<?php
declare(strict_types=1);

require_once __DIR__ . '/config.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = trim((string) ($_POST['username'] ?? ''));
    $password = (string) ($_POST['password'] ?? '');

    if ($username !== '' && $password !== '') {
        $stmt = $pdo->prepare('SELECT id, password_hash FROM admin_users WHERE username = :u');
        $stmt->execute(['u' => $username]);
        $admin = $stmt->fetch();

        if ($admin && password_verify($password, $admin['password_hash'])) {
            session_regenerate_id(true);
            $_SESSION['admin_id'] = $admin['id'];

            $upd = $pdo->prepare('UPDATE admin_users SET last_login = NOW() WHERE id = :id');
            $upd->execute(['id' => $admin['id']]);

            header('Location: admin.php');
            exit;
        }
    }

    header('Location: admin.html?chyba=1');
    exit;
}

header('Location: admin.html');
exit;