isLoggedIn()) { redirectTo('dashboard.php'); } $error = ''; $success = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { $email = sanitizeInput($_POST['email'] ?? ''); $password = $_POST['password'] ?? ''; if (empty($email) || empty($password)) { $error = 'Please fill in all fields.'; } elseif (!validateEmail($email)) { $error = 'Please enter a valid email address.'; } else { if ($auth->login($email, $password)) { redirectTo('dashboard.php'); } else { $error = 'Invalid email or password.'; } } } ?>