0,
'path' => '/',
'domain' => '', // IMPORTANT
'secure' => false, // true if HTTPS
'httponly' => true,
'samesite' => 'Lax'
]);
session_start();
include("connection.php");
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
$username = $_POST['username'];
$password = $_POST['password'];
$sql = "SELECT * FROM admin where username = '$username'";
$result = mysqli_query($conn, $sql);
$row = mysqli_fetch_assoc($result);
if ($row) {
if ($username == $row['username'] && $password == $row['password']) {
$_SESSION['user_name'] = $username;
// IMPORTANT
session_regenerate_id(true);
header("Location: dashboard.php");
exit;
} else {
echo "";
}
}
}
?>
Log In