prepare('SELECT * FROM users WHERE username = :username'); $stmt->bindParam(':username', $username); $stmt->execute(); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && password_verify($password, $user['password'])) { $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; $_SESSION['user_role'] = $user['role']; header('Location: pedidos.php'); exit(); } else { $error = 'Invalid username or password.'; } } catch (PDOException $e) { $error = 'Database error: ' . $e->getMessage(); } } } ?>