<?php
require 'db.php';
require 'layout.php';

if(isset($_SESSION['user_id'])) { header("Location: dashboard.php"); exit; }

$err = "";
if($_SERVER['REQUEST_METHOD'] == 'POST') {
    $user = mysqli_real_escape_string($condb, $_POST['username']);
    $pass = encryptData($_POST['password']); 
    
    $q = mysqli_query($condb, "SELECT * FROM users WHERE username='$user' AND password='$pass'");
    if(mysqli_num_rows($q) == 1) {
        $row = mysqli_fetch_assoc($q);
        $_SESSION['user_id'] = $row['user_id'];
        $_SESSION['username'] = $row['username'];
        $_SESSION['role'] = $row['role'];
        $_SESSION['group_name'] = $row['group_name'];
        setSingleSession($row['user_id']); // บันทึก Token ล่าสุด
        header("Location: dashboard.php"); exit;
    } else {
        $err = "Username หรือ Password ไม่ถูกต้อง";
    }
}
renderHeader("เข้าสู่ระบบเจ้าหน้าที่");
?>
<div class="row justify-content-center mt-5">
    <div class="col-md-5">
        <div class="card p-4 border-top border-primary border-5">
            <div class="text-center mb-4">
                <h3 class="fw-bold text-primary">เข้าสู่ระบบ</h3>
                <p class="text-muted">สำหรับผู้ดูแลระบบและเจ้าหน้าที่</p>
            </div>
            <?php if($err) echo "<div class='alert alert-danger'><i class='fas fa-exclamation-circle'></i> $err</div>"; ?>
            <form method="post">
                <div class="mb-3">
                    <label class="form-label">ชื่อผู้ใช้งาน (Username)</label>
                    <input type="text" name="username" class="form-control form-control-lg bg-light" required>
                </div>
                <div class="mb-4">
                    <label class="form-label">รหัสผ่าน (Password)</label>
                    <input type="password" name="password" class="form-control form-control-lg bg-light" required>
                </div>
                <button type="submit" class="btn btn-primary btn-lg w-100 rounded-pill shadow-sm"><i class="fas fa-sign-in-alt"></i> Login</button>
            </form>
        </div>
    </div>
</div>
<?php renderFooter(); ?>