[ Th3_Err0r Bypassed ]

<?php 
ob_start();
session_start();

$pageTitle = 'alliwan : ADMIN LOGIN';
include '../set/connect.php';
include 'assets/includes/functions/function.php';
include 'assets/includes/template/header.php';
?>
<?php
if(isset($_SESSION['user_liwwan_admin_2023930']) AND ($_SESSION['type'] == "manager_session_alliwan") ){
    header('Location:dashboard.php');
    exit;
}
?>
<?php

if ($_SERVER['REQUEST_METHOD'] == 'POST') {

$username       = $_POST['username'];
$password       = $_POST['password'];
$msg='';

// check If The User Exist IN Database

$stmt1 = $conn->prepare("SELECT adminid, password, username, fullname FROM royaladmin WHERE active = 1 AND username =?");


/*manager login*/
$stmt1->bindValue(1,$username,PDO::PARAM_STR);
$stmt1->execute();
$data = $stmt1->fetch(PDO::FETCH_ASSOC);
$user= $data['username'];
$hashpass= $data['password'];
$veryfi= password_verify($password, $hashpass);
if ($veryfi){

  $_SESSION['user_liwwan_admin_2023930'] = $username; //register session name

  $_SESSION['uid'] = $data['adminid'];

  $_SESSION['type'] = "manager_session_alliwan";

  $_SESSION['name'] = $data['fullname'];

  header('location: dashboard.php'); //redirect to dashboard page
  exit();
}else{$msg = " خطأ : إسم المستخدم أو الباسوورد غير صحيح";}

}
?>
<!-- Sing in  Form -->
<section class="sign-in">
  <div class="container">
    <div class="signin-content">
        <div class="row">
          <div class="col-2"></div>
          <div class="col-lg-5">
            <h4 class="form-title text-center text-dark fw-bold">تسجيل الدخول</h4>
            <hr class="my-custom-login-hr rounded-pill">
            <?php if(!empty($msg)) { 
            echo '<hr>' . '<div class="bg-danger text-light py-2 px-1 rounded text-center fw-bold">';
            echo $msg . '<br>';
             echo '</div>' . '<hr>'; }?>
            <div class="signin-form m-auto py-5 px-3">
              <form method="POST" class="register-form" id="login-form">
                <div class="form-group">
                  <label for="username"><i class="zmdi zmdi-account material-icons-name"></i></label>
                  <input type="text" name="username" id="username" placeholder="إسم المستخدم"/>
                </div>
                <div class="form-group">
                  <label for="password"><i class="zmdi zmdi-lock"></i></label>
                  <input type="password" name="password" id="password" placeholder="كلمة المرور"/>
                </div>
                <div class="form-group form-button">
                  <input type="submit" name="signin" id="signin" class="form-submit" value="دخول"/>
                </div>
              </form>
            </div>
          </div>
          <div class="col-lg-3 sign-in-div ">
            <div class="signin-image m-auto">
              <img src="images/logo2.jpg" alt="singin" class="img-fluid m-auto mx-4">
              <p class="s_co_name fw-bold text-center w-75 mt-5 m-auto rounded py-2"> Alliwan </p>
            </div>
          </div>
          <div class="col-2"></div>
        </div>
    </div>
  </div>
</section>

<?php
ob_end_flush();