prepare("SELECT * FROM admin_users WHERE username = ?"); $stmt->execute([$username]); $admin = $stmt->fetch(); if ($admin && password_verify($password, $admin['password_hash'])) { $_SESSION['admin_id'] = $admin['id']; header('Location: /admin.php'); exit; } else { $error = '用户名或密码错误'; } } ?>