getConnection(); if ($_SERVER['REQUEST_METHOD'] == 'POST') { $username = trim($_POST['username']); $password = trim($_POST['password']); try { $stmt = $conn->prepare("SELECT * FROM users WHERE username = ?"); $stmt->execute([$username]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && password_verify($password, $user['password'])) { $_SESSION['user'] = $user['username']; $_SESSION['role'] = $user['role']; header("Location: index.php"); exit; } else { $error = "Username atau password salah!"; } } catch (PDOException $e) { $error = "Terjadi kesalahan: " . $e->getMessage(); } } ?>