prepare(
"SELECT id, email, nombre, password_hash
FROM admin_users
WHERE email = ?
LIMIT 1"
);
$stmt->bind_param("s", $email);
$stmt->execute();
$stmt->store_result();
if ($stmt->num_rows === 1) {
$stmt->bind_result($id, $email_db, $nombre, $password_hash);
$stmt->fetch();
$ok = false;
$pareceHash = (strlen((string)$password_hash) >= 20 && substr((string)$password_hash,0,1) === '$');
if ($pareceHash) {
$ok = password_verify($password, $password_hash);
} else {
$ok = hash_equals((string)$password_hash, (string)$password);
if ($ok) {
$nuevoHash = password_hash($password, PASSWORD_DEFAULT);
$up = $conn->prepare("UPDATE admin_users SET password_hash=? WHERE id=?");
$up->bind_param("si", $nuevoHash, $id);
$up->execute();
$up->close();
}
}
if ($ok) {
$_SESSION['admin_id'] = (int)$id;
$_SESSION['admin_email'] = $email_db;
$_SESSION['admin_nombre'] = $nombre;
header('Location: dashboard.php');
exit;
}
}
$stmt->close();
$err = 'Credenciales inválidas';
}
?>
Login | Admin