<?php
session_start();
require_once "../db.php";

if (!isset($_SESSION['user_id']) || $_SESSION['username'] !== "admin") {
    die("Access denied.");
}

$post_id = intval($_POST['post_id'] ?? 0);

$pdo->prepare("UPDATE posts SET nsfw = 1 - nsfw WHERE id = ?")
    ->execute([$post_id]);

header("Location: ../admin/moderate.php");
exit;