View Code - 20260722

<?php
require_once __DIR__ . '/../modules/auth/page_acl.php';

$ctx = page_require_access('karigar_login'); // public allow

$pdo = $ctx['pdo'];

$msg = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$mobile = trim($_POST['mobile'] ?? '');
    $password = $_POST['password'] ?? '';

$stmt = $pdo->prepare("
        SELECT *
        FROM loom_karigar_master
        WHERE mobile = ?
        AND is_active = 1
        LIMIT 1
    ");
    $stmt->execute([$mobile]);
    $user = $stmt->fetch(PDO::FETCH_ASSOC);

$storedPassword = (string)($user['password'] ?? '');
    $passwordOk = false;
    if ($user) {
        if (function_exists('mm_pw_verify')) {
            $passwordOk = mm_pw_verify($password, $storedPassword);
        } else {
            $passwordOk = password_verify($password, $storedPassword) || hash_equals($storedPassword, $password);
        }
    }

if ($user && $passwordOk) {

$_SESSION['user'] = [
            'id' => $user['id'],
            'name' => $user['karigar_name'],
            'role' => 'karigar',
            'company_id' => $user['company_id']
        ];

header("Location: /erp/karigar/dashboard.php");
        exit;

} else {
        $msg = "Invalid mobile or password";
    }
}

// Karigar login uses a simplified header without main menu
$hide_main_menu = true;
require_once __DIR__ . '/../partials/header.php';
?>

<div class="container mt-5">
    <div class="card p-4 col-md-4 mx-auto">
        <h4 class="mb-3">Karigar Login</h4>

<?php if ($msg): ?>
            <div class="alert alert-danger"><?= $msg ?></div>
        <?php endif; ?>

<button class="btn btn-primary w-100">Login</button>
        </form>
    </div>
</div>

<?php require_once __DIR__ . '/../partials/footer.php'; ?>