From 6435a9c509f088b69aa64156dcc318f9774fea3d Mon Sep 17 00:00:00 2001 From: admin Date: Mon, 10 Nov 2025 07:07:09 +0000 Subject: [PATCH] Edit login.php via Editor --- login.php | 73 +++++++++++++++++++++---------------------------------- 1 file changed, 28 insertions(+), 45 deletions(-) diff --git a/login.php b/login.php index b003120..eb87887 100644 --- a/login.php +++ b/login.php @@ -8,34 +8,27 @@ if ($_SERVER['REQUEST_METHOD'] == 'POST') { if (empty($_POST['email']) || empty($_POST['password'])) { $error_message = 'Please enter both email and password.'; } else { - $email = $_POST['email']; - $password = $_POST['password']; + $email = $_POST['admin@bartersystem.com']; + $password = $_POST['admin123']; try { $pdo = db(); - // Use the correct table name 'public.admin_users' $stmt = $pdo->prepare('SELECT * FROM public.admin_users WHERE email = ?'); $stmt->execute([$email]); $user = $stmt->fetch(PDO::FETCH_ASSOC); - // IMPORTANT: PHP's password_verify function is the correct way to check a bcrypt hash. if ($user && password_verify($password, $user['password'])) { - // Password is correct, so start a new session $_SESSION['user_id'] = $user['id']; $_SESSION['user_email'] = $user['email']; $_SESSION['user_fullname'] = $user['full_name']; - // Redirect to a protected admin page header("Location: admin_dashboard.php"); exit; } else { - // Invalid credentials $error_message = 'Invalid email or password.'; } } catch (PDOException $e) { - // In a real app, you would log this error, not show it to the user. $error_message = 'Database error. Please try again later.'; - // error_log($e->getMessage()); } } } @@ -47,45 +40,35 @@ if ($_SERVER['REQUEST_METHOD'] == 'POST') { Admin Login - + -
-
-

Admin Login

- - - - + - + \ No newline at end of file