prepare("SELECT * FROM users WHERE username = ?"); $stmt->execute([$username]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { // Regenerate session ID to prevent session fixation session_regenerate_id(true); // Clear any old session data (like guest_tab_id) $_SESSION = []; $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; $_SESSION['role'] = $user['role']; // TODO: Handle "Remember Me" header('Location: index.php'); exit; } else { $error = translate('error_invalid_credentials'); } } } require_once 'include/header.php'; ?>
<?php echo $site_title; ?> Logo

- login