{{-- resources/views/auth/login.blade.php --}}
<x-guest-layout>
    <form method="POST" action="{{ route('login') }}">
        @csrf

        <!-- Honeypot (hidden from users, bots often fill it) -->
        <input type="text" name="website_url" style="display:none">

        <!-- Timestamp (used to reject too-fast submissions) -->
        <input type="hidden" name="form_loaded_at" value="{{ time() }}">

        <!-- Email Address -->
        <div>
            <label for="email" class="block text-sm font-medium text-gray-700">Email</label>
            <input id="email" class="mt-1 block w-full border-gray-300 rounded-md shadow-sm"
                   type="email" name="email" value="{{ old('email') }}" required autofocus>
            @error('email')
                <span class="text-red-500 text-sm mt-1">{{ $message }}</span>
            @enderror
        </div>

        <!-- Password -->
        <div class="mt-4">
            <label for="password" class="block text-sm font-medium text-gray-700">Password</label>
            <input id="password" class="mt-1 block w-full border-gray-300 rounded-md shadow-sm"
                   type="password" name="password" required>
            @error('password')
                <span class="text-red-500 text-sm mt-1">{{ $message }}</span>
            @enderror
        </div>

        <!-- Remember Me -->
        <div class="block mt-4">
            <label for="remember_me" class="inline-flex items-center">
                <input id="remember_me" type="checkbox" class="rounded border-gray-300" name="remember">
                <span class="ml-2 text-sm text-gray-600">Remember me</span>
            </label>
        </div>

        <!-- Submit -->
        <div class="flex items-center justify-end mt-4">
            <button type="submit"
                    class="px-4 py-2 bg-blue-600 text-white rounded-md shadow hover:bg-blue-700">
                Log in
            </button>
        </div>
    </form>
</x-guest-layout>