0) {
$user = mysqli_fetch_assoc($result);
// Debug - Remove after testing
// echo "Stored hash: " . $user['password'] . "
";
// echo "Verify result: " . (password_verify($password, $user['password']) ? 'true' : 'false');
// exit();
if (password_verify($password, $user['password'])) {
// Login successful
$_SESSION['user_id'] = $user['id'];
$_SESSION['username'] = $user['username'];
$_SESSION['full_name'] = $user['full_name'];
$_SESSION['role'] = $user['role'];
// Update last login if you have that column
// mysqli_query($conn, "UPDATE users SET last_login = NOW() WHERE id = " . $user['id']);
header("Location: index.php");
exit();
} else {
$error = "Invalid password! Please try again.";
}
} else {
$error = "User not found or account disabled!";
}
mysqli_stmt_close($stmt);
}
}
?>
Management System