Login - Michelle²

prepare($sql)) { $stmt->bind_param('s', $email); $stmt->execute(); $stmt->bind_result($id, $username, $dbEmail, $hash, $role); if ($stmt->fetch()) { // Copy row into array, then CLOSE the statement $user = [ 'id' => $id, 'username' => $username, 'email' => $dbEmail, 'hash' => $hash, 'role' => $role ?: 'user', ]; } $stmt->close(); } else { $error = 'Database error. Please try again later.'; } if ($user) { if (password_verify($password, $user['hash'])) { // ---- SESSION ---- session_regenerate_id(true); $sessionId = session_id(); $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; $_SESSION['email'] = $user['email']; $_SESSION['role'] = $user['role']; // ---- LOGIN META: time, session id, user agent, ip ---- $now = date('Y-m-d H:i:s'); $userAgent = $_SERVER['HTTP_USER_AGENT'] ?? ''; $ip = $_SERVER['REMOTE_ADDR'] ?? ''; $updSql = "UPDATE users SET last_login = ?, last_activity = ?, last_logout = NULL, current_session_id = ?, last_login_user_agent = ?, last_login_ip = ? WHERE id = ?"; if ($up = $conn->prepare($updSql)) { $up->bind_param('sssssi', $now, $now, $sessionId, $userAgent, $ip, $user['id']); if (!$up->execute()) { // Optional: log error to file instead of breaking login @file_put_contents( __DIR__ . '/session_debug.log', date('Y-m-d H:i:s') . " UPDATE error for user {$user['id']}: " . $conn->error . "\n", FILE_APPEND ); } $up->close(); } else { // Optional: log prepare error @file_put_contents( __DIR__ . '/session_debug.log', date('Y-m-d H:i:s') . " PREPARE error for user {$user['id']}: " . $conn->error . "\n", FILE_APPEND ); } header('Location: dashboard.php'); exit; } else { $error = 'Invalid email or password.'; } } else { if ($error === '') { $error = 'Invalid email or password.'; } } } } ?> Login - Michelle²