<?php
header('Content-Type: application/json; charset=UTF-8');
require_once 'db_connect.php';

if (session_status() === PHP_SESSION_NONE) {
    session_start();
}

$data = json_decode(file_get_contents('php://input'), true);
$username = trim($data['username'] ?? '');
$password = trim($data['password'] ?? '');

if (empty($username) || empty($password)) {
    echo json_encode(['status' => 'error', 'message' => 'Username dan password wajib diisi']);
    exit;
}

// Cari user di database
$sql = "SELECT u.*, ri.nama as nama_ibadah 
        FROM users u 
        LEFT JOIN rumah_ibadah ri ON u.ibadah_id = ri.id 
        WHERE u.username = ?";
$stmt = $conn->prepare($sql);
$stmt->bind_param('s', $username);
$stmt->execute();
$result = $stmt->get_result();

if ($result->num_rows === 1) {
    $user = $result->fetch_assoc();
    // Verifikasi password
    if (password_verify($password, $user['password'])) {
        $_SESSION['user_id']     = $user['id'];
        $_SESSION['username']    = $user['username'];
        $_SESSION['role']        = $user['role'];
        $_SESSION['ibadah_id']   = $user['ibadah_id'];
        $_SESSION['nama_ibadah'] = $user['nama_ibadah'];
        
        echo json_encode([
            'status' => 'success',
            'message' => 'Login berhasil',
            'data' => [
                'id' => intval($user['id']),
                'username' => $user['username'],
                'role' => $user['role'],
                'ibadah_id' => $user['ibadah_id'] ? intval($user['ibadah_id']) : null,
                'nama_ibadah' => $user['nama_ibadah']
            ]
        ]);
        exit;
    }
}

echo json_encode(['status' => 'error', 'message' => 'Username atau password salah']);
$conn->close();
?>