<?php

require_once __DIR__ . '/../includes/auth.php';

require_once __DIR__ . '/../includes/helpers.php';

$error = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

    csrf_verify();

    $user = $_POST['username'] ?? '';

    $pass = $_POST['password'] ?? '';

    if (attempt_login($user, $pass)) {

        header('Location: ' . url('/admin/dashboard.php'));

        exit;

    }

    $error = 'Invalid username or password.';

}

if (is_logged_in()) {

    header('Location: ' . url('/admin/dashboard.php'));

    exit;

}

$page_title = 'Admin login';

require __DIR__ . '/../includes/header.php';

?>

<h1>Admin login</h1>

<?php if ($error): ?><p class="error"><?= e($error) ?></p><?php endif; ?>

<form method="post" class="card form">

    <?= csrf_field() ?>

    <label>Username

        <input type="text" name="username" autocomplete="username" required autofocus>

    </label>

    <label>Password

        <input type="password" name="password" autocomplete="current-password" required>

    </label>

    <button type="submit">Log in</button>

</form>

<?php

require __DIR__ . '/../includes/footer.php';