<?php
session_start();
require 'config/db.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $username = $_POST['username'];
    $password = $_POST['password'];

    // Authenticate user
    $stmt = $pdo->prepare("SELECT * FROM users WHERE username = ?");
    $stmt->execute([$username]);
    $user = $stmt->fetch(PDO::FETCH_ASSOC);

    if ($user && password_verify($password, $user['password'])) {
        // Set session variables for user authentication
        $_SESSION['user_id'] = $user['user_id'];
        $_SESSION['role'] = $user['role'];

        // Retrieve district_id associated with the user's school or district
        $district_stmt = $pdo->prepare("
            SELECT district_id FROM districts WHERE district_id = ?
        ");
        $district_stmt->execute([$user['district_id']]);  // Adjust this as needed for your database structure
        $district = $district_stmt->fetch(PDO::FETCH_ASSOC);

        if ($district) {
            $_SESSION['district_id'] = $district['district_id'];  // Set district_id in session
        }

        // Redirect to the dashboard or desired page
        header('Location: dashboard.php');
        exit();
    } else {
        echo "Invalid username or password.";
    }
}
?>