prepare("SELECT * FROM users WHERE $field = ? AND user_type = 'admin' AND status = 'approved'"); $stmt->execute([sanitizeInput($login_input)]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $_SESSION['user_id'] = $user['id']; $_SESSION['user_name'] = $user['name']; $_SESSION['user_email'] = $user['email']; $_SESSION['user_type'] = $user['user_type']; $_SESSION['logged_in'] = true; $_SESSION['last_activity'] = time(); header('Location: admin/index.php'); exit(); } else { $error = 'Invalid admin credentials or account not approved.'; } } catch (PDOException $e) { $error = 'Login failed. Please try again later.'; logError('Admin login error: ' . $e->getMessage()); } } } include 'header.php'; include 'navbar.php'; ?>