prepare("SELECT * FROM users WHERE email = ? AND deleted_at IS NULL"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { if ($user['status'] === 'active') { $_SESSION['user_id'] = $user['id']; $_SESSION['user_name'] = $user['name']; $_SESSION['user_email'] = $user['email']; $_SESSION['role'] = $user['role']; // Redirect based on role if ($user['role'] === 'admin') { header('Location: admin_dashboard.php'); } else { header('Location: dashboard.php'); } exit; } else { $error = "Your account is inactive. Please contact admin."; } } else { $error = "Invalid email or password."; } } ?>