Admin Login - <?php echo BRAND

setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $ip_status = get_ip_security_status($pdo); if ($ip_status['is_blocked']) { $blocked_message = $ip_status['is_manual_block'] ? 'Access from your IP address has been blocked by an administrator.' : 'Too many failed login attempts. Please try again in ' . max(1, $ip_status['minutes_remaining']) . ' minute(s).'; log_security_event($pdo, 'login_blocked', $username, $blocked_message); $error = $blocked_message; } else { $stmt = $pdo->prepare("SELECT * FROM members WHERE username = ? AND is_admin = 1"); $stmt->execute([$username]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && password_verify($password, $user['password']) && !$user['suspended']) { $updateStmt = $pdo->prepare("UPDATE members SET last_access = NOW() WHERE id = ?"); $updateStmt->execute([$user['id']]); log_security_event($pdo, 'login_success', $username, "Admin login successful"); clear_ip_security_state($pdo); session_regenerate_id(true); $_SESSION['admin_logged_in'] = true; $_SESSION['admin_username'] = $username; $_SESSION['admin_id'] = $user['id']; $_SESSION['user_ip'] = get_client_ip_address(); $_SESSION['user_agent'] = $_SERVER['HTTP_USER_AGENT']; $_SESSION['admin_name'] = $user['firstName'] . ' ' . $user['lastName']; $_SESSION['last_activity'] = time(); header('Location: dashboard.php'); exit; } elseif ($user && $user['suspended']) { register_failed_login_attempt($pdo, $username, 'Suspended account login attempt'); $error = 'Account suspended. Please contact an administrator.'; } else { $ip_status = register_failed_login_attempt($pdo, $username, 'Invalid credentials'); $error = $ip_status['is_blocked'] ? 'Too many failed login attempts. Please try again in ' . max(1, $ip_status['minutes_remaining']) . ' minute(s).' : 'Invalid username or password.'; } } } catch (PDOException $e) { $error = 'Database connection error. Please try again later.'; } } } ?> Admin Login - <?php echo BRAND_NAME; ?>