<?php
session_start();
ob_start();
include '../config.php';
if (isset($_POST['email']) && isset($_POST['password'])) {
$username = $_POST['email'];
$password = $_POST['password'];`enter code here`
$username = mysqli_real_escape_string($conn , $username);
$password = mysqli_real_escape_string($conn , $password);
$password_md5 = md5($password);
$query = "select * from admin where `email` = '$username' AND `password` = '$password_md5'";
$result = mysqli_query($conn , $query);
$row = mysqli_fetch_array($result , MYSQLI_NUM);
$rows = mysqli_num_rows($result);
if ($rows == 1) {
$_SESSION["id"] = $row['id'];
$_SESSION["role_id"] = $row['role_id'];
//$_SESSION["role"] = $row['role'];
$_SESSION["email"] = $row['email'];
//$_SESSION['admin'] = "admin";
header("Location: dashboard.php?page=dashboard");
}else{
$fmsg = "invalid username and password";
}
}
?>



<?php
$login_session = $_SESSION['id'];
$query = "select * from admin where id = '$login_session'";
$result = mysqli_query($conn , "$query");
$row = mysqli_fetch_array($result , MYSQLI_NUM);
?>

$row = mysqli_fetch_array($result , MYSQLI_ASSOC);  //<----change here
$rows = mysqli_num_rows($result);
if ($rows == 1) {
$_SESSION["id"] = $row['id'];
$_SESSION["role_id"] = $row['role_id'];
//$_SESSION["role"] = $row['role'];
$_SESSION["email"] = $row['email'];
//$_SESSION['admin'] = "admin";
header("Location: dashboard.php?page=dashboard");
}else{
$fmsg = "invalid username and password";
}