29 lines
2.1 KiB
PHP
29 lines
2.1 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
require __DIR__ . '/bootstrap.php';
|
|
if (!empty($_SESSION['admin_id'])) redirect('index.php');
|
|
$error = '';
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
verify_csrf();
|
|
try {
|
|
$stmt = db()->prepare('SELECT * FROM admin_users WHERE username = ? AND is_active = 1 LIMIT 1');
|
|
$stmt->execute([trim((string) ($_POST['username'] ?? ''))]);
|
|
$user = $stmt->fetch();
|
|
if ($user && password_verify((string) ($_POST['password'] ?? ''), $user['password_hash'])) {
|
|
session_regenerate_id(true);
|
|
$_SESSION['admin_id'] = (int) $user['id'];
|
|
$_SESSION['admin_name'] = $user['display_name'];
|
|
db()->prepare('UPDATE admin_users SET last_login_at = NOW() WHERE id = ?')->execute([$user['id']]);
|
|
audit('login', 'admin_users', (int) $user['id']);
|
|
redirect('index.php');
|
|
}
|
|
$error = '帳號或密碼輸入錯誤。';
|
|
} catch (Throwable $e) {
|
|
$error = '資料庫尚未完成設定，請先執行初始化。';
|
|
}
|
|
}
|
|
?>
|
|
<!doctype html><html lang="zh-Hant"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>管理登入｜水晶男孩推廣部</title><link rel="stylesheet" href="assets/admin.css"></head>
|
|
<body class="auth-page"><main class="auth-card"><div class="auth-gem">◆</div><p class="eyebrow">SECHSKIES ARCHIVE</p><h1>推廣部管理登入</h1><p>把散落的記憶，好好收進同一片黃色海洋。</p><?php if (isset($_GET['setup'])): ?><div class="notice notice--success">管理者建立完成，請登入。</div><?php endif; ?><?php if ($error): ?><div class="notice notice--error"><?= h($error) ?></div><?php endif; ?>
|
|
<form method="post"><input type="hidden" name="csrf" value="<?= h(csrf_token()) ?>"><label>管理者帳號<input name="username" required autocomplete="username" autofocus></label><label>密碼<input name="password" type="password" required autocomplete="current-password"></label><button class="button button--primary" type="submit">登入後臺</button><a class="text-link" href="setup.php">第一次使用？初始化系統</a></form></main></body></html>
|