Ensemble<?= $page === 'dashboard' ? ' â€” ' . htmlspecialchars(auth

'); define('EYE_OFF_ICON', ''); require_once __DIR__ . '/db.php'; require_once __DIR__ . '/auth.php'; auth_start(); // â”€â”€ Handle logout â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€ if (isset($_GET['logout'])) { try { $pdo = db_connect(); auth_clear_remember($pdo); } catch (Exception $e) { auth_clear_remember(); // clear cookie even if DB fails } auth_logout(); header('Location: index.php'); exit; } $error = ''; $page = 'login'; // 'login', 'force_change', or 'dashboard' // â”€â”€ Cookie auto-login â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€ // If no active session but a valid remember-me cookie exists, // log the user in automatically before handling any POST. if (auth_uuid() === null) { try { $pdo = db_connect(); auth_check_remember($pdo); } catch (Exception $e) { // Cookie check failure is silent â€” fall through to login page } } // â”€â”€ Handle login form submission â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['access_uuid'])) { auth_check_csrf(); $inputUUID = trim($_POST['access_uuid']); $inputPw = $_POST['password'] ?? ''; if (!preg_match('/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/', $inputUUID)) { $error = 'That doesn\'t look like a valid Avatar UUID. It should be in the format xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.'; } elseif ($inputPw === '') { $error = 'Please enter your password.'; } else { try { $pdo = db_connect(); $stmt = $pdo->prepare('SELECT access_uuid, username FROM users WHERE access_uuid = ?'); $stmt->execute([$inputUUID]); $user = $stmt->fetch(); if (!$user) { $error = 'Avatar UUID not found. Make sure your HUD has checked in at least once.'; } else { $result = auth_verify_password($pdo, $inputUUID, $inputPw); if ($result === 'no_password') { $error = 'No password has been set yet. Make sure your HUD is online â€” it will send a temporary password automatically.'; } elseif ($result === 'wrong') { $error = 'Incorrect password. If you have forgotten it, use the Reset Password option on your HUD.'; } elseif ($result === 'force_change') { // Temp password correct â€” log in but flag force-change required auth_login($user['access_uuid'], $user['username']); auth_start(); $_SESSION['force_pw_change'] = true; header('Location: index.php'); exit; } else { // Real password correct â€” normal login auth_login($user['access_uuid'], $user['username']); if (!empty($_POST['remember_me'])) { auth_set_remember($pdo, $user['access_uuid']); } header('Location: index.php'); exit; } } } catch (Exception $e) { $error = 'A database error occurred. Please try again.'; error_log('Ensemble login error: ' . $e->getMessage()); } } } // â”€â”€ Handle force-change form submission â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['new_password'])) { auth_check_csrf(); $uuid = auth_uuid(); $newPw = $_POST['new_password'] ?? ''; $confirm = $_POST['confirm_password'] ?? ''; if ($uuid === null) { // Session lost â€” send back to login header('Location: index.php'); exit; } if ($newPw !== $confirm) { $error = 'Passwords do not match.'; } else { $strengthError = auth_check_password_strength($newPw); if ($strengthError !== '') { $error = $strengthError; } else { try { $pdo = db_connect(); auth_set_password($pdo, $uuid, $newPw); auth_notify_hud_password_set($pdo, $uuid); // Clear force-change flag â€” user is now fully logged in auth_start(); unset($_SESSION['force_pw_change']); header('Location: index.php'); exit; } catch (Exception $e) { $error = 'A database error occurred. Please try again.'; error_log('Ensemble password change error: ' . $e->getMessage()); } } } } // â”€â”€ Determine which page to show â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€ $loggedInUUID = auth_uuid(); if ($loggedInUUID !== null && auth_needs_pw_change()) { $page = 'force_change'; } elseif ($loggedInUUID !== null) { $page = 'dashboard'; $allTags = []; try { $pdo = db_connect(); $stmt = $pdo->prepare('SELECT * FROM users WHERE access_uuid = ?'); $stmt->execute([$loggedInUUID]); $userData = $stmt->fetch(); // Session valid but user deleted â€” log out if (!$userData) { auth_logout(); header('Location: index.php'); exit; } // Fetch outfits for this user, newest first $stmtOutfits = $pdo->prepare(' SELECT id, outfit_name, folder_path, attachments, has_space_warning, image_filename, created_at, tags, comments, access_level, wear_mode, base_outfits, additional_items, wear_after_remove, locked, remove_before_wear, removal_points FROM outfits WHERE user_uuid = ? ORDER BY created_at DESC '); $stmtOutfits->execute([$loggedInUUID]); $outfits = $stmtOutfits->fetchAll(); // Collect all unique tags across outfits (for the filter bar) $allTagsRaw = []; foreach ($outfits as $o) { $t = trim($o['tags'] ?? ''); if ($t !== '') { foreach (array_map('trim', explode(',', $t)) as $tag) { if ($tag !== '') $allTagsRaw[] = $tag; } } } // Case-insensitive dedup, sorted alphabetically $allTagsMap = []; foreach ($allTagsRaw as $tag) { $allTagsMap[strtolower($tag)] = $tag; } ksort($allTagsMap); $allTags = array_values($allTagsMap); } catch (Exception $e) { $error = 'Could not load your data. Please try again.'; $userData = null; $outfits = []; $allTags = []; } } // â”€â”€ Theme resolution â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€ // Discovers available themes by scanning the themes/ directory. // A valid theme is any subdirectory that contains a style.css file. // The user's saved preference is loaded from their DB row. // Falls back to 'default' if the saved theme no longer exists. function ensemble_available_themes(): array { $themes = []; $dir = __DIR__ . '/themes/'; if (!is_dir($dir)) return ['default']; foreach (scandir($dir) as $entry) { if ($entry === '.' || $entry === '..') continue; if (is_dir($dir . $entry) && file_exists($dir . $entry . '/style.css')) { $themes[] = $entry; } } sort($themes); return $themes ?: ['default']; } function ensemble_active_theme(?array $userData): string { $saved = trim($userData['theme'] ?? ''); if ($saved === '') $saved = 'default'; // Validate that the saved theme folder still exists $themeDir = __DIR__ . '/themes/' . $saved; if (!is_dir($themeDir) || !file_exists($themeDir . '/style.css')) { return 'default'; } return $saved; } // Resolve the active theme now so it's available to the HTML head $activeTheme = ensemble_active_theme($userData ?? null); $availableThemes = ensemble_available_themes(); // â”€â”€ Connection status helper â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€ function ensemble_connection_status(int $lastSeen): array { if ($lastSeen === 0) { return ['label' => 'Never connected', 'class' => 'status-offline']; } $age = time() - $lastSeen; if ($age < 180) { // < 3 min return ['label' => 'Online', 'class' => 'status-online']; } if ($age < 600) { // < 10 min return ['label' => 'Stale', 'class' => 'status-stale']; } return ['label' => 'Offline', 'class' => 'status-offline']; } function ensemble_time_ago(int $ts): string { if ($ts === 0) return 'Never'; $age = time() - $ts; if ($age < 60) return 'Just now'; if ($age < 3600) return floor($age / 60) . ' min ago'; if ($age < 86400) return floor($age / 3600) . ' hr ago'; return date('d M Y, H:i', $ts); } ?> Ensemble<?= $page === 'dashboard' ? ' â€” ' . htmlspecialchars(auth_username()) : '' ?>

Welcome back

Set your password

Outfits