prepare($sql);
$stmt->execute(['user' => $user]);
$row = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$row) {
$error = "ไม่พบบัญชีผู้ใช้นี้";
} elseif (strtolower($row['HR_PASSWORD']) !== strtolower($pass_md5)) {
$error = "รหัสผ่านไม่ถูกต้อง";
} elseif ($row['HR_STATUS_ID'] !== '01') {
$error = "บัญชีผู้ใช้นี้ถูกปิดการใช้งานไปแล้ว";
} else {
$_SESSION['loggedin'] = true;
$_SESSION['fullname'] = $row['HR_PREFIX_NAME'] . $row['HR_FNAME'] . " " . $row['HR_LNAME'];
$_SESSION['cid'] = $row['HR_CID'];
// Check if user is an admin
$_SESSION['is_admin'] = false;
try {
$log_db = getDB(DB_LOG_HOST, DB_LOG_NAME, DB_LOG_USER, DB_LOG_PASS);
$admin_stmt = $log_db->prepare("SELECT id FROM system_admins WHERE cid = ?");
$admin_stmt->execute([$row['HR_CID']]);
if ($admin_stmt->fetch()) {
$_SESSION['is_admin'] = true;
}
} catch (Exception $ex) {
// Ignore DB error, just default to non-admin
}
// Add system log
addSystemLog('LOGIN', 'เข้าสู่ระบบสำเร็จ');
header("Location: index.php");
exit;
}
} catch (PDOException $e) {
$error = "เกิดข้อผิดพลาดของระบบ: " . $e->getMessage();
}
}
}
?>
เข้าสู่ระบบ - <?php echo htmlspecialchars($topbar_text); ?>
