38921-vm/login.php
2026-03-01 22:53:30 +00:00

73 lines
2.5 KiB
PHP

<?php
session_start();
require_once 'db/config.php';
if (isset($_SESSION['user_id'])) {
header('Location: index.php');
exit;
}
$error = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$email = $_POST['email'] ?? '';
$password = $_POST['password'] ?? '';
$stmt = db()->prepare("SELECT * FROM users WHERE email = ?");
$stmt->execute([$email]);
$user = $stmt->fetch();
if ($user && password_verify($password, $user['password_hash'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['msp_id'] = $user['msp_id'];
$_SESSION['role'] = $user['role'];
$_SESSION['user_name'] = $user['name'];
header('Location: index.php');
exit;
} else {
$error = 'Invalid email or password.';
}
}
include 'header.php';
?>
<div class="container py-5 mt-5">
<div class="row justify-content-center">
<div class="col-md-5">
<div class="card shadow-sm border-0">
<div class="card-body p-5">
<div class="text-center mb-4">
<h2 class="fw-bold text-primary">MSP Portal Login</h2>
<p class="text-muted">Welcome back! Please enter your details.</p>
</div>
<?php if ($error): ?>
<div class="alert alert-danger mb-4"><?php echo $error; ?></div>
<?php endif; ?>
<form method="POST" action="">
<div class="mb-3">
<label for="email" class="form-label">Email Address</label>
<input type="email" name="email" id="email" class="form-control py-2" required>
</div>
<div class="mb-4">
<label for="password" class="form-label">Password</label>
<input type="password" name="password" id="password" class="form-control py-2" required>
</div>
<div class="d-grid gap-2">
<button type="submit" class="btn btn-primary py-2 fw-bold">Sign In</button>
</div>
</form>
<div class="text-center mt-4">
<p class="mb-0 text-muted small">Don't have an account? <a href="register.php" class="text-primary fw-bold text-decoration-none">Register your MSP</a></p>
</div>
</div>
</div>
</div>
</div>
</div>
<?php include 'footer.php'; ?>