<?php
session_start();
require_once "config.php";

// Must be logged in
if (!isset($_SESSION['user_id'])) {
    header("Location: login.php");
    exit;
}

$user_id = (int)$_SESSION['user_id'];

// Check admin status
$stmt = $db->prepare("SELECT is_admin FROM users WHERE id = ?");
$stmt->bind_param("i", $user_id);
$stmt->execute();
$stmt->bind_result($is_admin);
$stmt->fetch();
$stmt->close();

if ($is_admin != 1) {
    echo "Access denied.";
    exit;
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Admin Panel</title>
<script src="https://cdn.tailwindcss.com"></script>
</head>

<body class="bg-gray-900 text-white min-h-screen p-6">

<h1 class="text-3xl font-bold mb-6 text-pink-400">Admin Panel</h1>

<div class="grid grid-cols-1 md:grid-cols-2 gap-6">

    <!-- Disable Image -->
    <div class="bg-gray-800 p-6 rounded-xl border border-red-500/40">
        <h2 class="text-xl font-bold mb-3 text-red-400">Disable Image</h2>
        <input id="disable_id" type="number" placeholder="Image ID"
               class="w-full px-3 py-2 rounded bg-gray-700 border border-gray-600 mb-3">
        <button onclick="disableImage()"
                class="w-full py-2 bg-red-600 hover:bg-red-500 rounded font-bold">
            Disable
        </button>
    </div>

    <!-- Delete Image -->
    <div class="bg-gray-800 p-6 rounded-xl border border-red-500/40">
        <h2 class="text-xl font-bold mb-3 text-red-400">Delete Image</h2>
        <input id="delete_id" type="number" placeholder="Image ID"
               class="w-full px-3 py-2 rounded bg-gray-700 border border-gray-600 mb-3">
        <button onclick="deleteImage()"
                class="w-full py-2 bg-red-600 hover:bg-red-500 rounded font-bold">
            Delete
        </button>
    </div>

    <!-- Edit Age -->
    <div class="bg-gray-800 p-6 rounded-xl border border-yellow-500/40">
        <h2 class="text-xl font-bold mb-3 text-yellow-400">Edit Age (Days)</h2>
        <input id="age_id" type="number" placeholder="Image ID"
               class="w-full px-3 py-2 rounded bg-gray-700 border border-gray-600 mb-3">
        <input id="age_days" type="number" placeholder="New Age (days)"
               class="w-full px-3 py-2 rounded bg-gray-700 border border-gray-600 mb-3">
        <button onclick="editAge()"
                class="w-full py-2 bg-yellow-600 hover:bg-yellow-500 rounded font-bold">
            Update Age
        </button>
    </div>

    <!-- Ban User -->
    <div class="bg-gray-800 p-6 rounded-xl border border-purple-500/40">
        <h2 class="text-xl font-bold mb-3 text-purple-400">Ban User</h2>
        <input id="ban_user" type="number" placeholder="User ID"
               class="w-full px-3 py-2 rounded bg-gray-700 border border-gray-600 mb-3">
        <input id="ban_reason" type="text" placeholder="Reason"
               class="w-full px-3 py-2 rounded bg-gray-700 border border-gray-600 mb-3">
        <button onclick="banUser()"
                class="w-full py-2 bg-purple-600 hover:bg-purple-500 rounded font-bold">
            Ban User
        </button>
    </div>

</div>

<script>
function disableImage() {
    const id = document.getElementById("disable_id").value;
    fetch(`api/admin/disable_image.php?id=${id}`)
        .then(r => r.text())
        .then(alert);
}

function deleteImage() {
    const id = document.getElementById("delete_id").value;
    fetch(`api/admin/delete_image.php?id=${id}`)
        .then(r => r.text())
        .then(alert);
}

function editAge() {
    const id = document.getElementById("age_id").value;
    const days = document.getElementById("age_days").value;
    fetch(`api/admin/edit_age.php?id=${id}&days=${days}`)
        .then(r => r.text())
        .then(alert);
}

function banUser() {
    const id = document.getElementById("ban_user").value;
    const reason = document.getElementById("ban_reason").value;
    fetch(`api/admin/ban.php?id=${id}&reason=${encodeURIComponent(reason)}`)
        .then(r => r.text())
        .then(alert);
}
</script>

</body>
</html>