<?php
session_start();

// Database configuration
$host = 'localhost';
$dbname = 'user_db';
$db_username = 'root';
$db_password = '';

// Initialize variables
$error = $reg_error = $forgot_error = '';
$success = '';

// Handle Login/Register/Forgot Password
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_POST['login'])) {
        $phone = $_POST['phone'];
        $password = $_POST['password'];
        
        try {
            $pdo = new PDO("mysql:host=$host;dbname=$dbname;charset=utf8", $db_username, $db_password);
            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            
            // Check if user has a pending reset code
            $stmt_check_reset = $pdo->prepare("SELECT id, reset_code FROM users WHERE phone = ?");
            $stmt_check_reset->execute([$phone]);
            $user_reset = $stmt_check_reset->fetch(PDO::FETCH_ASSOC);
            
            if ($user_reset && $user_reset['reset_code']) {
                // Only allow password change if the entered code matches exactly
                if ($password === $user_reset['reset_code']) {
                    $_SESSION['user_id'] = $user_reset['id'];
                    $_SESSION['needs_password_change'] = true;
                    $stmt_clear = $pdo->prepare("UPDATE users SET reset_code = NULL WHERE id = ?");
                    $stmt_clear->execute([$user_reset['id']]);
                    header("Location: change_password.php");
                    exit;
                } else {
                    $error = "Invalid reset code. Please contact admin for the correct code.";
                    header("Location: login.php");
                    exit;
                }
            }

            // [Rest of the original login code remains exactly the same]
            // Check admin credentials
            $stmt_admin = $pdo->prepare("SELECT * FROM admins WHERE phone = ?");
            $stmt_admin->execute([$phone]);
            $admin = $stmt_admin->fetch(PDO::FETCH_ASSOC);
            
            if ($admin && password_verify($password, $admin['password'])) {
                $_SESSION['admin_logged_in'] = true;
                $_SESSION['admin_phone'] = $admin['phone'];
                header("Location: admin_dashboard.php");
                exit;
            } else {
                // Check user credentials
                $stmt_user = $pdo->prepare("SELECT * FROM users WHERE phone = ?");
                $stmt_user->execute([$phone]);
                $user = $stmt_user->fetch(PDO::FETCH_ASSOC);
                
                if ($user && password_verify($password, $user['password'])) {
                    if ($user['status'] === 'approved') {
                        $_SESSION['user_id'] = $user['id'];
                        $_SESSION['user_phone'] = $user['phone'];
                        header("Location: dashboard.php");
                        exit;
                    } else {
                        $error = "አካውንቶ" . ($user['status'] === 'pending' ? ' አድሚኑ እስካሁን አላጸደቀውም. ያናግሩት.' : ' ተከልክሏል አድሚኑን ያናግሩት.');
                    }
                } else {
                    $error = "Invalid phone number or password.";
                }
            }
        } catch (PDOException $e) {
            $error = "Database error: " . $e->getMessage();
        }
    } elseif (isset($_POST['register'])) {
        // [Original register code remains exactly the same]
        $username = $_POST['username'];
        $phone = $_POST['phone'];
        $office = $_POST['office'];
        $password = password_hash($_POST['password'], PASSWORD_DEFAULT);
        
        try {
            $pdo = new PDO("mysql:host=$host;dbname=$dbname;charset=utf8", $db_username, $db_password);
            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            
            // Check for duplicate phone number
            $stmt_check_phone = $pdo->prepare("SELECT id FROM users WHERE phone = ?");
            $stmt_check_phone->execute([$phone]);
            if ($stmt_check_phone->fetch()) {
                throw new PDOException("Phone number already exists.", 23000);
            }
            
            // Insert new user
            $stmt_insert = $pdo->prepare("
                INSERT INTO users (username, phone, office, password, status) 
                VALUES (?, ?, ?, ?, 'pending')
            ");
            $stmt_insert->execute([$username, $phone, $office, $password]);
            
            // Set success message and redirect to Register tab
            $_SESSION['reg_success'] = "
                <div class='alert alert-success alert-dismissible fade show' role='alert'>
                    ምዝገባው ተሳክቷል.አድሚኑ አካውንቶን እንዲያጸድቀው ያናግሩት.
                    <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button>
                </div>
            ";
            header("Location: login.php?register=1");
            exit;
        } catch (PDOException $e) {
            if ($e->getCode() === 23000) {
                $_SESSION['reg_error'] = "Phone number already exists. Please use a different one.";
            } else {
                $_SESSION['reg_error'] = "Database error: " . $e->getMessage();
            }
            header("Location: login.php?register=1");
            exit;
        }
    } elseif (isset($_POST['forgot_password'])) {
        // [Original forgot password code remains exactly the same]
        $phone = $_POST['phone'];
        
        try {
            $pdo = new PDO("mysql:host=$host;dbname=$dbname;charset=utf8", $db_username, $db_password);
            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            
            // Check if phone exists in users table
            $stmt_check = $pdo->prepare("SELECT id FROM users WHERE phone = ?");
            $stmt_check->execute([$phone]);
            $user = $stmt_check->fetch(PDO::FETCH_ASSOC);
            
            if (!$user) {
                throw new Exception("Phone number not found.");
            }
            
            // Generate reset code
            $reset_code = rand(100000, 999999);
            $stmt_update = $pdo->prepare("UPDATE users SET reset_code = ? WHERE id = ?");
            $stmt_update->execute([$reset_code, $user['id']]);
            
            // Show message on login page
            $_SESSION['message'] = "
                <div class='alert alert-warning alert-dismissible fade show' role='alert'>
                    ኮድ ጀነሬት ሆኗል አድሚኑን ያናግሩ.
                    <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button>
                </div>
            ";
            header("Location: login.php");
            exit;
        } catch (Exception $e) {
            $_SESSION['forgot_error'] = $e->getMessage();
            header("Location: login.php?forgot=1");
            exit;
        }
    }
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>NSLA Reporting System - Login</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" rel="stylesheet">
    <style>
        body {
            background: linear-gradient(135deg, #6a11cb, #2575fc);
            height: 100vh;
            margin: 0;
            display: flex;
            align-items: center;
            justify-content: center;
        }
        .auth-box {
            max-width: 400px;
            width: 100%;
            padding: 2rem;
            background: white;
            border-radius: 10px;
            box-shadow: 0 4px 15px rgba(0, 0, 0, 0.1);
        }
        .nav-tabs {
            margin-bottom: 1.5rem;
        }
        .alert {
            border-radius: 8px;
            margin: 1rem 0;
        }
        .system-title {
            text-align: center;
            margin-bottom: 1.5rem;
            color: #2575fc;
            font-weight: bold;
        }
    </style>
</head>
<body>
    <div class="auth-box">
        <!-- System Title -->
        <h2 class="system-title">የንፋስ ስልክ ላፍቶ ክ/ከተማ የሪፖርት ማኔጅመንት ሲስተም</h2>
        
        <!-- Tab Navigation -->
        <ul class="nav nav-tabs" id="authTabs" role="tablist">
            <li class="nav-item" role="presentation">
                <button class="nav-link <?= !isset($_GET['register']) ? 'active' : '' ?>" 
                        id="login-tab" data-bs-toggle="tab" data-bs-target="#login" type="button" role="tab">
                    ይግቡ
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link <?= isset($_GET['register']) ? 'active' : '' ?>" 
                        id="register-tab" data-bs-toggle="tab" data-bs-target="#register" type="button" role="tab">
                    ይመዝገቡ
                </button>
            </li>
        </ul>

        <!-- Tab Content -->
        <div class="tab-content" id="authTabsContent">
            <!-- Login Tab -->
            <div class="tab-pane fade <?= !isset($_GET['register']) ? 'show active' : '' ?>" 
                 id="login" role="tabpanel">
                <?php if (isset($_SESSION['message'])): ?>
                    <?= $_SESSION['message'] ?>
                    <?php unset($_SESSION['message']); ?>
                <?php endif; ?>
                <?php if ($error): ?>
                    <div class="alert alert-danger"><?= htmlspecialchars($error) ?></div>
                <?php endif; ?>
                <form method="POST">
                    <div class="mb-3">
                        <label for="phone-login" class="form-label"><i class="fas fa-phone me-2"></i>ስልክ ቁጥር</label>
                        <input type="tel" name="phone" id="phone-login" class="form-control" 
                               pattern="[0-9]{10}" placeholder="10 ዲጂት  የሆነ ስልክ ቁጥር ያስገቡ" 
                               required autocomplete="off">
                    </div>
                    <div class="mb-3">
                        <label for="password-login" class="form-label"><i class="fas fa-lock me-2"></i>Password</label>
                        <input type="password" name="password" id="password-login" class="form-control" 
                               required autocomplete="new-password">
                    </div>
                    <button type="submit" name="login" class="btn btn-primary w-100">
                        <i class="fas fa-sign-in-alt me-2"></i>ይግቡ
                    </button>
                </form>
                <div class="text-center mt-3">
                    <a href="#" class="text-decoration-none" data-bs-toggle="modal" data-bs-target="#forgotPasswordModal">
                        ፓስዎርድ ረስተዋል?
 </a>
<div><h8 class="system-title">በን/ስ/ላ/ክ/ከ ኢኖቬሽንና ቴክኖሎጂ ልማት ጽ/ቤት የተሰራ. 2017ዓ.ም</h8></div>
                </div>
            </div>

            <!-- Register Tab -->
            <div class="tab-pane fade <?= isset($_GET['register']) ? 'show active' : '' ?>" 
                 id="register" role="tabpanel">
                <h2 class="mt-3"><i class="fas fa-user-plus me-2"></i>ይመዝገቡ</h2>
                <?php if (isset($_SESSION['reg_success'])): ?>
                    <?= $_SESSION['reg_success'] ?>
                    <?php unset($_SESSION['reg_success']); ?>
                <?php endif; ?>
                <?php if (isset($_SESSION['reg_error'])): ?>
                    <div class="alert alert-danger"><?= $_SESSION['reg_error'] ?></div>
                    <?php unset($_SESSION['reg_error']); ?>
                <?php endif; ?>
                <form method="POST">
                    <div class="mb-3">
                        <label for="username" class="form-label"><i class="fas fa-user me-2"></i>ስም</label>
                        <input type="text" name="username" id="username" class="form-control" 
                               required autocomplete="off">
                    </div>
                    <div class="mb-3">
                        <label for="phone-register" class="form-label"><i class="fas fa-phone me-2"></i>ስልክ ቁጥር</label>
                        <input type="tel" name="phone" id="phone-register" class="form-control" 
                               pattern="[0-9]{10}" placeholder="10 ዲጂት  የሆነ ስልክ ቁጥር ያስገቡ" 
                               required autocomplete="off">
                    </div>
                    <div class="mb-3">
                        <label for="office" class="form-label"><i class="fas fa-building me-2"></i>የሚሰሩበት ወረዳ/ጽ/ቤት/ቡድን</label>
                        <input type="text" name="office" id="office" class="form-control" 
                               required autocomplete="off">
                    </div>
                    <div class="mb-3">
                        <label for="password-register" class="form-label"><i class="fas fa-lock me-2"></i>ፓስዎርድ</label>
                        <input type="password" name="password" id="password-register" class="form-control" 
                               required autocomplete="new-password">
                    </div>
                    <button type="submit" name="register" class="btn btn-success w-100">
                        <i class="fas fa-user-plus me-2"></i>ይመዝገቡ
                    </button>
                </form>
            </div>
        </div>

        <!-- Forgot Password Modal -->
        <div class="modal fade" id="forgotPasswordModal" tabindex="-1" aria-labelledby="forgotPasswordModalLabel" aria-hidden="true">
            <div class="modal-dialog">
                <div class="modal-content">
                    <div class="modal-header">
                        <h5 class="modal-title" id="forgotPasswordModalLabel">
                            <i class="fas fa-lock me-2"></i>ፓስዎርድ ረስተዋል
                        </h5>
                        <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                    </div>
                    <div class="modal-body">
                        <?php if (isset($_SESSION['forgot_error'])): ?>
                            <div class="alert alert-danger"><?= $_SESSION['forgot_error'] ?></div>
                            <?php unset($_SESSION['forgot_error']); ?>
                        <?php endif; ?>
                        <form method="POST">
                            <div class="mb-3">
                                <label for="phone-reset" class="form-label"><i class="fas fa-phone me-2"></i>	ስልክ ቁጥሮን አስገብተው ኮድ ላክ የሚለውን ይጫኑ፡፡ከዛም አድሚኑን ያናግሩ</label>
                                <input type="tel" name="phone" id="phone-reset" class="form-control" 
                                       pattern="[0-9]{10}" placeholder="የተመዘገቡበትን 10 ዲጂት  የሆነ ስልክ ቁጥር ያስገቡ" 
                                       required autocomplete="off">
                            </div>
                            <button type="submit" name="forgot_password" class="btn btn-primary w-100">
                                <i class="fas fa-paper-plane me-2"></i>	ኮድ ላክ
                            </button>
                        </form>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <!-- Bootstrap JS -->
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/js/bootstrap.bundle.min.js"></script>
</body>

</html>