prepare(" SELECT * FROM users WHERE email = ? AND status = 'active' LIMIT 1 "); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { session_regenerate_id(true); $_SESSION['user_id'] = $user['id']; $_SESSION['user_name'] = $user['first_name'] . ' ' . $user['last_name']; $_SESSION['user_email'] = $user['email']; $_SESSION['user_role'] = $user['role']; header('Location: /dashboard'); exit; } $error = 'Invalid email or password.'; } require __DIR__ . '/includes/header.php'; ?>