<?php
require_once __DIR__ . '/../includes/bootstrap.php';
auth_require_login();
$_SESSION['csrf'] = $_SESSION['csrf'] ?? bin2hex(random_bytes(16));
?>
<h2>Verify your identity</h2>
<form action="/public/kyc_submit.php" method="post" enctype="multipart/form-data">
  <input type="hidden" name="csrf" value="<?=htmlspecialchars($_SESSION['csrf'])?>">
  <label>ID (front) <input type="file" name="id_front" accept="image/*,application/pdf" required></label><br>
  <label>ID (back)  <input type="file" name="id_back"  accept="image/*,application/pdf" required></label><br>
  <label>Selfie     <input type="file" name="selfie"   accept="image/*" required></label><br>
  <label>Proof of address (optional) <input type="file" name="poa" accept="image/*,application/pdf"></label><br>
  <button>Submit for review</button>
</form>
