<?php

session_start();

require_once __DIR__ . '/../search/search_config.php';


$message = "";


if(isset($_POST['connexion'])){


    $login = trim($_POST['username'] ?? '');
    $password = $_POST['password'] ?? '';



    $stmt = $conn->prepare(
        "SELECT *
         FROM tb_user
         WHERE Login=?
         AND Actif='Oui'"
    );


    if(!$stmt){

        die("Erreur SQL : ".$conn->error);

    }



    $stmt->bind_param(
        "s",
        $login
    );


    $stmt->execute();


    $result = $stmt->get_result();



    if($result->num_rows == 1){


        $user = $result->fetch_assoc();



        if(password_verify($password, $user['Password'])){


            $_SESSION['user_id'] = $user['ID'];

            $_SESSION['login'] = $user['Login'];

            $_SESSION['nom'] = $user['Nom'];

            $_SESSION['organisation'] = $user['Organisation'];

            $_SESSION['groupe'] = $user['Groupe'];

            $_SESSION['niveau_admin'] = $user['Niveau_Admin'];



            header("Location: ../search/search.php");
            exit;


        }


    }



    header("Location: nonauthorized.php");
    exit;


}


?>


<!DOCTYPE html>
<html>

<head>

<title>Connexion</title>

</head>


<body>


<h2>Connexion</h2>


<form method="post">


Login :

<input type="text" name="username" required>


<br><br>


Mot de passe :

<input type="password" name="password" required>


<br><br>


<button type="submit" name="connexion" value="1">
Connexion
</button>


</form>


</body>

</html>