<?


ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);


session_start();
include("_CORE/_data.php");

if (isset($_GET["action"]) && ($_GET["action"] == "logout")) {
	
	setcookie("userid", "", time()+3600*24*365);
	setcookie("email_login", "", time()+3600*24*365);
	setcookie("k", "", time()+3600*24*365);
	setcookie("club_secret", "", time()+3600*24*365);
	
	Header("Location: index?alert=loggedout");
	die();
}

if (isset($_POST["action"]) && ($_POST["action"] == "resetpw")) {
	if ($_POST["email"] != "") {
		$query = "select * from users where email = '" . cleanValue($_POST["email"]) . "' limit 1";
		$result = $mysqli->query($query);
		if ($result->num_rows > 0) {
			$user = $result->fetch_assoc();
			
			// UPDATE PROFILE
			$k = generateKey();
			$query = "update users set reset_k = '" . $k . "' where id = '" . $user["id"] . "' limit 1";
			$result = $mysqli->query($query);
			
			
			$link = $setting["app_url"] . "/index.php?&action=resetpw&k=" . $k;
			$body = getTexts(16); 
					
			$subject = str_replace("#firstname", $user["firstname"], $subject);
			$subject = str_replace("#lastname", $user["lastname"], $subject);
							
			$message = $body;
			$message = str_replace("#firstname", $user["firstname"], $message);
			$message = str_replace("#link", $link, $message);
			
			
			include("assets/emails/template.php");
	
			
			$to = $user["email"];	
			$reply_to = $setting["mail_from_replyto"];
			mailGun($domain, $mg_from_name, $mg_from_email, $to, $reply_to, $subject, $mail);	
			
			Header("Location: index.php?action=forgotpw&alert=success");
			die();	
		}else{
			Header("Location: index.php?action=forgotpw&alert=unknown");
			die();
		}
	}else{
		Header("Location: index.php?action=forgotpw&alert=unknown");
		die();		
	}
}


if (isset($_POST["action"]) && ($_POST["action"] == "setpw")) {
	
	if ($_POST["password"] != "") {
		
		$query = "select * from users where reset_k = '" . cleanValue($_POST["k"]) . "' limit 1";
		$result = $mysqli->query($query);
		if ($result->num_rows > 0) {
			
			$user = $result->fetch_assoc();
			
			$password = md5($password_needle . "_" . cleanValue($_POST["password"])) . md5(cleanValue($_POST["password"]));
			
			// UPDATE PROFILE
			$query = "update users set reset_k = '', password = '" . $password . "' where id = '" . $user["id"] . "' limit 1";
			$result = $mysqli->query($query);
			
			$body = getTexts(35); 
					
			$subject = str_replace("#firstname", $user["firstname"], $subject);
			$subject = str_replace("#lastname", $user["lastname"], $subject);
							
			$message = $body;
			$message = str_replace("#firstname", $user["firstname"], $message);
			$message = str_replace("#site_name", $setting["site_name"], $message);
			
			
			include("_CORE/_email_template.php");
	
			
			$to = $user["email"];	
			$reply_to = $setting["mail_from_replyto"];
			mailGun($domain, $mg_from_name, $mg_from_email, $to, $reply_to, $subject, $mail);	
			
			Header("Location: index.php?alert=pwchanged");
			die();	
			
		}else{
			Header("Location: index.php?alert=unknown&k=" . $_POST["k"]);
			die();
		}
	}else{
		Header("Location: index.php?alert=unknown&k=" . $_POST["k"]);
		die();		
	}
}


if ($_POST) {
	
	if (($_POST["email"] != "") && ($_POST["password"] != "")) {
		
		$password = md5($password_needle . "_" . cleanValue($_POST["password"])) . md5(cleanValue($_POST["password"]));
		
		$query = "select * from users where email = '" . cleanValue($_POST["email"]) . "' and password = '" . cleanValue($password) . "' limit 1";
		$result = $mysqli->query($query);
		if ($result->num_rows > 0) {
			
			$userrow = $result->fetch_assoc();
						
			if ($userrow["active"] != "1") {
				Header("Location: index.php?alert=notactive");
				die();
			}
			
			
			setcookie("userid", $userrow["id"], time()+3600*24*365);
			setcookie("email", $userrow["email"], time()+3600*24*365);
			setcookie("k", $userrow["cookie_k"], time()+3600*24*365);
			
			// LOG
			$query = "insert into log (user_id, type, page, useragent) values (
						'" . $userrow["id"] . "',
						'login',
						'index.php',
						'" . cleanValue($_SERVER['HTTP_USER_AGENT']) . "')";
			$result = $mysqli->query($query);
			
			
			if (!isset($_COOKIE["target"]) || ($_COOKIE["target"]  == "")) {
				Header("Location: dashboard");
				die();	
			}else{
				Header("Location: " . $_COOKIE["target"]);
				die();	
			}
		}else{
			
			Header("Location: index.php?alert=pw");
			die();
		}
	}else{
		Header("Location: index.php?alert=pw");
		die();		
	}
}


// COOKIE CHECK
if (isset($_COOKIE["userid"]) && ($_COOKIE["userid"] != "") && (isset($_COOKIE["k"]) &&  ($_COOKIE["k"] != ""))) {
	$query = "select * from users where (email = '" . cleanValue($_COOKIE["email"]) . "') AND id = '" . cleanValue($_COOKIE["userid"]) . "' AND cookie_k = '" . cleanValue($_COOKIE["k"]) . "' LIMIT 1";
	$result = $mysqli->query($query);
	//die('cookie forward: ' . $query);
	if ($result->num_rows > 0) {
		//Header("Location: dashboard.php");
		//exit();
	}
}

$club["id"] = "1";
getSettings();

?>

<!DOCTYPE html>
<html lang="en">

<head>
     	<!--Title-->
	<title> &bull; Powered by Akari Analytics</title>

	<!-- Meta -->
	<meta charset="utf-8">
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<meta name="author" content="Akari">
	<meta name="robots" content="index, follow">

	<meta name="format-detection" content="telephone=no">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	
	<!-- FAVICONS ICON -->
	<link rel="shortcut icon" type="image/png" href="https://cdn.myakari.com/images/favicon.png">
	<link href="https://cdn.myakari.com/vendor/bootstrap-select/dist/css/bootstrap-select.min.css" rel="stylesheet">
	<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@48,400,0,0">
   <link class="main-css" href="https://cdn.myakari.com/css/style.css" rel="stylesheet">
	
		<style>
		/* CLUB CUSTOM CSS */
		
		/*
		.authincation .login-aside, .authincation .login-aside::after {
  			background-color: #5a996c !important;
		}
		*/
			/*
			.authincation .login-aside {
				max-width: 50% !important;
			}
			*/
			
	
	</style>

</head>

<body class="body">
	<div class="authincation d-flex flex-column flex-lg-row flex-column-fluid">
		<div class="login-aside text-center d-flex flex-column flex-row-auto" style="background-image:url('https://cdn.myakari.com/images/login_screen.jpg'); background-position: center center; background-size: cover">
			<div class="d-flex flex-column-auto flex-column pt-lg-200 pt-15">
				<div class="text-center mb-lg-4 mb-2 pt-5 logo">
					<img src="https://cdn.myakari.com/images/logo_akari_neg.svg" alt="" height="120">
				</div>
				<h3 class="mb-2 text-white">Welcome back!</h3>
				<p class="mb-4">Data Driven Scouting Solutions<br>and Software for Premium Football Clubs</p>
			</div>
		</div>
					<div class="container flex-row-fluid d-flex flex-column justify-content-center position-relative overflow-hidden p-7 mx-auto">
				<div class="d-flex justify-content-center h-100 align-items-center">
					<div class="authincation-content style-2">
						<div class="row no-gutters">
							<div class="col-xl-12 tab-content">
								<div id="sign-up" class="auth-form tab-pane fade show active  form-validation">
									<form action="index" method="post">
										<div class="text-center mb-4">
											<h3 class="text-center mb-2 text-dark">Sign In</h3>
										</div>
										
										
										<div class="mb-3">
											<label for="exampleFormControlInput1" class="form-label required">Email address</label>
										  <input type="email" name="email" class="form-control" id="exampleFormControlInput1" value="">
										</div>
										<div class="mb-3 position-relative">
											<label class="form-label required">Password</label>
											<input type="password" id="dlab-password" name="password" class="form-control" value="">
											<span class="show-pass eye">
												<i class="fa fa-eye-slash"></i>
												<i class="fa fa-eye"></i>

											</span>
										</div>
										<div class="form-row d-flex justify-content-between mt-4 mb-2">
											<div class="mb-3">
												<div class="form-check custom-checkbox mb-0">
													<input type="checkbox" class="form-check-input" id="customCheckBox1">
													<label class="form-check-label" for="customCheckBox1">Remember my preference</label>
												</div>
											</div>
											<div class="mb-4">
												<a href="page-forgot-password.html" class="btn-link text-primary">Forgot Password?</a>
											</div>
										</div>
										<button class="btn btn-block btn-primary">Sign In</button>

									</form>
								</div>
									<div class="d-flex align-items-center justify-content-center">
										<a href="https://akarianalytics.com" class="text-primary">Akari Analytics</a>
										<a href="javascript:void(0);" class="text-primary mx-5">Terms & Conditions</a>
										<a href="javascript:void(0);" class="text-primary">Privacy Statement</a>
									</div>
							</div>
						</div>
					</div>
				</div>
			</div>
						
	</div>


    <!--**********************************
        Scripts
    ***********************************-->
    <!-- Required vendors -->
    <script src="https://cdn.myakari.com/vendor/global/global.min.js"></script>
	<script src="https://cdn.myakari.com/vendor/bootstrap-select/dist/js/bootstrap-select.min.js"></script>
	<script src="https://cdn.myakari.com/js/custom.min.js"></script>
	<script src="https://cdn.myakari.com/js/dlabnav-init.js"></script>
	
	
</body>
</html>