KAIPENG KRISTIAN HLA — WORSHIP HYMN
SECURE LOGIN PACKAGE

Replace/add these files while preserving the folder structure.

Protection included:
- Server-side CAPTCHA with 5-minute expiry
- CSRF validation
- File-based IP/login throttling
- Temporary lock after 5 failed attempts
- Generic authentication errors
- Prepared SQL statements
- password_verify()
- Session ID regeneration
- Secure session cookies
- Admin role verification
- Responsive Android/mobile/laptop layout

The database.php included here keeps the currently working database
settings you supplied. If you later rotate the database password,
update only config/database.php.

Requirements:
- PHP 8+ recommended
- Existing users table with id, full_name, email, password, role, status
- PHP must be able to write to storage/security

If storage/security cannot be written by your hosting provider, the
CAPTCHA/CSRF/password protections still work, but file-based throttling
cannot persist properly.
