real_escape_string($_POST['username']);
$password = $_POST['password'];
$sql = "SELECT * FROM users WHERE username = '$username'";
$result = $conn->query($sql);
if ($result->num_rows > 0) {
$user = $result->fetch_assoc();
if (password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['username'] = $user['username'];
$_SESSION['role'] = $user['role'];
if ($user['role'] === 'admin') {
header("Location: view_bills.php");
exit();
} else {
header("Location: index.php");
exit();
}
} else {
$error = "ভুল পাসওয়ার্ড! আবার চেষ্টা করুন।";
}
} else {
$error = "এই ইউজারনেমে কোনো অ্যাকাউন্ট পাওয়া যায়নি!";
}
}
?>
Login - ICT Bill System