<?php
session_start();
if (!isset($_SESSION['admin_logged_in'])) { header("Location: login.php"); exit(); }
include '../db_connect.php';

$msg = "";

// 1. Handle Popup Update
if (isset($_POST['update_popup'])) {
    $text = $conn->real_escape_string($_POST['popup_message']);
    $active = isset($_POST['popup_active']) ? '1' : '0';
    
    $conn->query("UPDATE settings SET setting_value='$text' WHERE setting_key='popup_message'");
    $conn->query("UPDATE settings SET setting_value='$active' WHERE setting_key='popup_active'");
    $msg = "Announcement Updated!";
}

// 2. Handle Admin Password Change
if (isset($_POST['change_admin_pass'])) {
    $new_pass = $_POST['new_password'];
    $hash = password_hash($new_pass, PASSWORD_DEFAULT);
    $user = 'admin'; 
    
    $conn->query("UPDATE admins SET password_hash='$hash' WHERE username='$user'");
    $msg = "Main Admin Password Changed!";
}

// 3. Handle Staff/Doctor Password Change
if (isset($_POST['change_staff_pass'])) {
    $target_user = $_POST['staff_user']; // 'reception', 'doctor', or 'dr_anita'
    $new_pass = $_POST['staff_password']; 
    
    // Update the specific user based on the dropdown selection
    $conn->query("UPDATE staff_users SET password='$new_pass' WHERE username='$target_user'");
    $msg = "Password for " . ucfirst($target_user) . " Updated Successfully!";
}

// Fetch current settings
$popup_text = $conn->query("SELECT setting_value FROM settings WHERE setting_key='popup_message'")->fetch_object()->setting_value;
$popup_active = $conn->query("SELECT setting_value FROM settings WHERE setting_key='popup_active'")->fetch_object()->setting_value;
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <title>Settings | Admin</title>
    <script src="https://cdn.tailwindcss.com"></script>
</head>
<body class="bg-gray-50 p-6">
    <nav class="mb-6 flex gap-4">
        <a href="dashboard.php" class="text-blue-600 font-bold">← Back to Dashboard</a>
    </nav>

    <h1 class="text-2xl font-bold mb-6 text-gray-700">System Settings</h1>
    <?php if($msg) echo "<p class='bg-green-100 text-green-700 p-3 rounded mb-4 border border-green-200'>$msg</p>"; ?>

    <div class="grid md:grid-cols-2 gap-8">
        
        <div class="bg-white p-6 rounded shadow-md border-t-4 border-purple-600 h-fit">
            <h2 class="text-xl font-bold mb-4">📢 Website Announcement</h2>
            <form method="POST">
                <div class="mb-4">
                    <label class="block text-gray-600 mb-2">Popup Message</label>
                    <textarea name="popup_message" rows="3" class="w-full border p-2 rounded"><?php echo $popup_text; ?></textarea>
                </div>
                <div class="mb-4 flex items-center">
                    <input type="checkbox" name="popup_active" id="active" class="w-5 h-5 text-purple-600" <?php if($popup_active == '1') echo 'checked'; ?>>
                    <label for="active" class="ml-2 text-gray-700 font-bold">Show Popup on Website?</label>
                </div>
                <button type="submit" name="update_popup" class="bg-purple-600 text-white px-4 py-2 rounded hover:bg-purple-700 w-full">Save Announcement</button>
            </form>
        </div>

        <div class="space-y-8">
            <div class="bg-white p-6 rounded shadow-md border-t-4 border-red-600">
                <h2 class="text-xl font-bold mb-4">🔐 Main Admin Password</h2>
                <p class="text-xs text-gray-500 mb-3">Change the password for THIS panel.</p>
                <form method="POST">
                    <div class="mb-4">
                        <input type="password" name="new_password" required class="w-full border p-2 rounded" placeholder="New Admin Password">
                    </div>
                    <button type="submit" name="change_admin_pass" class="bg-red-600 text-white px-4 py-2 rounded hover:bg-red-700 w-full">Update Admin Password</button>
                </form>
            </div>

            <div class="bg-white p-6 rounded shadow-md border-t-4 border-blue-600">
                <h2 class="text-xl font-bold mb-4">🏥 Team Passwords</h2>
                <p class="text-xs text-gray-500 mb-3">Reset login for Doctor or Reception.</p>
                <form method="POST">
                    <div class="flex gap-2 mb-4">
                        <div class="w-1/2">
                            <label class="block text-xs font-bold text-gray-600 mb-1">Select User</label>
                            <select name="staff_user" class="w-full border p-2 rounded bg-gray-50">
                                <option value="reception">Receptionist</option>
                                <option value="doctor">Dr. Gajanan (Surgeon)</option>
                                <option value="dr_anita">Dr. Anita (Skin)</option> 
                            </select>
                        </div>
                        <div class="w-1/2">
                            <label class="block text-xs font-bold text-gray-600 mb-1">New Password</label>
                            <input type="text" name="staff_password" required class="w-full border p-2 rounded" placeholder="Enter new pass">
                        </div>
                    </div>
                    <button type="submit" name="change_staff_pass" class="bg-blue-600 text-white px-4 py-2 rounded hover:bg-blue-700 w-full">Update Team Password</button>
                </form>
            </div>
        </div>

    </div>
</body>
</html>