prepare("SELECT * FROM users WHERE username = :username AND status = 'active'"); $stmt->execute([':username' => $username]); $user = $stmt->fetch(); // Vérification du mot de passe if ($user && password_verify($password, $user['password'])) { // Enregistrement des informations dans la session $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; $_SESSION['role'] = $user['role']; // Redirection vers main.php header("Location: main.php"); exit; } else { $error = 'Invalid username or password'; } } ?>
= htmlspecialchars($error) ?>