prepare("SELECT is_superadmin FROM users WHERE id = ?"); $stmt->execute([$_SESSION['user_id']]); $user = $stmt->fetch(); if (!$user || $user['is_superadmin'] != 1) { header('Location: /dashboard.php'); exit; } ?>