prepare('SELECT * FROM users WHERE username = ?'); $stmt->execute([$username]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { if (!empty($user['disabled'])) { $error = '账户已被禁用'; } else { session_regenerate_id(true); $_SESSION['user_id'] = (int)$user['id']; $_SESSION['username'] = $user['username']; $_SESSION['role'] = $user['role']; redirect('index.php'); } } else { $error = '用户名或密码错误'; } } $_SESSION['captcha'] = ''; } ?>