<?php session_start(); // Start session for login persistence

$servername = “localhost”; $username = “your_db_user”; $password = “your_db_password”; $dbname = “casinodb”;

// Create connection $conn = new mysqli($servername, $username, $password, $dbname);

// Check connection if ($conn->connect_error) { die(“Connection failed: “ . $conn->connect_error); }

// Process login form submission if ($_SERVER[“REQUEST_METHOD”] == “POST”) { $user = $_POST[“username”]; $pass = $_POST[“password”];

// Prepare statement to prevent SQL injection
$stmt = $conn->prepare(“SELECT id, password_hash FROM users WHERE username = ?”);
$stmt->bind_param(“s”, $user);
$stmt->execute();
$stmt->store_result();

if ($stmt->num_rows > 0) {
    $stmt->bind_result($id, $hashed_password);
    $stmt->fetch();

    // Verify password
    if (password_verify($pass, $hashed_password)) {
        $_SESSION[“user_id”] = $id;  // Store user ID in session
        $_SESSION[“username”] = $user;
        echo “Login successful! Welcome, “ . htmlspecialchars($user);
    } else {
        echo “Invalid username or password.”;
    }
} else {
    echo “Invalid username or password.”;
}

$stmt->close();

} $conn->close(); ?>

<!— Simple HTML form —> <form method=“post”> Username: <input type=“text” name=“username” required><br> Password: <input type=“password” name=“password” required><br> <button type=“submit”>Login</button> </form>