1#@!#!123s

: / home / schoolcampuserp / erp.nationalacademykotwa.com / api / app_api /
Filename : driver_login.php
back
<?php
include 'connection.php';

if ($_SERVER["REQUEST_METHOD"] === "POST") {
    $email = $_POST["email"];
    $password = $_POST["password"];
    
    // Query to check if email exists and belongs to a driver
    $query = "SELECT s.*, r.name as role 
              FROM staff s
              JOIN staff_roles sr ON sr.staff_id = s.id
              JOIN roles r ON r.id = sr.role_id 
              WHERE s.email = ? AND s.is_active=1 AND r.name = 'Driver' 
              LIMIT 1";  // Limit to 1 result for optimization

    // Prepare statement
    $stmt = $con->prepare($query);
    $stmt->bind_param("s", $email);
    $stmt->execute();
    $result = $stmt->get_result();

    if ($result && $result->num_rows > 0) {
        $userData = $result->fetch_assoc();
        
        // Verify hashed password
        if (password_verify($password, $userData["password"])) {
            unset($userData["password"]); // Remove password from response
            $response = array("status" => "1", "message" => "Login successful", "data" => $userData);
        } else {
            $response = array("status" => "0", "message" => "Password does not match.");
        }
    } else {
        $response = array("status" => "0", "message" => "User not found or not a driver.");
    }

    $stmt->close(); // Close statement
} else {
    $response = array("status" => "0", "message" => "Invalid request method. Please use POST.");
}

// Return response as JSON
echo json_encode($response);
?>