prepare("SELECT id, name, password_hash FROM users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password_hash'])) { $_SESSION['user_id'] = $user['id']; $_SESSION['user_name'] = $user['name']; header("Location: index.php"); exit; } else { $error_message = "Invalid email or password."; } } } ?>