login($_POST['username'] ?? '', $_POST['password'] ?? ''); if ($user) { $_SESSION['user'] = $user; header('Location: index.php'); exit; } else { $error = 'Invalid username or password.'; } } ?>