prepare('SELECT id, password_hash FROM users WHERE email = :email'); $statement->execute(['email' => $email]); $user = $statement->fetch(); if ($user && password_verify($password, $user['password_hash'])) { if (password_needs_rehash($user['password_hash'], PASSWORD_DEFAULT)) { $rehash = database()->prepare('UPDATE users SET password_hash = :hash WHERE id = :id'); $rehash->execute(['hash' => password_hash($password, PASSWORD_DEFAULT), 'id' => $user['id']]); } clear_login_attempts($email); establish_login((int) $user['id']); redirect_to('/account.php'); } record_attempt('login', $email); $error = site_text('邮箱或密码不正确。', 'The email or password is incorrect.'); } } ?>