From a4746d4842cc2c449d2acbf2c15bd6bd8f7750e2 Mon Sep 17 00:00:00 2001
From: Lizandro Guarnizo <77708265+lizandrogd@users.noreply.github.com>
Date: Thu, 16 Apr 2026 23:52:33 -0500
Subject: [PATCH] Update login.php

---
 login.php | 446 +++++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 443 insertions(+), 3 deletions(-)

diff --git a/login.php b/login.php
index bdc8c46..2725f74 100644
--- a/login.php
+++ b/login.php
@@ -1,12 +1,452 @@
 <?php
 /**
- * Sistema de Login del WhatsApp Bot Manager
- * Desarrollado por U-Site.app
- * Con protección contra ataques de fuerza bruta
+ * Login ERP — Laboratorio Ximena Caicedo
+ * Con protección contra ataques de fuerza bruta.
  */
 
 require_once 'config/config.php';
 
+if (isUserLoggedIn()) {
+    header('Location: index.php');
+    exit;
+}
+
+$error   = '';
+$success = '';
+$loginBlocked = false;
+$clientIp = $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';
+
+if (isset($_GET['logged_out']) && $_GET['logged_out'] == '1') {
+    $success = 'Sesión cerrada correctamente.';
+}
+if (isset($_GET['session_expired']) && $_GET['session_expired'] == '1') {
+    $error = 'Su sesión ha expirado por inactividad. Por favor, inicie sesión nuevamente.';
+}
+
+if (!checkLoginAttempts($clientIp)) {
+    $loginBlocked = true;
+    $error = 'Demasiados intentos de login. Inténtalo en ' . (LOGIN_LOCKOUT_TIME / 60) . ' minutos.';
+}
+
+if ($_POST && !$loginBlocked) {
+    $username = trim($_POST['username'] ?? '');
+    $password = $_POST['password'] ?? '';
+    $adminUser = authenticateUser($username, $password);
+
+    if ($adminUser) {
+        clearLoginAttempts($clientIp);
+        $_SESSION['admin_logged_in'] = true;
+        $_SESSION['admin_user']      = $adminUser;
+        $_SESSION['last_activity']   = time();
+        $_SESSION['login_ip']        = $clientIp;
+        $_SESSION['login_time']      = time();
+
+        $roleSlug = $adminUser['role'] ?? 'admin';
+        $modules  = $adminUser['modules'] ?? [];
+
+        if (!empty($adminUser['home_page'])) {
+            $safePath = filter_var($adminUser['home_page'], FILTER_SANITIZE_URL);
+            if (str_starts_with($safePath, '/') && !str_starts_with($safePath, '//')) {
+                header('Location: ' . $safePath);
+                exit;
+            }
+        }
+        if ($roleSlug === 'enfermero') {
+            header('Location: enfermero_portal.php');
+        } elseif (count($modules) === 1 && $modules[0] === 'lab_formularios') {
+            header('Location: lab_formularios.php');
+        } elseif (count($modules) === 2
+            && in_array('lab_domicilios', $modules, true)
+            && in_array('lab_ordenes',   $modules, true)) {
+            header('Location: lab_domicilios.php');
+        } else {
+            header('Location: index.php');
+        }
+        exit;
+    } else {
+        recordFailedLogin($clientIp);
+        $error = 'Usuario o contraseña incorrectos.';
+        if (!checkLoginAttempts($clientIp)) {
+            $loginBlocked = true;
+            $error = 'Demasiados intentos de login. Cuenta bloqueada por ' . (LOGIN_LOCKOUT_TIME / 60) . ' minutos.';
+        }
+    }
+}
+
+// ── Cargar configuración de la empresa para el branding ────────────────────
+$cfg = [];
+try {
+    $db   = Database::getInstance();
+    $rows = $db->fetchAll('SELECT clave, valor FROM lab_config ORDER BY clave');
+    foreach ($rows as $r) {
+        $cfg[$r['clave']] = $r['valor'];
+    }
+} catch (Exception $e) {
+    // BD no disponible: continuar con defaults
+}
+
+$empresa  = htmlspecialchars($cfg['empresa_nombre']    ?? 'Laboratorio Clínico', ENT_QUOTES, 'UTF-8');
+$subtitulo= htmlspecialchars($cfg['empresa_subtitulo'] ?? 'Sistema de Gestión ERP',  ENT_QUOTES, 'UTF-8');
+$color    = preg_match('/^#[0-9a-fA-F]{3,8}$/', $cfg['doc_color'] ?? '') ? $cfg['doc_color'] : '#1565c0';
+$logo     = $cfg['doc_logo_base64'] ?? '';
+
+// Calcular color derivado más oscuro para el gradiente
+function adjustColor(string $hex, int $amount): string {
+    $hex = ltrim($hex, '#');
+    $r   = max(0, min(255, hexdec(substr($hex, 0, 2)) + $amount));
+    $g   = max(0, min(255, hexdec(substr($hex, 2, 2)) + $amount));
+    $b   = max(0, min(255, hexdec(substr($hex, 4, 2)) + $amount));
+    return sprintf('#%02x%02x%02x', $r, $g, $b);
+}
+$colorDark = adjustColor($color, -40);
+?>
+<!DOCTYPE html>
+<html lang="es">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Iniciar Sesión — <?= $empresa ?></title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css" rel="stylesheet">
+    <style>
+        :root {
+            --brand:      <?= htmlspecialchars($color,     ENT_QUOTES, 'UTF-8') ?>;
+            --brand-dark: <?= htmlspecialchars($colorDark, ENT_QUOTES, 'UTF-8') ?>;
+        }
+
+        * { box-sizing: border-box; }
+
+        body {
+            margin: 0;
+            min-height: 100vh;
+            font-family: 'Segoe UI', system-ui, sans-serif;
+            display: flex;
+            overflow: hidden;
+        }
+
+        /* ── Panel izquierdo — branding ─────────────────────── */
+        .brand-panel {
+            flex: 1;
+            background: linear-gradient(145deg, var(--brand-dark) 0%, var(--brand) 60%, color-mix(in srgb, var(--brand) 70%, #fff) 100%);
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            justify-content: center;
+            padding: 3rem 2.5rem;
+            position: relative;
+            overflow: hidden;
+        }
+
+        /* Círculos decorativos animados */
+        .brand-panel::before,
+        .brand-panel::after {
+            content: '';
+            position: absolute;
+            border-radius: 50%;
+            background: rgba(255,255,255,0.07);
+            animation: float 8s ease-in-out infinite;
+        }
+        .brand-panel::before {
+            width: 420px; height: 420px;
+            top: -120px; right: -100px;
+            animation-delay: 0s;
+        }
+        .brand-panel::after {
+            width: 280px; height: 280px;
+            bottom: -80px; left: -60px;
+            animation-delay: 3.5s;
+        }
+
+        @keyframes float {
+            0%, 100% { transform: translateY(0) scale(1); }
+            50%       { transform: translateY(-20px) scale(1.04); }
+        }
+
+        .brand-logo {
+            max-height: 90px;
+            max-width: 200px;
+            object-fit: contain;
+            filter: drop-shadow(0 4px 16px rgba(0,0,0,0.18));
+            margin-bottom: 1.6rem;
+            animation: logoIn 0.7s ease both;
+        }
+        @keyframes logoIn {
+            from { opacity: 0; transform: translateY(-20px); }
+            to   { opacity: 1; transform: translateY(0); }
+        }
+
+        .brand-icon-fallback {
+            width: 90px; height: 90px;
+            border-radius: 22px;
+            background: rgba(255,255,255,0.18);
+            backdrop-filter: blur(6px);
+            display: flex; align-items: center; justify-content: center;
+            margin-bottom: 1.6rem;
+            font-size: 2.6rem;
+            color: #fff;
+            animation: logoIn 0.7s ease both;
+        }
+
+        .brand-name {
+            font-size: 1.7rem;
+            font-weight: 800;
+            color: #fff;
+            text-align: center;
+            line-height: 1.2;
+            letter-spacing: -0.01em;
+            text-shadow: 0 2px 10px rgba(0,0,0,0.2);
+            animation: slideUp 0.6s 0.1s ease both;
+        }
+        .brand-sub {
+            font-size: 1rem;
+            color: rgba(255,255,255,0.78);
+            text-align: center;
+            margin-top: 0.5rem;
+            animation: slideUp 0.6s 0.2s ease both;
+        }
+        .brand-badges {
+            display: flex;
+            gap: 0.6rem;
+            flex-wrap: wrap;
+            justify-content: center;
+            margin-top: 2.5rem;
+            animation: slideUp 0.6s 0.35s ease both;
+        }
+        .brand-badge {
+            background: rgba(255,255,255,0.15);
+            backdrop-filter: blur(4px);
+            color: #fff;
+            border: 1px solid rgba(255,255,255,0.25);
+            padding: 5px 14px;
+            border-radius: 100px;
+            font-size: 0.78rem;
+            font-weight: 500;
+        }
+
+        @keyframes slideUp {
+            from { opacity: 0; transform: translateY(16px); }
+            to   { opacity: 1; transform: translateY(0); }
+        }
+
+        /* ── Panel derecho — formulario ─────────────────────── */
+        .form-panel {
+            width: 420px;
+            min-width: 340px;
+            background: #fff;
+            display: flex;
+            flex-direction: column;
+            justify-content: center;
+            padding: 3rem 2.6rem;
+            box-shadow: -6px 0 40px rgba(0,0,0,0.10);
+            position: relative;
+            animation: slideIn 0.5s ease both;
+        }
+
+        @keyframes slideIn {
+            from { opacity: 0; transform: translateX(30px); }
+            to   { opacity: 1; transform: translateX(0); }
+        }
+
+        .form-label {
+            font-size: 0.87rem;
+            font-weight: 600;
+            color: #374151;
+        }
+        .form-control {
+            padding: 0.72rem 1rem;
+            border-radius: 10px;
+            border: 1.5px solid #e5e7eb;
+            font-size: 0.95rem;
+            transition: border-color .2s, box-shadow .2s;
+        }
+        .form-control:focus {
+            border-color: var(--brand);
+            box-shadow: 0 0 0 3px color-mix(in srgb, var(--brand) 20%, transparent);
+            outline: none;
+        }
+        .input-group .form-control { border-right: none; border-radius: 10px 0 0 10px; }
+        .input-group .btn-eye {
+            border: 1.5px solid #e5e7eb;
+            border-left: none;
+            background: #fff;
+            border-radius: 0 10px 10px 0;
+            color: #6b7280;
+            padding: 0 14px;
+            transition: color .2s;
+        }
+        .input-group .btn-eye:hover { color: var(--brand); }
+
+        .btn-login {
+            background: linear-gradient(135deg, var(--brand), var(--brand-dark));
+            border: none;
+            color: #fff;
+            width: 100%;
+            padding: 0.82rem;
+            border-radius: 12px;
+            font-weight: 700;
+            font-size: 1rem;
+            letter-spacing: 0.02em;
+            transition: transform .18s, box-shadow .18s;
+            position: relative;
+            overflow: hidden;
+        }
+        .btn-login::after {
+            content: '';
+            position: absolute;
+            inset: 0;
+            background: rgba(255,255,255,0);
+            transition: background .2s;
+        }
+        .btn-login:hover:not(:disabled) {
+            transform: translateY(-2px);
+            box-shadow: 0 8px 28px color-mix(in srgb, var(--brand) 45%, transparent);
+        }
+        .btn-login:hover:not(:disabled)::after { background: rgba(255,255,255,0.08); }
+        .btn-login:disabled { opacity: 0.65; cursor: not-allowed; }
+
+        .form-title {
+            font-size: 1.5rem;
+            font-weight: 800;
+            color: #111827;
+            margin-bottom: 0.2rem;
+        }
+        .form-subtitle {
+            font-size: 0.88rem;
+            color: #6b7280;
+            margin-bottom: 2rem;
+        }
+
+        .dev-footer {
+            position: absolute;
+            bottom: 1rem;
+            left: 0; right: 0;
+            text-align: center;
+            font-size: 0.75rem;
+            color: #d1d5db;
+        }
+        .dev-footer a { color: #9ca3af; text-decoration: none; }
+        .dev-footer a:hover { color: var(--brand); }
+
+        /* Mobile */
+        @media (max-width: 700px) {
+            body { flex-direction: column; overflow: auto; }
+            .brand-panel { flex: none; padding: 2.5rem 1.5rem 2rem; min-height: 220px; }
+            .brand-panel::before { width: 200px; height: 200px; }
+            .brand-panel::after  { width: 150px; height: 150px; }
+            .brand-name  { font-size: 1.3rem; }
+            .form-panel  { width: 100%; min-width: 0; box-shadow: none; padding: 2rem 1.5rem 3.5rem; }
+        }
+    </style>
+</head>
+<body>
+
+<!-- ══ Panel izquierdo — branding ═══════════════════════════════════════ -->
+<div class="brand-panel">
+    <?php if ($logo): ?>
+    <img src="<?= htmlspecialchars($logo, ENT_QUOTES, 'UTF-8') ?>" alt="Logo" class="brand-logo">
+    <?php else: ?>
+    <div class="brand-icon-fallback">
+        <i class="fas fa-flask"></i>
+    </div>
+    <?php endif; ?>
+
+    <div class="brand-name"><?= $empresa ?></div>
+    <div class="brand-sub"><?= $subtitulo ?></div>
+
+    <div class="brand-badges">
+        <span class="brand-badge"><i class="fas fa-vials me-1"></i>Análisis Clínicos</span>
+        <span class="brand-badge"><i class="fas fa-house-medical me-1"></i>Domicilios</span>
+        <span class="brand-badge"><i class="fas fa-file-invoice me-1"></i>Documentos PDF</span>
+        <span class="brand-badge"><i class="fas fa-chart-bar me-1"></i>Reportes</span>
+    </div>
+</div>
+
+<!-- ══ Panel derecho — formulario ═══════════════════════════════════════ -->
+<div class="form-panel">
+    <p class="form-title">Bienvenido</p>
+    <p class="form-subtitle">Inicia sesión en el sistema ERP</p>
+
+    <?php if ($loginBlocked): ?>
+    <div class="alert alert-danger d-flex align-items-center gap-2 mb-4" role="alert">
+        <i class="fas fa-ban fa-lg"></i>
+        <div><?= htmlspecialchars($error, ENT_QUOTES, 'UTF-8') ?></div>
+    </div>
+    <?php endif; ?>
+
+    <?php if ($success): ?>
+    <div class="alert alert-success d-flex align-items-center gap-2 mb-4">
+        <i class="fas fa-check-circle"></i>
+        <div><?= htmlspecialchars($success, ENT_QUOTES, 'UTF-8') ?></div>
+    </div>
+    <?php endif; ?>
+
+    <?php if ($error && !$loginBlocked): ?>
+    <div class="alert alert-danger d-flex align-items-center gap-2 mb-4">
+        <i class="fas fa-exclamation-triangle"></i>
+        <div><?= htmlspecialchars($error, ENT_QUOTES, 'UTF-8') ?></div>
+    </div>
+    <?php endif; ?>
+
+    <form method="POST" id="loginForm" autocomplete="on">
+        <div class="mb-3">
+            <label for="username" class="form-label">
+                <i class="fas fa-user me-1" style="color:var(--brand)"></i> Usuario
+            </label>
+            <input type="text" class="form-control" id="username" name="username"
+                   required <?= $loginBlocked ? 'disabled' : '' ?>
+                   placeholder="Tu usuario"
+                   value="<?= htmlspecialchars($_POST['username'] ?? '', ENT_QUOTES, 'UTF-8') ?>"
+                   autofocus>
+        </div>
+
+        <div class="mb-4">
+            <label for="password" class="form-label">
+                <i class="fas fa-lock me-1" style="color:var(--brand)"></i> Contraseña
+            </label>
+            <div class="input-group">
+                <input type="password" class="form-control" id="password" name="password"
+                       required <?= $loginBlocked ? 'disabled' : '' ?>
+                       placeholder="Tu contraseña">
+                <button class="btn-eye" type="button" id="togglePwd" <?= $loginBlocked ? 'disabled' : '' ?>>
+                    <i class="fas fa-eye"></i>
+                </button>
+            </div>
+        </div>
+
+        <button type="submit" class="btn-login" <?= $loginBlocked ? 'disabled' : '' ?>>
+            <?php if ($loginBlocked): ?>
+                <i class="fas fa-ban me-2"></i>Acceso bloqueado
+            <?php else: ?>
+                <i class="fas fa-arrow-right-to-bracket me-2"></i>Iniciar sesión
+            <?php endif; ?>
+        </button>
+    </form>
+
+    <div class="dev-footer">
+        Desarrollado por <a href="https://u-site.app" target="_blank" rel="noopener">usite.app</a>
+    </div>
+</div>
+
+<script>
+    document.getElementById('togglePwd').addEventListener('click', function () {
+        const pwd  = document.getElementById('password');
+        const icon = this.querySelector('i');
+        if (pwd.type === 'password') {
+            pwd.type = 'text';
+            icon.classList.replace('fa-eye', 'fa-eye-slash');
+        } else {
+            pwd.type = 'password';
+            icon.classList.replace('fa-eye-slash', 'fa-eye');
+        }
+    });
+    <?php if ($loginBlocked): ?>
+    document.getElementById('loginForm').addEventListener('submit', e => e.preventDefault());
+    <?php endif; ?>
+</script>
+</body>
+</html>
+
+
 // Con Docker, la instalación siempre está completada
 // El archivo .installation_completed se crea automáticamente o no es necesario