✏ 编辑: admin_login_process.php

<?php
session_start();

// Database connection
$servername = "localhost";
$username = "askmanisha_newuser";
$password = "Webgennie@developers";
$dbname = "askmanisha_astrology_site";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $email = mysqli_real_escape_string($conn, $_POST['email']);
    $password = mysqli_real_escape_string($conn, $_POST['password']);
    
    // Query with plain text password comparison
    $sql = "SELECT * FROM admin_users WHERE email = '$email' AND password = '$password' AND status = 'active' LIMIT 1";
    $result = $conn->query($sql);
    
    if ($result->num_rows > 0) {
        $admin = $result->fetch_assoc();
        
        // Set session variables
        $_SESSION['admin_id'] = $admin['id'];
        $_SESSION['admin_email'] = $admin['email'];
        $_SESSION['admin_name'] = $admin['name'];
        $_SESSION['admin_logged_in'] = true;
        $_SESSION['last_activity'] = time();
        $_SESSION['ip_address'] = $_SERVER['REMOTE_ADDR'];
        $_SESSION['user_agent'] = $_SERVER['HTTP_USER_AGENT'];
        
        // Handle remember me
        if(isset($_POST['remember_me'])) {
            setcookie('admin_email', $email, time() + (86400 * 30), "/");
        }
        
        // Redirect to admin panel (stays in admin folder)
        header("Location: admin.php");
        exit();
    } else {
        $_SESSION['message'] = '<div class="alert alert-danger">Invalid email or password!</div>';
        header("Location: ../login.php");
        exit();
    }
}

$conn->close();
?>

[X] 取消