prepare("SELECT * FROM users WHERE email = :email"); $query->bindParam(':email', $_POST['email']); $query->execute(); $user = $query->fetch(PDO::FETCH_ASSOC); if ($user && password_verify($_POST['password'], $user['password'])) { $_SESSION['user_id'] = $user['id']; $_SESSION['first_name'] = $user['first_name']; $_SESSION['is_admin'] = $user['is_admin']; header("Location: /"); $log = $conn->prepare("INSERT INTO logs (userId, date) VALUES (:userId, :date)"); $log->bindParam(':userId', $user['id']); $log->bindParam(':date', date('Y-m-d-H-i-s')); $log->execute(); } else { $errorMessage = "Invalid email or password."; } } ?>