<?php
session_start();

/* Forcer HTTPS */
if (empty($_SERVER['HTTPS']) || $_SERVER['HTTPS'] === 'off') {
    $redirect = 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
    header('Location: ' . $redirect);
    exit();
}

/* Génération du token CSRF */
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = md5(uniqid(rand(), true));
}
?>
<!DOCTYPE html>
<html lang="fr">
<head>
<meta charset="iso-8859-1">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Connexion Administrateur</title>
<link rel="manifest" href="/manifest.json">
<meta name="theme-color" content="#4CAF50">
<link rel="stylesheet" href="ccc.css">

<style>
/* Adaptation PC */
body{
    margin:0;
    padding:0;
    font-family: Arial, Helvetica, sans-serif;
    background:#f4f6f8;
}
.page-container{
    display:flex;
    justify-content:center;
    align-items:center;
    min-height:100vh;
}
.login-box{
    width:420px;
    background:#ffffff;
    border-radius:10px;
    box-shadow:0 8px 25px rgba(0,0,0,0.15);
    padding:30px;
}
.logo{text-align:center;margin-bottom:20px;}
.logo img{max-width:180px;}
.login-title{
    text-align:center;
    font-size:22px;
    font-weight:bold;
    margin-bottom:25px;
    color:#000042;
}
.login-box input{
    width:100%;
    padding:10px;
    font-size:15px;
    border:1px solid #ccc;
    border-radius:6px;
    margin-bottom:15px;
}
.login-box input[type=submit]{
    background:#000042;
    color:#fff;
    cursor:pointer;
}
.login-box input[type=submit]:hover{
    background:#1a1a80;
}
.footer{
    text-align:center;
    margin-top:20px;
    font-size:12px;
    color:#555;
}
</style>
</head>

<body>
<div class="page-container">
    <div class="login-box">
        <div class="logo">
            <img src="ima/log1.JPG" alt="Logo">
        </div>

        <div class="login-title">Connexion Administrateur</div>

        <form method="post" action="i/auth.php">
            <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">

            <input type="text" name="nom" placeholder="Nom d'utilisateur"
                   onkeyup="this.value=this.value.toUpperCase()" required>

            <input type="password" name="mdp" placeholder="Mot de passe" required>

            <input type="submit" value="Se connecter">
        </form>

        <div class="footer">
            Développé par Ir Bob Bukasa (+243 85 46 00 107)
        </div>
    </div>
</div>
</body>
</html>
