prepare("SELECT id, username, password FROM Users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; header('Location: home.php'); exit; } else { echo "Invalid credentials."; } } ?>