setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); if (isset($_SERVER['REQUEST_METHOD']) && $_SERVER['REQUEST_METHOD'] == 'POST') { $username = $_POST['username']; $password = $_POST['password']; $stmt = $pdo->prepare('SELECT * FROM "8500_HKMU_G13"."USERS" WHERE "username" = :username'); $stmt->execute(['username' => $username]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && crypt($password, $user['password']) === $user['password']) { if ($user['Status_inactive']) { echo "The user does not work at here any more."; } else { $_SESSION['user_id'] = $user['id']; $_SESSION['role'] = $user['role']; $_SESSION['name'] = $user['name']; $_SESSION['role'] = $user['role']; // 根据用户类型进行重定向 switch ($user['role']) { case 'admin': header("Location: dashboardforadmin.php"); break; case 'saler': header("Location: dashboardforsaler.php"); break; case 'keeper': header("Location: dashboardforkeeper.php"); break; default: echo "ineffective role!"; } exit(); // 确保脚本停止执行 } } else { echo "Wrong username or password, please try again!"; } } } catch (PDOException $e) { echo "fail to connect:" . $e->getMessage(); } ?>