芝麻web文件管理V1.00

编辑当前文件:/home/pulsehostuk9/public_html/teafund.pulsehost.co.uk/auth/login.php

<?php
if (session_status() !== PHP_SESSION_ACTIVE) { session_start(); }
require_once __DIR__ . '/../includes/db.php';

$error = null;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  $email = strtolower(trim($_POST['email'] ?? ''));
  $password = $_POST['password'] ?? '';
  try {
    $pdo = get_pdo();
    $stmt = $pdo->prepare("SELECT id, email, password_hash, role FROM users WHERE email=?");
    $stmt->execute([$email]);
    $user = $stmt->fetch();
    if ($user && password_verify($password, $user['password_hash'])) {
      $_SESSION['user_id'] = $user['id'];
      $_SESSION['email'] = $user['email'];
      $_SESSION['role'] = $user['role'];
      header('Location: /admin/'); exit;
    } else { $error = 'Invalid login'; }
  } catch (Throwable $e) { $error = 'Login error'; }
}
require_once __DIR__ . '/../includes/header.php';
?>
<div class="row justify-content-center">
  <div class="col-12 col-md-6 col-lg-4">
    <div class="card shadow-sm">
      <div class="card-body">
        <h4 class="card-title mb-3">Admin Login</h4>
        <?php if ($error): ?><div class="alert alert-danger"><?php echo htmlspecialchars($error); ?></div><?php endif; ?>
        <form method="post">
          <div class="mb-3"><label class="form-label">Email</label>
            <input class="form-control" type="email" name="email" required></div>
          <div class="mb-3"><label class="form-label">Password</label>
            <input class="form-control" type="password" name="password" required></div>
          <button class="btn btn-primary w-100 touch-btn" type="submit">Login</button>
        </form>
        <p class="text-muted mt-3">Roles: admin, manager, viewer</p>
      </div>
    </div>
  </div>
</div>
<?php require_once __DIR__ . '/../includes/footer.php'; ?>