38395-vm/login.php
Flatlogic Bot 60a638c740 sadiq
2026-02-13 08:56:51 +00:00

69 lines
2.5 KiB
PHP

<?php
$page_title = "Login - AFG CARS";
include 'includes/header.php';
$error = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$email = trim($_POST['email'] ?? '');
$password = trim($_POST['password'] ?? '');
if ($email && $password) {
$pdo = db();
$stmt = $pdo->prepare("SELECT * FROM users WHERE email = ?");
$stmt->execute([$email]);
$user = $stmt->fetch();
if ($user && password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['full_name'] = $user['full_name'];
$_SESSION['role'] = $user['role'];
if ($user['role'] === 'admin') {
header('Location: admin/dashboard.php');
} else {
header('Location: user/dashboard.php');
}
exit;
} else {
$error = "Invalid email or password.";
}
} else {
$error = "Please fill in all fields.";
}
}
?>
<div class="container py-5">
<div class="row justify-content-center">
<div class="col-md-5">
<div class="card border-0 shadow-sm p-4" style="border-radius: 20px;">
<div class="text-center mb-4">
<h2 class="fw-bold">Welcome Back</h2>
<p class="text-muted">Login to manage your listings and account</p>
</div>
<?php if ($error): ?>
<div class="alert alert-danger"><?php echo $error; ?></div>
<?php endif; ?>
<form method="POST">
<div class="mb-3">
<label class="form-label">Email Address</label>
<input type="email" name="email" class="form-control" placeholder="admin@gmail.com" required>
</div>
<div class="mb-4">
<label class="form-label">Password</label>
<input type="password" name="password" class="form-control" placeholder="••••••••" required>
</div>
<button type="submit" class="btn btn-primary w-100 py-2 mb-3">Sign In</button>
</form>
<div class="text-center">
<p class="text-muted small">Don't have an account? <a href="register.php" class="text-primary fw-bold text-decoration-none">Create one</a></p>
</div>
</div>
</div>
</div>
</div>
<?php include 'includes/footer.php'; ?>