xamxam/app/templates/admin/login.php

<main id="main-content">
    <div class="admin-login-wrap">
        <div class="admin-login-box">
            <h2>Administration</h2>
            <?php if ($error): ?>
                <p class="toast" role="alert" data-type="error">⚠ <?= htmlspecialchars($error) ?></p>
            <?php endif; ?>
            <form method="post" action="/admin/login.php" class="admin-form">
                <div>
                    <label for="password">Mot de passe</label>
                    <input type="password" id="password" name="password" required autofocus>
                </div>
                <div class="admin-form-footer">
                    <button type="submit" class="btn btn--primary">Se connecter</button>
                </div>
            </form>

            <form method="post" action="/admin/request-reset.php" class="admin-form" style="margin-top:var(--space-s)">
                <input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token'] ?? '') ?>">
                <button type="submit" class="btn btn--muted">Mot de passe oublié ?</button>
            </form>
        </div>
    </div>
</main>