prepare("SELECT * FROM users WHERE user = ? AND password = ?"); $stmt->execute([$username, $password]); $row = $stmt->fetch(PDO::FETCH_ASSOC); if($row){ session_start(); $_SESSION["username"] = $username; $_SESSION["password"] = $password; echo "Login success"; header("Location: /C2WebServer/index.php"); } else { header("Location: /C2WebServer/login/html"); } } ?>