2026-02-18 08:32:50 +00:00

47 lines
1.0 KiB
PHP

<?php
// includes/auth.php
if (session_status() === PHP_SESSION_NONE) {
session_start();
}
require_once __DIR__ . '/../db/config.php';
// Check if user is logged in
function isLoggedIn() {
return isset($_SESSION['user_id']);
}
// Get current user role
function getUserRole() {
return $_SESSION['user_role'] ?? 'guest';
}
// Get current user name
function getUserName() {
return $_SESSION['user_name'] ?? 'Guest';
}
// Login function
function login($email, $password) {
global $pdo;
$stmt = $pdo->prepare("SELECT * FROM users WHERE email = ?");
$stmt->execute([$email]);
$user = $stmt->fetch();
if ($user && password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['user_name'] = $user['name'];
$_SESSION['user_email'] = $user['email'];
$_SESSION['user_role'] = $user['role'];
return true;
}
return false;
}
// Logout function
function logout() {
session_destroy();
header("Location: login.php");
exit;
}