empty values
$email = $new_password = $confirm_new_password = "";
$email_err = $new_password_err = $confirm_new_password_err = "";

// Processing form data when form is submitted
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Validate email
    if (empty(trim($_POST["email"]))) {
        $email_err = "Please enter your email.";
    } else {
        $email = trim($_POST["email"]);
    }

    // Validate new password
    if (empty(trim($_POST["new_password"]))) {
        $new_password_err = "Please enter your new password.";
    } elseif (strlen(trim($_POST["new_password"])) > 10) {
        $new_password_err = "Password limit is 10 please enter a valid passsword";
    } else {
        $new_password = trim($_POST["new_password"]);
    }

    // Validate confirm new password
    if (empty(trim($_POST["confirm_new_password"]))) {
        $confirm_new_password_err = "Please confirm your new password.";
    } else {
        $confirm_new_password = trim($_POST["confirm_new_password"]);
        if (empty($new_password_err) && ($new_password != $confirm_new_password)) {
            $confirm_new_password_err = "Passwords did not match.";
        }
    }

    // Check input errors before updating the database
    if (empty($email_err) && empty($new_password_err) && empty($confirm_new_password_err)) {
        // Prepare a select statement
        $sql = "SELECT id FROM users WHERE email = :email";

        if ($stmt = $pdo->prepare($sql)) {
            // Bind variables to the prepared statement as parameters
            $stmt->bindParam(":email", $param_email, PDO::PARAM_STR);

            // Set parameters
            $param_email = $email;

            // Attempt to execute the prepared statement
            if ($stmt->execute()) {
                // Check if email exists, if yes then update the password
                if ($stmt->rowCount() == 1) {
                    $hashed_new_password = password_hash($new_password, PASSWORD_DEFAULT);
                    $sql = "UPDATE users SET password = :password WHERE email = :email";

                    if ($stmt = $pdo->prepare($sql)) {
                        // Bind variables to the prepared statement as parameters
                        $stmt->bindParam(":password", $hashed_new_password, PDO::PARAM_STR);
                        $stmt->bindParam(":email", $param_email, PDO::PARAM_STR);

                        // Set parameters
                        $param_email = $email;

                        // Attempt to execute the prepared statement
                        if ($stmt->execute()) {
                            // Password updated successfully. Redirect to login page
                            header("location: connection.php");
                            exit();
                        } else {
                            echo "Oops! Something went wrong. Please try again later.";
                        }
                    }

                    // Close statement
                    unset($stmt);
                }
                unset($pdo);
            }
        }
    }
}

<?php
// Start the session
session_start();
$p = "";
if(isset($_COOKIE["username"]) && isset($_COOKIE["id"])){
    // If cookies are set, use cookie data
    $username = $_COOKIE["username"];
    $userID = $_COOKIE["id"];
    $p = "Welcome" . " " . $username;
} elseif(isset($_SESSION["id"])) {
    // If sessions are set, use session data
    $username = $_SESSION["username"];
    $userID = $_SESSION["id"];
    $p = "Welcome" . " " . $username;
} else {
    // If neither cookies nor sessions are set, redirect to login page
    header("location: connection.php");
    exit;
}
?>