prepare($sql); if ($stmt) { $stmt->bind_param("s", $email); $stmt->execute(); $result = $stmt->get_result(); if ($result && $result->num_rows === 1) { $user = $result->fetch_assoc(); // ✅ Plain text password check if ($password === $user['conf_password']) { if (strtolower($user['Status']) === "active") { // Session create $_SESSION['id'] = $user['id']; $_SESSION['user_id'] = $user['user_id']; $_SESSION['name'] = $user['name']; $_SESSION['email'] = $user['email']; header("Location: dashboard.php"); exit(); } else { $msg = "⚠️ Your account is under review. Please wait for admin approval."; } } else { $msg = "❌ Invalid password."; } } else { $msg = "❌ User not found."; } $stmt->close(); } else { $msg = "❌ Database error: " . $link->error; } } ?>

Welcome Back