<?php
session_start();
include 'db_con.php';

if (!isset($_SESSION['admin_id'])) {
    header("Location: login.php");
    exit();
} 
if (isset($_GET['logout'])) {
    session_destroy();
    header("Location: login.php");
    exit();
} 
$changePassMsg = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['change_password'])) {
    $current = $_POST['current_password'] ?? '';
    $new = $_POST['new_password'] ?? '';
    $confirm = $_POST['confirm_password'] ?? '';

    if ($new !== $confirm) {
        $changePassMsg = "New and Confirm Passwords do not match.";
    } else {
        $stmt = $conn->prepare("SELECT password FROM superadmins WHERE id = ?");
        $stmt->bind_param("i", $_SESSION['admin_id']);
        $stmt->execute();
        $stmt->bind_result($existingPassword);
        $stmt->fetch();
        $stmt->close();

        if ($existingPassword !== $current) {
            $changePassMsg = "Current password is incorrect.";
        } else {
            $stmt = $conn->prepare("UPDATE superadmins SET password = ? WHERE id = ?");
            $stmt->bind_param("si", $new, $_SESSION['admin_id']);
            if ($stmt->execute()) {
                $changePassMsg = "Password updated successfully.";
            } else {
                $changePassMsg = "Error updating password.";
            }
            $stmt->close();
        }
    }
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, viewport-fit=cover, maximum-scale=1">
    <meta name="title" content="Dashboard">
    <meta name="og:url" content="">
    <meta name="og:type" content="website">
    <title>Management Dashboard</title>
    <script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"></script>
    <script src="https://cdn.tailwindcss.com"></script>
    <link rel="stylesheet" href="assets/css/styles.css">
    <script src="assets/js/script.js"></script>
</head>

<body>
    <div class="header w-full overflow-hidden">
        <div class="flex w-full">
            <div class="left max-w-[15%] w-full flex items-center">
                <div class="logo">
                    <img src="logosheet.png" alt="" class="max-w-[70px]">
                </div>
            </div>
            <div class="right max-w-[85%] w-full flex flex-col">
                <div class="top">
                    <ul class="flex gap-6 text-[.85rem]">
                        <li class="cursor-pointer p-2">
                            <span class="text_white">Welcome</span>
                            <span class="active_text"><?= htmlspecialchars($_SESSION['admin_username']) ?></span>
                        </li>
                        <li class="cursor-pointer p-2">
                            <span class="text_white">Control Type</span>
                            <span class="active_text"><?= htmlspecialchars($_SESSION['account_type']) ?></span>
                        </li>
                        <li class="cursor-pointer p-2">
                            <a href="?logout=1" class="text_white">Logout</a>
                        </li>
                        <li class="cursor-pointer p-2">
                            <span class="text_white" onclick="document.getElementById('passwordModal').classList.remove('hidden')">Change Password</span>
                        </li>
                    </ul>
                </div>
                <div class="bottom bottom-[-10px] relative">
                    <ul id="menuList" class="flex text-[.85rem]">
                        <li class="cursor-pointer p-2 px-3" data-page="assets/pages/adminstrator.php">
                            <span class="menu_text">Adminstrator</span>
                        </li>
                        <li class="cursor-pointer p-2 px-3" data-page="assets/pages/bank_setting.php">
                            <span class="menu_text">Bank Setting</span>
                        </li>
                        <li class="cursor-pointer p-2 px-3" data-page="assets/pages/use_setting.php">
                            <span class="menu_text">Use Setting</span>
                        </li>
                        <li onclick="loadBankAndUsageOptions(), loadDataManagement()" class="cursor-pointer p-2 px-3" data-page="assets/pages/data_magt.php">
                            <span class="menu_text">Data Magt</span>
                        </li>
                        <li class="cursor-pointer p-2 px-3" data-page="assets/pages/reports.php">
                            <span class="menu_text">Reports</span>
                        </li>
                    </ul>
                </div>
            </div>
        </div>
    </div>
    <!--Header End-->

    <div class="main_container p-4" id="main">
    </div>

    <div id="passwordModal" class="fixed  inset-0 bg-black bg-opacity-40 flex items-center justify-center hidden fadeIn">
        <form method="POST" class="main_container p-6 rounded shadow-md w-full max-w-sm">
            <h3 class="text-lg font-semibold mb-4">Change Password</h3>

            <?php if ($changePassMsg): ?>
            <div class="bg-red-100 text-red-700 p-2 rounded mb-3 text-sm"><?= htmlspecialchars($changePassMsg) ?></div>
            <?php endif; ?>

            <input type="hidden" name="change_password" value="1">
            <input type="password" name="current_password" placeholder="Current Password" required class="w-full border p-2 rounded mb-3">
            <input type="password" name="new_password" placeholder="New Password" required class="w-full border p-2 rounded mb-3">
            <input type="password" name="confirm_password" placeholder="Confirm Password" required class="w-full border p-2 rounded mb-3">

            <div class="flex justify-end gap-2">
                <button type="button" onclick="document.getElementById('passwordModal').classList.add('hidden')" class="px-3 py-1 bg-gray-500 text-white rounded">Cancel</button>
                <button type="submit" class="px-3 py-1 submit_btn text-white rounded">Save</button>
            </div>
        </form>
    </div>
    <script>
document.body.addEventListener('click', () => {
    const token = localStorage.getItem("admin_token");
    if (!token) {
        window.location.href = "logout.php";
        return;
    }

    fetch("./api/checkToken.php", {
        method: "GET",
        headers: {
            "Authorization": token
        }
    })
    .then(res => {
        if (!res.ok) { 
            localStorage.removeItem("admin_token");
            localStorage.removeItem("admin_id");
            window.location.href = "logout.php";
        }
    })
    .catch(() => {
        window.location.href = "logout.php";
    });
});
</script>

    <script src="assets/js/script.js"></script>

</body>

</html>