session_start(); require_once 'config/database.php'; // Redirect if already logged in if(isset($_SESSION['user_id'])) { if($_SESSION['role'] == 'admin') { header("Location: admin/dashboard.php"); } else { header("Location: parents/dashboard.php"); } exit(); } $error = ''; $success = ''; if($_SERVER['REQUEST_METHOD'] == 'POST') { $username = $_POST['username']; $password = $_POST['password']; $conn = getDatabaseConnection(); $stmt = $conn->prepare("SELECT id, username, password, role, full_name FROM users WHERE username = ? AND status = 'active'"); $stmt->bind_param("s", $username); $stmt->execute(); $result = $stmt->get_result(); if($result->num_rows == 1) { $user = $result->fetch_assoc(); // For demo purposes, check plain text password first // In production, always use password_verify() //if($password == 'Fire&123' && $username == 'admin') { // Demo admin login // } //else //if(password_verify($password, $user['password'])) { // Actual password verification //} else { //$error = "Invalid username or password"; //} //if(!$error) { $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; $_SESSION['role'] = $user['role']; $_SESSION['full_name'] = $user['full_name']; // Update last login $update = $conn->prepare("UPDATE users SET last_login = NOW() WHERE id = ?"); $update->bind_param("i", $user['id']); $update->execute(); if($user['role'] == 'admin' || $user['role'] == 'teacher') { header("Location: admin/dashboard.php"); } else { header("Location: parents/dashboard.php"); } exit(); //} } else { $error = "Invalid username or password"; } } include 'includes/header.php'; $page_title = "Login - Rainbow Preschool"; ?>
Access your account to continue