'/dashboard/consultant/index.php', default => '/dashboard/dashboard.php', }; } // Already logged in → go to appropriate dashboard if (isLoggedIn()) { header('Location: ' . defaultDashboard()); exit; } $error = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (!verifyCsrfToken($_POST['csrf_token'] ?? '')) { $error = 'Invalid request. Please try again.'; } else { $email = trim($_POST['email'] ?? ''); $password = trim($_POST['password'] ?? ''); if ($email === '' || $password === '') { $error = 'Please enter your email and password.'; } else { $user = loginUser($email, $password); if ($user) { // If a specific redirect was requested honour it (internal paths only) $redirect = $_GET['redirect'] ?? ''; if ($redirect === '' || !str_starts_with($redirect, '/')) { $redirect = defaultDashboard(); } header('Location: ' . $redirect); exit; } else { $error = 'Invalid email or password.'; } } } } $pageTitle = 'Login'; include __DIR__ . '/_head.php'; ?>