<?php
if (!defined('_ISVALID')) define('_ISVALID', true);
include_once 'f_core/config.core.php';

// Handle login
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = $_POST['username'] ?? '';
    $password = $_POST['password'] ?? '';
    
    if ($username && $password) {
        $sql = "SELECT * FROM db_accountuser WHERE usr_user = ? AND usr_password = MD5(?) AND usr_active = 1";
        $user = $class_database->execute($sql, [$username, $password]);
        
        if ($user && count($user) > 0) {
            $_SESSION['usr_id'] = $user[0]['usr_id'];
            $_SESSION['usr_user'] = $user[0]['usr_user'];
            $_SESSION['usr_key'] = $user[0]['usr_key'];
            
            echo "<script>alert('Login successful! Redirecting...'); window.location.href='/';</script>";
            exit;
        } else {
            $error = 'Invalid credentials';
        }
    }
}

echo $class_smarty->displayPage('frontend', 'tpl_auth_login');
?>