Files
xeorl/htdocs/core/login_action.php
2025-02-05 15:50:04 +05:30

45 lines
1.4 KiB
PHP

<?php
require_once 'config.php';
session_start();
error_reporting(E_ALL);
ini_set('display_errors', 1);
if (isset($_POST['login_btn'])) {
$email = mysqli_real_escape_string($conn, $_POST['user_email']);
$password = $_POST['user_pass'];
$stmt = mysqli_prepare($conn, "SELECT * FROM user WHERE user_email = ?");
mysqli_stmt_bind_param($stmt, "s", $email);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
if (mysqli_num_rows($result) > 0) {
$row = mysqli_fetch_assoc($result);
if ($row['user_type'] == 4) {
$_SESSION['error'] = "Your account is banned. Please contact support.";
header('Location: ../login.php');
exit();
}
if (password_verify($password, $row['user_pass'])) {
$_SESSION['user_id'] = $row['id'];
$_SESSION['user_name'] = $row['user_name'];
$_SESSION['user_email'] = $row['user_email'];
$_SESSION['user_type'] = $row['user_type'];
header('Location: ../monetization.php');
exit();
} else {
$_SESSION['error'] = "Invalid password. Please try again.";
header('Location: ../login.php');
exit();
}
} else {
$_SESSION['error'] = "Email not found. Please register.";
header('Location: ../register.php');
exit();
}
}
?>