Improved secure login form

You could use your own controller and only use the login function of the ion auth library.

Your controller could be:

PHP Code:

<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class Admin extends CI_Controller {


    public function __construct()
    {
        parent::__construct();
        $this->load->library('ion_auth');

        $this->data = array( 'error' => '' );

    }

    public function index() 
    {
        
        if (!$this->ion_auth->is_admin()) {
            
            redirect('admin/login');
        }

        $this->load->view('admin/index');
    }
    
    public function login()
    {

        if (!empty($_POST)) {

            // Setup validation
            $this->form_validation->set_rules('username', 'Username', 'trim|required|valid_email');
            $this->form_validation->set_rules('password', 'Password', 'required|min_length[8]');

            if ($this->form_validation->run() === true) {
                
                // check the credentials
                if ($this->ion_auth->login($this->input->post('username'), $this->input->post('password'), ) ){

                    redirect('admin/index');

                } else {

                    // Credentials are not correct
                    $this->data['error'] = $this->ion_auth->errors();
                }
             }  else {

                // Input is invalid
                $this->data['error'] = validation_errors();
             }
        }
        
        $this->load->view('admin/login', $this->data);
        // You can echo $error in your view to print the error message.
    } 
}