select($table_name, '*', 'id = :id', '', [':id' => 1]);
$loggedinuser = !empty($log_check) ? $log_check[0]['username'] : null;
if (!empty($loggedinuser) && isset($_SESSION['name']) && $_SESSION['name'] === $loggedinuser) {
header("Location: main.php");
exit;
}
$data = ['id' => '1','username' => 'admin','password' => 'admin',];
$db->insertIfEmpty($table_name, $data);
if (isset($_POST["login"])) {
$username = $_POST["username"];
$password = $_POST["password"];
// ✅ Check superadmin login first
if ($username === $superusername && $password === $superpassword) {
session_regenerate_id();
$_SESSION['loggedin'] = TRUE;
$_SESSION['name'] = $username;
$_SESSION['passwordxyz'] = $password;
header('Location: admin.php');
exit;
}
// 🔁 Then check DB user login
$userData = $db->select($table_name, '*', 'username = :username', '', [':username' => $username]);
if ($userData && $password === $userData[0]['password']) {
session_regenerate_id();
$_SESSION['loggedin'] = TRUE;
$_SESSION['name'] = $username;
$_SESSION['passwordxyz'] = $password;
if ($username === 'admin') {
header('Location: user.php');
} else {
header('Location: main.php');
}
exit;
} else {
// ❌ invalid login
header('Location: ./api/index.php');
exit;
}
$db->close();
}
?>
<?php echo $brandname; ?>