prepare("SELECT id, password, uniqueid FROM users WHERE email = :user OR username = :user"); $stmt->execute(['user' => $user]); $result = $stmt->fetch(); if ($result && password_verify($password, $result['password'])) { $_SESSION['user_id'] = $result['id']; $_SESSION['uniqueid'] = $result['uniqueid']; header("Location: /home.php"); exit(); } else { $errors[] = "Invalid credentials."; } } } ?>