86400,
'cookie_secure' => true,
'cookie_httponly' => true,
'use_strict_mode' => true,
'sid_length' => 48,
]);
include('config.php');
try {
$connection = new mysqli($hostname, $username, $password, $database);
if ($connection->connect_error) {
throw new Exception("Error: " . $connection->connect_error);
}
} catch (Exception $e) {
exit($e->getMessage());
}
// Check if the user is logged in, if yes, redirect to the dashboard page
if (isset($_SESSION["loggedin"]) && $_SESSION["loggedin"] === true) {
header("location: user-confirm.html");
exit;
}
$username_err = $password_err = $login_err = "";
// Check if the form is submitted
if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['login'])) {
// Initialize variables with default values
$Username = $Password = "";
// Check if username is empty
if (empty(trim($_POST["Username"]))) {
$username_err = "Please enter a username.";
} else {
$Username = filter_var(trim($_POST["Username"]),);
}
// Check if password is empty
if (empty(trim($_POST["Password"]))) {
$password_err = "Please enter your password.";
} else {
$Password = filter_var(trim($_POST["Password"]),);
}
// Validate credentials
if (empty($username_err) && empty($password_err)) {
$stmt = $connection->prepare('SELECT id_business, Username, Password FROM business_records WHERE Username = ?');
$stmt->bind_param('s', $Username);
$stmt->execute();
$stmt->store_result();
if ($stmt->num_rows > 0) {
$stmt->bind_result($id_user, $Username, $passwordHash);
$stmt->fetch();
if (password_verify($Password, $passwordHash)) {
// Password is correct, so start a new session
session_start();
// Store data in session variables
$_SESSION["loggedin"] = true;
$_SESSION["id_user"] = $id_user;
$_SESSION["Username"] = $Username;
// Redirect user to the welcome page
header("location: user-confirm.html");
exit();
} else {
$login_err = "Invalid username or password.";
}
} else {
$login_err = "Invalid username or password.";
}
} else {
echo "Oops! Something went wrong. Please try again later.";
}
}
mysqli_close($connection);
function resetPassword($email, $newPassword, $connection)
{
try {
$hashedPassword = password_hash($newPassword, PASSWORD_DEFAULT);
$sql = "UPDATE users SET password = ? WHERE email = ?";
$stmt = $connection->prepare($sql);
$stmt->bind_param("ss", $hashedPassword, $email);
if ($stmt->execute()) {
return "Password reset successful!";
} else {
return "Error updating password: " . $stmt->error;
}
} catch (Exception $e) {
return "Error: " . $e->getMessage();
}
}
// Check if 'Username' is set in the session before using it.
$Username = isset($_SESSION['Username']) ? $_SESSION['Username'] : "";
?>
Sales Pilot - Login