dashboard.php

<?php
session_start();
include('config.php');

$email = $_POST['email'];
$password = $_POST['password'];

$query = "SELECT * FROM users WHERE email=?";
$stmt = $conn->prepare($query);
$stmt->bind_param("s", $email);
$stmt->execute();
$result = $stmt->get_result();

if ($result->num_rows == 1) {
    $user = $result->fetch_assoc();
    if (password_verify($password, $user['password'])) {
        $_SESSION['user'] = $user;
        if ($user['role'] == 'admin') {
            header("Location: admin/dashboard.php");
        } elseif ($user['role'] == 'staff') {
            header("Location: staff/dashboard.php");
        } else {
            header("Location: student/dashboard.php");
        }
    } else {
        echo "Invalid Credentials!";
    }
} else {
    echo "User not found!";
}
?>