prepare("SELECT * FROM admins WHERE username = ?");
$stmt->execute([$username]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
if ($user) {
if (password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['role'] = 'admin';
header("Location: admin/admin_dashboard.php");
exit;
} else {
$error = "Incorrect password for admin.";
error_log("Login failed: Incorrect password for admin username '$username'.");
}
} else {
$error = "Admin username not found.";
error_log("Login failed: Admin username '$username' not found.");
}
} else {
$stmt = $pdo->prepare("SELECT * FROM applicants WHERE email = ? OR applicant_id = ?");
$stmt->execute([$username, $username]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
if ($user) {
if (password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['role'] = 'student';
header("Location: student/student_dashboard.php");
exit;
} else {
$error = "Incorrect password for student.";
error_log("Login failed: Incorrect password for student username/email '$username'.");
}
} else {
$error = "Student username/email not found.";
error_log("Login failed: Student username/email '$username' not found.");
}
}
} catch (PDOException $e) {
$error = "Database error. Please try again.";
error_log("Login failed: PDOException - " . $e->getMessage());
}
}
}
?>
Login - British Entrance Academy