prepare("SELECT * FROM users WHERE email = ? AND active = 1 LIMIT 1"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password_hash'])) { record_login_attempt($ip, $email, true); session_regenerate_id(true); $_SESSION['user_id'] = (int)$user['id']; db()->prepare("UPDATE users SET last_active = NOW() WHERE id = ?") ->execute([$user['id']]); if (function_exists('audit_log')) { audit_log('login_success', 'user', (int)$user['id'], $user['name'] ?? $email, "IP: {$ip}"); } redirect(base_url('dashboard.php')); } else { record_login_attempt($ip, $email, false); if (function_exists('audit_log')) { // Log de intento fallido (sin user_id porque no se logró autenticar) try { db()->prepare("INSERT INTO audit_log (user_id, user_name, action, entity_type, entity_name, detail, ip) VALUES (NULL, ?, 'login_failed', 'user', ?, ?, ?)") ->execute([$email, $email, "Credenciales inválidas", $ip]); } catch (\Throwable) {} } $error = 'Correo o contraseña incorrectos.'; } } } $appName = setting('app_name', 'TaskFlow'); ?> Iniciar sesión — <?= e($appName) ?>