<?php
/* Brightshore Global Investment - FINAL WORKING VERSION
   Domain: brightshoreglobal.com
   Upload to: public_html/loan-application.php
*/
session_start();
error_reporting(E_ALL); ini_set('display_errors', 1);

if (empty($_SESSION['csrf_token'])) $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
$success = false; $errors = []; $debug_msg = '';

$fields = [
    'full_name'=>'','marital_status'=>'','gender'=>'','dob'=>'',
    'street_address'=>'','address_line'=>'','city'=>'','state'=>'',
    'postal_code'=>'','country'=>'','phone'=>'','email'=>'',
    'occupation'=>'','workplace'=>'','kin_name'=>'','kin_relationship'=>'',
    'kin_email'=>'','kin_phone'=>'','loan_amount'=>'','monthly_salary'=>'',
    'loan_purpose'=>'','repayment_period'=>'',
];
$labels = [
    'full_name'=>'Full Name','marital_status'=>'Marital Status','gender'=>'Gender','dob'=>'Date Of Birth',
    'street_address'=>'Street Address','address_line'=>'Apartment','city'=>'City','state'=>'State',
    'postal_code'=>'ZIP','country'=>'Country','phone'=>'Phone','email'=>'Email',
    'occupation'=>'Occupation','workplace'=>'Place of Work','kin_name'=>'Kin Full Name',
    'kin_relationship'=>'Relationship','kin_email'=>'Kin Email','kin_phone'=>'Kin Phone',
    'loan_amount'=>'Loan Amount','monthly_salary'=>'Monthly Salary','loan_purpose'=>'Purpose','repayment_period'=>'Repayment Period',
];
function e($v){return htmlspecialchars((string)$v,ENT_QUOTES,'UTF-8');}
function read_upload($key,$label,$allowed,$max,&$errors){
    if(!isset($_FILES[$key])||$_FILES[$key]['error']==4){$errors[]=$label.' required.';return null;}
    if($_FILES[$key]['error']!=0){$errors[]=$label.' upload error.';return null;}
    $finfo=new finfo(FILEINFO_MIME_TYPE); $mime=$finfo->file($_FILES[$key]['tmp_name']);
    if(!isset($allowed[$mime])){$errors[]=$label.' invalid type.';return null;}
    if($_FILES[$key]['size']>$max){$errors[]=$label.' too big.';return null;}
    return ['path'=>$_FILES[$key]['tmp_name'],'name'=>basename($_FILES[$key]['name']),'mime'=>$mime];
}

if($_SERVER['REQUEST_METHOD']==='POST'){
    if(!hash_equals($_SESSION['csrf_token'],(string)($_POST['csrf_token']??'')))$errors[]='Session expired. Refresh.';
    if(!empty($_POST['website']))$errors[]='Rejected.';
    foreach($fields as $k=>$v)$fields[$k]=trim((string)($_POST[$k]??''));
    foreach(['full_name','email','phone','country','loan_amount'] as $k) if($fields[$k]==='') $errors[]=$labels[$k].' required.';
    if($fields['email']&&!filter_var($fields['email'],FILTER_VALIDATE_EMAIL))$errors[]='Invalid email.';
    
    $passport=read_upload('passport_photo','Passport',['image/jpeg'=>1,'image/png'=>1,'image/webp'=>1],5*1024*1024,$errors);
    $idDoc=read_upload('id_document','ID Document',['image/jpeg'=>1,'image/png'=>1,'image/webp'=>1,'application/pdf'=>1],5*1024*1024,$errors);
    
    if(!$errors){
        // ===== CONFIGURE HERE - brightshoreglobal.com =====
        $SMTP_HOST = 'mail.brightshoreglobal.com'; // If fails try: brightshoreglobal.com
        $SMTP_USER = 'info@brightshoreglobal.com'; // Must exist in cPanel
        $SMTP_PASS = '@steadyconfirmation@'; // <--- PUT YOUR REAL PASSWORD HERE
        $SMTP_PORT = 465; // 465 = ssl, 587 = tls
        $SMTP_SECURE = 'ssl'; // ssl for 465, tls for 587
        $TO_EMAIL = 'info@brightshoreglobal.com';
        // ============================================

        $body="NEW LOAN APPLICATION - brightshoreglobal.com\nDate: ".date('Y-m-d H:i:s')."\nIP: ".($_SERVER['REMOTE_ADDR']??'')."\n\n";
        foreach($fields as $k=>$v) $body.=$labels[$k].": ".$v."\n";
        $body.="ID Types: ".implode(', ', (array)($_POST['identification_types']??[]))."\n";
        $subject="New Loan App - ".$fields['full_name']." - brightshoreglobal.com";

        // Load PHPMailer
        $base=__DIR__.'/PHPMailer/src/';
        if(file_exists($base.'PHPMailer.php')){
            require $base.'PHPMailer.php'; require $base.'SMTP.php'; require $base.'Exception.php';
            $mail=new PHPMailer\PHPMailer\PHPMailer(true);
            try{
                $mail->isSMTP(); $mail->Host=$SMTP_HOST; $mail->SMTPAuth=true;
                $mail->Username=$SMTP_USER; $mail->Password=$SMTP_PASS;
                $mail->SMTPSecure=$SMTP_SECURE; $mail->Port=$SMTP_PORT;
                $mail->setFrom($SMTP_USER,'BGI Website - brightshoreglobal.com');
                $mail->addAddress($TO_EMAIL);
                $mail->addReplyTo($fields['email'],$fields['full_name']);
                $mail->Subject=$subject; $mail->Body=$body;
                if($passport)$mail->addAttachment($passport['path'],'PASSPORT_'.$passport['name']);
                if($idDoc)$mail->addAttachment($idDoc['path'],'ID_'.$idDoc['name']);
                $mail->send();
                $success=true; $_SESSION['csrf_token']=bin2hex(random_bytes(32));
            }catch(Exception $ex){
                $errors[]="SMTP FAILED: ".$mail->ErrorInfo;
                $debug_msg=$mail->ErrorInfo;
            }
        }else{
            $errors[]="PHPMailer not found. Upload PHPMailer/src/ folder to public_html/PHPMailer/src/ - See instructions.";
        }
    }
}
$countryOptions=['Nigeria','United Arab Emirates','United Kingdom','United States of America (USA)','Canada','Ghana','South Africa','India','Australia','Other'];
?>
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
<title>Loan Application - brightshoreglobal.com</title>
<style>body{margin:0;background:#f4f7f9;font:16px Arial;color:#18212f}.wrap{max-width:900px;margin:30px auto;padding:0 15px}form{background:#fff;border:1px solid #ddd;border-radius:12px;padding:25px}.grid{display:grid;grid-template-columns:1fr 1fr;gap:15px}.full{grid-column:1/-1}label{font-weight:700;font-size:14px}input,select,textarea{width:100%;padding:11px;border:1px solid #ccc;border-radius:6px}button{background:#088e8e;color:#fff;border:0;padding:14px 20px;border-radius:6px;font-weight:700;width:100%}.alert{padding:12px;border-radius:6px;margin-bottom:15px}.error{background:#ffe5e5;color:#900}.success{background:#e0ffe5;color:#060}.trap{position:absolute;left:-9999px}@media(max-width:600px){.grid{grid-template-columns:1fr}}</style>
</head><body><div class="wrap">
<h1 style="text-align:center;color:#0e0e87">Brightshore Global Investment<br><small>brightshoreglobal.com</small></h1>
<?php if($success):?><div class="alert success"><h3>Application Sent Successfully to info@brightshoreglobal.com</h3><p>We received your documents. You will be contacted soon.</p></div>
<?php else:?>
<?php if($errors):?><div class="alert error"><?php foreach(array_unique($errors) as $er) echo "<div>".e($er)."</div>"; if($debug_msg) echo "<hr><small>".e($debug_msg)."</small>"; ?></div><?php endif;?>
<form method="post" enctype="multipart/form-data">
<input type="hidden" name="csrf_token" value="<?=e($_SESSION['csrf_token'])?>"><div class="trap"><input name="website"></div>
<div class="grid">
<div><label>Full Name *</label><input name="full_name" required value="<?=e($fields['full_name'])?>"></div>
<div><label>Marital Status *</label><select name="marital_status" required><option value="">Select</option><?php foreach(['Single','Married','Separated','Divorced','Others'] as $v) echo "<option ".($fields['marital_status']==$v?'selected':'').">".e($v)."</option>";?></select></div>
<div><label>Gender *</label><select name="gender" required><option value="">Select</option><option>Male</option><option>Female</option></select></div>
<div><label>DOB *</label><input name="dob" type="date" required value="<?=e($fields['dob'])?>"></div>
<div class="full"><label>Street Address *</label><input name="street_address" required value="<?=e($fields['street_address'])?>"></div>
<div><label>City</label><input name="city" value="<?=e($fields['city'])?>"></div>
<div><label>State</label><input name="state" value="<?=e($fields['state'])?>"></div>
<div><label>ZIP</label><input name="postal_code" value="<?=e($fields['postal_code'])?>"></div>
<div><label>Country *</label><select name="country" required><option value="">Select</option><?php foreach($countryOptions as $v) echo "<option ".($fields['country']==$v?'selected':'').">".e($v)."</option>";?></select></div>
<div><label>Phone *</label><input name="phone" required value="<?=e($fields['phone'])?>"></div>
<div><label>Email *</label><input name="email" type="email" required value="<?=e($fields['email'])?>"></div>
<div><label>Occupation *</label><input name="occupation" value="<?=e($fields['occupation'])?>"></div>
<div><label>Workplace *</label><input name="workplace" value="<?=e($fields['workplace'])?>"></div>
<div><label>Kin Name *</label><input name="kin_name" value="<?=e($fields['kin_name'])?>"></div>
<div><label>Kin Relationship *</label><select name="kin_relationship"><option value="">Select</option><option>Son</option><option>Daughter</option><option>Brother</option><option>Sister</option><option>Wife</option><option>Husband</option><option>Other</option></select></div>
<div><label>Kin Email</label><input name="kin_email" value="<?=e($fields['kin_email'])?>"></div>
<div><label>Kin Phone</label><input name="kin_phone" value="<?=e($fields['kin_phone'])?>"></div>
<div><label>Loan Amount *</label><input name="loan_amount" type="number" required value="<?=e($fields['loan_amount'])?>"></div>
<div><label>Monthly Salary *</label><input name="monthly_salary" value="<?=e($fields['monthly_salary'])?>"></div>
<div class="full"><label>Purpose *</label><textarea name="loan_purpose" required><?=e($fields['loan_purpose'])?></textarea></div>
<div><label>Repayment Period *</label><select name="repayment_period"><option>6 Months</option><option>12 Months</option><option>1 Year</option><option>2 Years</option><option>3 Years</option><option>5 Years</option><option>10 Years</option></select></div>
<div><label>Passport Photo *</label><input name="passport_photo" type="file" required accept="image/*"></div>
<div><label>ID Document *</label><input name="id_document" type="file" required accept="image/*,.pdf"></div>
<div class="full"><label><input type="checkbox" name="identification_types[]" value="International Passport" checked> International Passport</label> <label><input type="checkbox" name="identification_types[]" value="Driver's license"> Driver's License</label> <label><input type="checkbox" name="identification_types[]" value="State Identity Card"> State ID</label></div>
<div class="full"><label><input type="checkbox" name="terms" required> I agree to terms *</label></div>
</div><br><button type="submit">Send to info@brightshoreglobal.com</button>
</form><?php endif;?>
<p style="text-align:center;color:#888;font-size:12px;margin-top:20px">Secure form - brightshoreglobal.com - SMTP SSL</p>
</div></body></html>