{php}
/**
 * 全站密码验证组件
 */
if (!session('allkey')) {
    session('allkey', bin2hex(random_bytes(16)));
}
$csrfToken = session('allkey') ?? '';
{/php}
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover">
<link rel="stylesheet" type="text/css" href="{:staticUrl('/assets/css/style.css')}">
<link rel="stylesheet" type="text/css" href="{:staticUrl('/assets/mesg/dist/css/style.css')}">

<style>
html,
body {
    min-height: 100%;
}

body {
    margin: 0;
    background: var(--bodys);
}

.pagepass-shell {
    width: 100%;
    min-height: 100vh;
    min-height: 100svh;
    display: flex;
    align-items: center;
    justify-content: center;
    box-sizing: border-box;
    padding: max(18px, env(safe-area-inset-top)) max(16px, env(safe-area-inset-right)) max(18px, env(safe-area-inset-bottom)) max(16px, env(safe-area-inset-left));
}

.pagepass-card {
    width: min(420px, 100%);
    box-sizing: border-box;
    display: flex;
    flex-direction: column;
    gap: 14px;
    padding: clamp(18px, 5vw, 28px);
    background: var(--backbg);
    border-radius: 8px;
    background-image: repeating-linear-gradient(135deg, var(--bodys) 0, var(--bodys) 15px, transparent 0, transparent 30px);
    box-shadow: 0 14px 34px rgba(0, 0, 0, .08);
}

.pagepass-label {
    font-size: 13px;
    line-height: 1.5;
    color: var(--adgg);
}

.pagepass-form {
    display: flex;
    flex-direction: column;
    align-items: stretch;
    gap: 15px;
    width: 100%;
}

.pagepass-input {
    width: 100%;
    height: 42px;
    box-sizing: border-box;
    border: none;
    outline: none;
    background: var(--dbztlysh);
    color: var(--thetitle);
    border-bottom: 2px solid var(--thetitle);
    border-radius: 0;
    font-size: 16px;
    padding: 0 2px;
}

.pagepass-submit {
    align-self: flex-end;
    min-width: 88px;
    min-height: 40px;
    box-sizing: border-box;
    font-size: 14px;
    border: none;
    outline: none;
    border-radius: 6px;
    color: var(--thetitle);
    background: var(--backbg);
    cursor: pointer;
    padding: 9px 16px;
}

@media (max-width: 480px) {
    .pagepass-shell {
        align-items: flex-start;
        padding-top: max(84px, calc(env(safe-area-inset-top) + 56px));
    }

    .pagepass-card,
    .pagepass-submit {
        width: 100%;
    }

    .pagepass-card {
        border-radius: 6px;
    }
}
</style>

<div class="centent">
    <div class="sh-main pagepass-shell">
        <div class="pagepass-card">
            <label class="pagepass-label" for="pagepass">输入密码进入网站</label>
            <form action="/api/site-password-verify" method="post" onsubmit="return dosubmit()" id="myForm" autocomplete="off" class="pagepass-form">
                <input type="hidden" name="allkey" value="{$csrfToken}">
                <input type="password" name="pagepass" id="pagepass" class="pagepass-input" maxlength="100" autofocus required>
                <input type="submit" class="pagepass-submit" name="submit" value="确定">
            </form>
        </div>
    </div>
</div>

<script type="text/javascript" src="{:staticUrl('/assets/mesg/dist/js/sh-noytf.js')}"></script>
<script>
function pagepassPop(type, msg) {
    if (type === 'success' && typeof successpop === 'function') {
        successpop(msg);
        return;
    }
    if (typeof warnpop === 'function') {
        warnpop(msg);
        return;
    }
    alert(msg);
}

function dosubmit() {
    var evt = window.event;
    if (evt && evt.preventDefault) {
        evt.preventDefault();
    }

    var form = document.getElementById('myForm');
    var xhr = new XMLHttpRequest();
    xhr.onreadystatechange = function() {
        if (xhr.readyState === 4) {
            if (xhr.status !== 200 || xhr.responseText === '') {
                pagepassPop('warn', '未获取到数据');
                return;
            }
            var msg = '验证失败';
            var ok = false;
            try {
                var res = JSON.parse(xhr.responseText);
                if (Array.isArray(res)) {
                    msg = res[0] && res[0].msg ? res[0].msg : msg;
                    ok = res[0] && res[0].code === '200';
                } else {
                    msg = res.msg || msg;
                    ok = res.code === '200' || res.code === 200 || res.code === 0;
                }
            } catch (e) {
                msg = xhr.responseText;
                ok = msg === '密码正确' || msg === '网站未设置密码';
            }

            if (ok) {
                pagepassPop('success', msg === '验证成功' ? '密码正确' : msg);
                setTimeout(function() {
                    location.href = '/';
                }, 300);
            } else {
                pagepassPop('warn', msg);
            }
        }
    };
    xhr.open('POST', form.action, true);
    xhr.setRequestHeader('X-CSRF-Token', {:json_encode($csrfToken, JSON_UNESCAPED_UNICODE)});
    xhr.send(new FormData(form));
    return false;
}
</script>
{php}exit;{/php}