query("SELECT * FROM companies LIMIT 1");
$company_info = $stmt->fetch();
if (isset($_SESSION['user_id'])) {
header('Location: admin.php');
exit;
}
$error = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$username = $_POST['username'] ?? '';
$password = $_POST['password'] ?? '';
$stmt = db()->prepare("SELECT u.*, b.name_en as branch_name_en, b.name_ar as branch_name_ar
FROM users u
LEFT JOIN branches b ON u.branch_id = b.id
WHERE u.username = ?");
$stmt->execute([$username]);
$user = $stmt->fetch();
if ($user && password_verify($password, $user['password_hash'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['branch_id'] = $user['branch_id'];
$_SESSION['company_id'] = $user['company_id'];
$_SESSION['role'] = $user['role'];
$_SESSION['full_name'] = $lang === 'ar' ? ($user['full_name_ar'] ?: $user['full_name_en']) : $user['full_name_en'];
$_SESSION['branch_name'] = $lang === 'ar' ? ($user['branch_name_ar'] ?: $user['branch_name_en']) : $user['branch_name_en'];
header('Location: admin.php');
exit;
} else {
$error = 'Invalid username or password';
}
}
?>
<?= htmlspecialchars(is_arabic() ? $company_info['name_ar'] : $company_info['name_en']) ?> - <?= __('login') ?>