prepare("SELECT user_id, password, is_verified FROM users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user) { // Verify password if (password_verify($password, $user['password'])) { // Check if account is verified if (!$user['is_verified']) { $error = "Please verify your email first"; } else { // Set session and redirect $_SESSION['user_id'] = $user['user_id']; redirect('dashboard.php'); } } else { $error = "Invalid email or password"; } } else { $error = "Invalid email or password"; } } ?>