prepare("SELECT * FROM users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $_SESSION['user_id'] = $user['id']; $_SESSION['user_role'] = $user['role']; header("Location: dashboard.php"); exit; } else { $error = "Invalid credentials"; } } require_once 'includes/header.php'; ?>