Please fill both the username and password field
'; 15 | die(); 16 | } 17 | 18 | // Prepare our SQL, preparing the SQL statement will prevent SQL injection. 19 | 20 | if ($stmt = $conn->prepare('SELECT id, password FROM users WHERE username = ?')) { 21 | 22 | // Bind parameters (s = string, i = int, b = blob, etc), in our case the username is a string so we use "s" 23 | 24 | $stmt->bind_param('s', $_POST['username']); 25 | 26 | $stmt->execute(); 27 | 28 | // Store the result so we can check if the account exists in the database. 29 | 30 | $stmt->store_result(); 31 | 32 | if ($stmt->num_rows > 0) { 33 | 34 | $stmt->bind_result($id, $password); 35 | 36 | $stmt->fetch(); 37 | 38 | // Account exists, now we verify the password. 39 | // Note: remember to use password_hash in your registration file to store the hashed passwords. 40 | 41 | if (password_verify($_POST['password'], $password)) { //(password_verify) 42 | // Verification success! User has loggedin! 43 | // Create sessions so we know the user is logged in, they basically act like cookies but remember the data on the server. 44 | session_regenerate_id(); 45 | 46 | $_SESSION['loggedin'] = true; 47 | 48 | $_SESSION['name'] = $_POST['username']; 49 | 50 | $_SESSION['id'] = $id; 51 | 52 | header('Location: index.php'); 53 | } else { 54 | 55 | $message = 'Incorrect password!
'; 56 | } 57 | } else { 58 | 59 | $message = 'Incorrect username!
'; 60 | } 61 | } 62 | 63 | $stmt->close(); 64 | } 65 | //} 66 | -------------------------------------------------------------------------------- /admin/backup.php: -------------------------------------------------------------------------------- 1 | 13 | 17 | Restore Completed!'; 22 | } else if (isset($_GET['error'])) { 23 | echo 'Something went wrong! Please try again or ask for help.
'; 24 | } 25 | } 26 | ?> 27 | 28 |Create Backup
60 |