<?php
$pageTitle = '用户登录';
require_once 'config.php';

if (isLoggedIn()) {
    header('Location: /user/profile.php');
    exit;
}

$error = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $email = trim($_POST['email'] ?? '');
    $password = $_POST['password'] ?? '';

    if (empty($email) || empty($password)) {
        $error = '请输入邮箱和密码';
    } else {
        $pdo = getDB();
        $stmt = $pdo->prepare("SELECT * FROM users WHERE email = ?");
        $stmt->execute([$email]);
        $user = $stmt->fetch();
        if ($user && password_verify($password, $user['password'])) {
            $_SESSION['user_id']       = $user['id'];
            $_SESSION['user_email']    = $user['email'];
            $_SESSION['user_nickname'] = $user['nickname'] ?? '';
            $_SESSION['flash_message'] = '登录成功，欢迎回来！';
            $_SESSION['flash_type'] = 'success';
            $redirect = $_GET['redirect'] ?? '/user/profile.php';
            header('Location: ' . $redirect);
            exit;
        } else {
            $error = '邮箱或密码错误';
        }
    }
}

require_once 'includes/header.php';
?>
<div class="container py-5">
    <div class="row justify-content-center">
        <div class="col-md-5">
            <div class="card shadow-sm border-0">
                <div class="card-body p-4">
                    <h3 class="fw-bold mb-4 text-center">用户登录</h3>
                    <?php if ($error): ?>
                        <div class="alert alert-danger"><?php echo htmlspecialchars($error); ?></div>
                    <?php endif; ?>
                    <form method="POST">
                        <div class="mb-3">
                            <label class="form-label fw-semibold">邮箱地址</label>
                            <input type="email" name="email" class="form-control" value="<?php echo htmlspecialchars($_POST['email'] ?? ''); ?>" required autofocus>
                        </div>
                        <div class="mb-3">
                            <label class="form-label fw-semibold">密码</label>
                            <input type="password" name="password" class="form-control" required>
                        </div>
                        <button type="submit" class="btn btn-primary w-100 py-2 fw-bold">登录</button>
                    </form>
                    <p class="text-center mt-3 mb-0">没有账号？<a href="/register.php">立即注册</a></p>
                </div>
            </div>
        </div>
    </div>
</div>
<?php require_once 'includes/footer.php'; ?>
