prepare("SELECT * FROM users WHERE username = ?"); $stmt->execute([$username]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; $_SESSION['role'] = $user['role']; $_SESSION['name'] = $user['name']; $_SESSION['login_notified'] = false; // Flag for showing popup once logActivity($pdo, 'LOGIN_SUCCESS', "User logged in successfully"); header('Location: dashboard.php'); exit; } else { $error = 'ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง'; // Log failed attempt without a session $ip = $_SERVER['REMOTE_ADDR'] ?? 'Unknown'; try { $stmt_log = $pdo->prepare("INSERT INTO activity_logs (user_id, action, details, ip_address) VALUES (NULL, 'LOGIN_FAILED', ?, ?)"); $stmt_log->execute(["Attempt with username: $username", $ip]); } catch (Exception $e) {} } } } ?>
เข้าสู่ระบบเพื่อจัดการและดูงานของคุณ