prepare("SELECT * FROM users WHERE email = ? AND role IN ('client','announcer') LIMIT 1");
$stmt->execute([$email]);
$user = $stmt->fetch();
if (!$user || !password_verify($password, $user['password_hash'])) {
$errorMsg = __('err_login');
} elseif (!$user['email_verified']) {
$errorMsg = __('err_account_not_verified');
} elseif ($user['status'] !== 'active') {
$errorMsg = __('err_account_suspended');
} else {
// post_verify_redirect n'est utilisé que par le flux inscription->activation
// (voir verify-account.php) ; une connexion normale ne doit jamais en hériter.
unset($_SESSION['post_verify_redirect']);
loginUserSession($user);
redirect('');
}
}
}
$pageTitle = __('login_title');
require_once ROOT_PATH . '/templates/partials/header.php';
?>