prepare("SELECT * FROM users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && password_verify($password, $user['password'])) { error_log("login.php: Login successful for user ID: " . $user['id']); $_SESSION['user_id'] = $user['id']; $_SESSION['user_name'] = $user['name']; $_SESSION['user_role'] = $user['role']; error_log("login.php: \$_SESSION after login: " . print_r($_SESSION, true)); header("Location: index.php"); exit; } else { $error_message = 'Invalid email or password.'; error_log("login.php: " . $error_message); } } catch (PDOException $e) { $error_message = 'Database error: ' . $e->getMessage(); error_log("login.php: " . $error_message); } } } ?>