<?php
require_once '../config.php';

// Redirect if already logged in as sub admin
if (isLoggedIn() && $_SESSION['role'] === 'sub_admin') {
    redirect(SITE_URL . '/admin/subadmin/dashboard.php');
}

$error = '';
$prefill_code = sanitize($_GET['code'] ?? '');

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = sanitize($_POST['username'] ?? '');
    $password = $_POST['password'] ?? '';

    if (empty($username) || empty($password)) {
        $error = 'Please enter username and password.';
    } else {
        $stmt = $conn->prepare("SELECT * FROM sub_admins WHERE username = ? AND status != 'inactive' LIMIT 1");
        $stmt->bind_param('s', $username);
        $stmt->execute();
        $sa = $stmt->get_result()->fetch_assoc();

        if ($sa && password_verify($password, $sa['password'])) {
            if ($sa['status'] === 'hold') {
                $error = 'Your account is on hold. Please contact the Master Admin.';
            } else {
                $_SESSION['user_id'] = $sa['id'];
                $_SESSION['username'] = $sa['username'];
                $_SESSION['full_name'] = $sa['full_name'];
                $_SESSION['role'] = 'sub_admin';
                $_SESSION['unique_code'] = $sa['unique_code'];
                redirect(SITE_URL . '/admin/subadmin/dashboard.php');
            }
        } else {
            $error = 'Invalid credentials or account not found.';
        }
    }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Sub Admin Login - Cricket Exchange</title>
    <link rel="stylesheet" href="../assets/style.css">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css">
</head>
<body>
    <div class="login-bg-particles"></div>
    <div class="login-page">
        <div class="login-box">
            <div class="login-logo">
                <div class="logo-icon" style="background:linear-gradient(135deg,var(--subadmin-accent),#0369a1)">👤</div>
                <h1>CRICKET EXCHANGE</h1>
                <p>Sub Admin Portal</p>
                <?php if ($prefill_code): ?>
                <div style="margin-top:8px;padding:6px 14px;background:rgba(14,165,233,0.15);border-radius:8px;font-size:12px;color:var(--subadmin-accent);">
                    🔑 Code: <strong><?= htmlspecialchars($prefill_code) ?></strong>
                </div>
                <?php endif; ?>
            </div>

            <div class="role-selector">
                <a href="index.php" class="role-btn">🔐 Master Admin</a>
                <span class="role-btn active">👤 Sub Admin</span>
                <a href="user_login.php" class="role-btn">🙋 User</a>
            </div>

            <?php if ($error): ?>
            <div class="alert alert-error"><i class="fas fa-exclamation-circle"></i> <?= htmlspecialchars($error) ?></div>
            <?php endif; ?>

            <form method="POST" id="loginForm">
                <div class="form-group">
                    <label>Username</label>
                    <div class="input-wrapper">
                        <i class="fas fa-user input-icon"></i>
                        <input type="text" name="username" class="form-control" placeholder="Your username" required>
                    </div>
                </div>
                <div class="form-group">
                    <label>Password</label>
                    <div class="input-wrapper">
                        <i class="fas fa-lock input-icon"></i>
                        <input type="password" name="password" id="password" class="form-control" placeholder="Your password" required>
                        <button type="button" onclick="togglePass('password')" style="position:absolute;right:14px;top:50%;transform:translateY(-50%);background:none;border:none;color:var(--text-muted);cursor:pointer;font-size:16px;"><i class="fas fa-eye" id="password-eye"></i></button>
                    </div>
                </div>
                <button type="submit" class="btn btn-primary btn-full" style="background:linear-gradient(135deg,var(--subadmin-accent),#0369a1)" id="loginBtn">
                    <i class="fas fa-sign-in-alt"></i> Sub Admin Login
                </button>
            </form>

            <div style="text-align:center;margin-top:20px;font-size:12px;color:var(--text-dim);">
                Contact your Master Admin for login credentials
            </div>
        </div>
    </div>
    <script>
    function togglePass(id) {
        const input = document.getElementById(id);
        const eye = document.getElementById(id + '-eye');
        input.type = input.type === 'password' ? 'text' : 'password';
        eye.className = input.type === 'password' ? 'fas fa-eye' : 'fas fa-eye-slash';
    }
    document.getElementById('loginForm').addEventListener('submit', function() {
        const btn = document.getElementById('loginBtn');
        btn.innerHTML = '<div class="spinner"></div> Logging in...';
        btn.disabled = true;
    });
    </script>
    <style>
    .role-selector { display:flex;gap:8px;margin-bottom:28px;background:var(--bg-card2);padding:4px;border-radius:10px; }
    .role-btn { flex:1;padding:8px;text-align:center;border-radius:8px;border:none;font-size:12px;font-weight:600;cursor:pointer;transition:all 0.2s;text-decoration:none;display:block;color:var(--text-muted);background:none; }
    .role-btn.active { background:linear-gradient(135deg,var(--subadmin-accent),#0369a1);color:white; }
    </style>
</body>
</html>
