Update index.html

index.html

@@ -623,6 +623,58 @@ async function doLogin() {
   const btn = $('login-btn');
   btn.disabled = true; btn.textContent = 'AUTHENTICATING...';
   
+  try {
+    const res = await fetch(`${SB_URL}/auth/v1/token?grant_type=password`, {
+      method:'POST',
+      headers:{'apikey':SB_KEY,'Content-Type':'application/json'},
+      body:JSON.stringify({email,password:pass})
+    });
+    const data = await res.json();
+    if (!res.ok) throw new Error(data.error_description || data.message || 'Login failed');
+
+    const userId = data.user?.id;
+    // FIXED: Added fallback safety so it never crashes with 'undefined split'
+    let username = "Operator";
+    if (data.user && data.user.email) {
+      username = data.user.email.split('@')[0];
+    }
+    
+    // Auto-Repair/Fetch Stats
+    const sr = await fetch(`${SB_URL}/rest/v1/player_stats?id=eq.${userId}&select=*`, {
+      headers:{'apikey':SB_KEY,'Authorization':`Bearer ${data.access_token}`}
+    });
+    const sd = await sr.json();
+    
+    if (!sd || sd.length === 0) {
+      await fetch(`${SB_URL}/rest/v1/player_stats`, {
+        method:'POST',
+        headers:{ 'apikey':SB_KEY, 'Authorization':`Bearer ${data.access_token}`, 'Content-Type':'application/json', 'Prefer':'return=minimal' },
+        body:JSON.stringify({ 
+          id: userId, username: username, kills: 0, deaths: 0, rank_points: 1000, 
+          gold: 0, level: 1, equipped_weapon: 'Pistol', equipped_armor: 'None', 
+          headshots: 0, wins: 0, losses: 0, playtime_hours: 0 
+        })
+      });
+    } else if (sd[0].username) {
+      username = sd[0].username;
+    }
+
+    authUser = { id:userId, email:data.user?.email, username, token:data.access_token };
+    
+    if (!isBotAccount(authUser.email)) {
+      localStorage.setItem('warzone_session', JSON.stringify(authUser));
+    }
+
+    $('login-email').value=''; $('login-password').value='';
+    await loadData();
+    goto('dashboard');
+  } catch(e) {
+    setAlert('login-alert','error',`⚠ ${e.message.toUpperCase()}`);
+  } finally {
+    btn.disabled=false; btn.textContent='AUTHENTICATING...';
+  }
+}
+  
   try {
     const res = await fetch(`${SB_URL}/auth/v1/token?grant_type=password`, {
       method:'POST',