##

#!/usr/bin/perl

use warnings;
use CGI;
use DBI;
use DBD::mysql;
use CGI::Session '-ip_match';
use JSON;

my $cgi = CGI->new;

my $email = $cgi->param('email_address');
my $password = $cgi->param('password');

my $myConnection = DBI->connect("DBI:mysql:xxxxx:localhost","xxxxx","xxxxx");
my $sql = "SELECT COUNT(*) FROM UserDatabase WHERE EmailAddress = ? AND Password = SHA2(?, 256)";

my $sth = $myConnection->prepare($sql);

$sth->execute;

$sth->finish;

if($myConnection->selectcol_arrayref($sql, undef, $email, $password)->[0] == 1)
{

    my $session = CGI::Session->new() or die CGI::Session->errstr;
		
    $session->param('email_address', $email);
		
    $session->expire('+1M');

    print $session->header("Location: https://xxxxx.xxx/dashboard");
	
}
else
{    
    my %rec_hash = ('show' => "block");
    my $json = encode_json \%rec_hash;
    print $cgi->header("https://xxxxx.xxx/login");
    print "$json";
    exit; 
}