<?php
require_once __DIR__ . '/app_init.php';
require_once __DIR__ . '/db_config.php';
require_once __DIR__ . '/functions.php';

// Default: user not logged in
if (empty($_SESSION['Member'])) {
    $_SESSION['Member'] = -1;
}

// Handle Logout
if (isset($_POST['logout'])) {
    setcookie('Member', '', time() - 3600, '/');
    $_SESSION['Member'] = -1;
    header('Location: indexmain.php');
    exit;
}

// Cookie auto-login
if (isset($_COOKIE['Member']) && $_COOKIE['Member'] !== '') {
    $pdo = getReadDb();
    $stmt = $pdo->prepare("SELECT * FROM users WHERE Member = ? AND OnOff = 'On'");
    $stmt->execute([$_COOKIE['Member']]);
    $user = $stmt->fetch();

    if ($user) {
        $_SESSION['Member'] = $user['member'];
        setcookie('Member', $user['member'], time() + (10 * 365 * 24 * 3600), '/');

        $totLogins = $user['totallogins'] + 1;
        $wpdo = getWriteDb();
        $upd = $wpdo->prepare("UPDATE users SET TotalLogins = ?, LastIP = ?, LastBrowser = ?, LastLogin = NOW() WHERE Member = ?");
        $upd->execute([$totLogins, $_SERVER['REMOTE_ADDR'], $_SERVER['HTTP_USER_AGENT'], $user['member']]);
    }
}

// Handle Form Login
if (isset($_POST['login'])) {
    $pdo = getReadDb();
    $stmt = $pdo->prepare("SELECT * FROM users WHERE Member = ? AND Password = ? AND OnOff = 'On'");
    $stmt->execute([$_POST['member'] ?? '', $_POST['password'] ?? '']);
    $user = $stmt->fetch();

    if ($user) {
        $_SESSION['Member'] = $user['member'];

        $totLogins = $user['totallogins'] + 1;
        $wpdo = getWriteDb();
        $upd = $wpdo->prepare("UPDATE users SET TotalLogins = ?, LastIP = ?, LastBrowser = ?, LastLogin = NOW() WHERE Member = ?");
        $upd->execute([$totLogins, $_SERVER['REMOTE_ADDR'], $_SERVER['HTTP_USER_AGENT'], $user['member']]);

        // "Keep me signed in" checkbox
        if (isset($_POST['check_box'])) {
            setcookie('Member', $user['member'], time() + (10 * 365 * 24 * 3600), '/');
        } else {
            setcookie('Member', $user['member'], 0, '/');
        }
    } else {
        // Invalid credentials - redirect with error
        $loginpage = $_SERVER['SCRIPT_NAME'] . '?Message=' . urlencode('Invalid User Name and Password Combination');
        $loginpage .= '&UserName=' . urlencode($_POST['member'] ?? '');
        header('Location: indexmain.php');
        exit;
    }
}

header('Location: indexmain.php');
exit;