prepare('SELECT * FROM users WHERE email = :email'); $stmt->execute([':email' => $email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $_SESSION['user_id'] = $user['id']; header('Location: index.php'); exit; } else { $errors[] = 'Invalid email or password'; } } catch (PDOException $e) { $errors[] = 'Database error: ' . $e->getMessage(); } } } ?>