<?php
    require("../libs/page.php");
    require("../libs/form.php");
    
    function post_handler() {
        global $db;
        
        // there is 100% a better way to do this but i need to test
        if (!array_key_exists('pass',$_POST) || !array_key_exists('user',$_POST)) {
            return '';   
        }
        
        $user = $_POST['user'];
        $pass = $_POST['pass'];

        $stmt = $db->prepare("SELECT * FROM auth WHERE UPPER(username) LIKE UPPER(?)");
        $stmt->execute([$user]);
        
        $result = $stmt->fetch(PDO::FETCH_ASSOC);
        
        if (!$result) return 'Username does not exist.';
        
        $verified = password_verify($pass,$result['password']);
        
        if (!$verified) return 'Password is wrong.';
        
        $token = bin2hex(random_bytes(32));
        
        $stmt = $db->prepare("INSERT INTO token (username, token) VALUES (?, ?)");
        $stmt->execute([$user,$token]);
    
        setcookie("token", $token, time()+3600*24);
    
        header("Location: /");
        die();
    }

    page_header();
        
    $form_message = post_handler();
    
    form("Log in", $form_message, array(
        array('key' => 'Username', 'type' => 'text', 'name' => 'user', 'default' => ''),
        array('key' => 'Password', 'type' => 'password', 'name' => 'pass', 'default' => '')
    ));

    page_footer();
?>