Login

prepare("SELECT id, name, password, role FROM admins WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $role = $user['role']; $user_id = $user['id']; $user_name = $user['name']; } // 2. Check patients table (if not found in admins) if (!$user_id) { $stmt = $pdo->prepare("SELECT id, full_name as name, password FROM patients WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $role = 'patient'; $user_id = $user['id']; $user_name = $user['name']; } } // 3. Check doctors table (if not found yet) if (!$user_id) { $stmt = $pdo->prepare("SELECT id, full_name as name, password FROM doctors WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $role = 'doctor'; $user_id = $user['id']; $user_name = $user['name']; } } // 4. Check hospitals table (if not found yet) if (!$user_id) { $stmt = $pdo->prepare("SELECT id, hospital_name as name, password FROM hospitals WHERE contact_email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $role = 'hospital'; $user_id = $user['id']; $user_name = $user['name']; } } if ($user_id) { $_SESSION['user_id'] = $user_id; $_SESSION['user_name'] = $user_name; $_SESSION['user_role'] = $role; $_SESSION['user_email'] = $email; header("Location: dashboard.php"); exit; } else { $message = '

Invalid email or password.

'; } } catch (PDOException $e) { $message = '

Database error: ' . $e->getMessage() . '

'; } } ?> Login - Medicaltour

Access your dashboard.

Don't have an account? Register here