SWAMPy

✎ CARVE FLESH

EDITING: login.php

<?php

session_start();

include_once __DIR__ . '/../config/cors.php';
include_once __DIR__ . '/../config/db.php';
include_once __DIR__ . '/../config/env.php';

header("Content-Type: application/json; charset=UTF-8");

$database = new Database();
$db = $database->getConnection();

$data = json_decode(file_get_contents("php://input"));

if (!empty($data->username) && !empty($data->password)) {

$query = "SELECT id, username, password_hash, role
              FROM admin_users
              WHERE username = :username
              LIMIT 1";

$stmt = $db->prepare($query);
    $stmt->bindParam(':username', $data->username);
    $stmt->execute();

if ($stmt->rowCount() > 0) {

$row = $stmt->fetch(PDO::FETCH_ASSOC);

$id = $row['id'];
        $username = $row['username'];
        $password_hash = $row['password_hash'];
        $role = $row['role'];

if (password_verify($data->password, $password_hash)) {

$_SESSION['admin_id'] = $id;
            $_SESSION['admin_username'] = $username;
            $_SESSION['admin_role'] = $role;

http_response_code(200);

echo json_encode([
                "success" => true,
                "message" => "Successful login.",
                "role" => $role,
                "user" => [
                    "id" => $id,
                    "username" => $username,
                    "role" => $role
                ]
            ]);

} else {

http_response_code(401);

echo json_encode([
                "success" => false,
                "message" => "Login failed. Invalid credentials."
            ]);
        }

} else {

http_response_code(401);

echo json_encode([
            "success" => false,
            "message" => "Login failed. User not found."
        ]);
    }

} else {

http_response_code(400);

echo json_encode([
        "success" => false,
        "message" => "Unable to login. Data is incomplete."
    ]);
}

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📄 error_log	?	2.6 KB	2026-08-30 13:01	EDIT
📄 login.php	PHP	2.1 KB	2026-06-18 14:51	EDIT
📄 logout.php	PHP	304 B	2026-06-18 14:10	EDIT
📄 verify.php	PHP	1 KB	2026-06-18 14:10	EDIT