prepare("INSERT INTO utenti (username, email, password) VALUES (?, ?, ?)"); $stmt->bind_param("sss", $username, $email, $password); if ($stmt->execute()) { sendAccessEmail("REGISTRAZIONE", $username, $email); echo "Registrazione completata!"; } } elseif (isset($_POST['login'])) { // Login $username = $_POST['username']; $password = $_POST['password']; $stmt = $conn->prepare("SELECT * FROM utenti WHERE username = ? AND banned = FALSE"); $stmt->bind_param("s", $username); $stmt->execute(); $result = $stmt->get_result(); if ($result->num_rows > 0) { $user = $result->fetch_assoc(); if (password_verify($password, $user['password'])) { $_SESSION['user'] = $username; sendAccessEmail("ACCESSO", $username, $user['email']); header("Location: dashboard.php"); } else { echo "Password errata!"; } } } } ?>