📄 File: index.php

Path: /home2/outerorb/assetradar.outerorbittech.com/index.php

Size: 3.02 KB

Permissions: 0666

<?php
require_once 'config.php';

// Redirect logged-in users to their dashboard
if (isset($_SESSION['user_id'])) {
    $stmt = $mysqli->prepare('SELECT role_id FROM users WHERE id=? AND deleted=0 LIMIT 1');
    $stmt->bind_param('i', $_SESSION['user_id']);
    $stmt->execute();
    $res = $stmt->get_result();
    if ($res && $row = $res->fetch_assoc()) {
        $r = $mysqli->query("SELECT slug FROM roles WHERE id=". (int)$row['role_id'])->fetch_assoc();
        if ($r && $r['slug']=='admin') {
            header('Location: admin/dashboard.php');
            exit;
        } elseif ($r && $r['slug']=='tl') {
            header('Location: tl/dashboard.php');
            exit;
        } else {
            header('Location: user/dashboard.php');
            exit;
        }
    }
}

if (isset($_POST['login'])) {
    $email = $_POST['email'] ?? '';
    $password = $_POST['password'] ?? '';
    $stmt = $mysqli->prepare('SELECT id, password, role_id FROM users WHERE email=? AND deleted=0 LIMIT 1');
    $stmt->bind_param('s', $email);
    $stmt->execute();
    $res = $stmt->get_result();
    if ($res && $row = $res->fetch_assoc()) {
        if (password_verify($password, $row['password'])) {
            $_SESSION['user_id'] = $row['id'];
            // redirect based on role
            $r = $mysqli->query("SELECT slug FROM roles WHERE id=". (int)$row['role_id'])->fetch_assoc();
            if ($r && $r['slug']=='admin') header('Location: admin/dashboard.php');
            elseif ($r && $r['slug']=='tl') header('Location: tl/dashboard.php');
            else header('Location: user/dashboard.php');
            exit;
        } else {
            $error = 'Invalid credentials';
        }
    } else $error = 'No user found';
}
?>
<?php include 'inc/header.php'; ?>
<div class="row justify-content-center">
  <div class="col-md-6">
    <div class="card card-hero p-4">
      <div class="text-center mb-3">
  <img src="<?php echo BASE_URL; ?>/assets/assetradar_logo.svg" alt="AssetRadar Logo" style="height:96px;width:auto;">
      </div>
      <h3 class="mb-3">Login</h3>
      <?php if (!empty($error)): ?>
        <div class="alert alert-danger"><?php echo esc($error); ?></div>
      <?php endif; ?>
      <form method="post" action="">
          <?php echo csrf_field(); ?>
              <div class="mb-3">
                <label>Email</label>
                <input class="form-control" name="email" required>
              </div>
              <div class="mb-3">
                <label>Password</label>
                <input type="password" class="form-control" name="password" required>
              </div>
              <button class="btn btn-primary" name="login">Sign in</button>
            </form>
      <hr>
      <p class="small text-muted">Default admin: <code>admin@example.com</code> / <code>admin123</code></p>
      <p class="small text-muted">Default TL: <code>tl1@example.com / tl1234</code></p>
      <p class="small text-muted">Default User: <code>user1@example.com / user1234</code></p>

    </div>
  </div>
</div>
<?php include 'inc/footer.php'; ?>

← Back to Directory Edit File 🔒 Chmod