<?php
session_start();
if (!isset($_SESSION['doctor_logged_in'])) { header("Location: login.php"); exit(); }
include '../db_connect.php';

// Handle Approve
if (isset($_GET['approve'])) {
    $phone = $conn->real_escape_string($_GET['approve']);
    $conn->query("UPDATE portal_access SET status='Approved' WHERE phone='$phone'");
    header("Location: approve_access.php?msg=approved");
}

// Handle Reject
if (isset($_GET['reject'])) {
    $phone = $conn->real_escape_string($_GET['reject']);
    $conn->query("DELETE FROM portal_access WHERE phone='$phone'");
    header("Location: approve_access.php?msg=rejected");
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <title>Portal Access Requests</title>
    <script src="https://cdn.tailwindcss.com"></script>
</head>
<body class="bg-gray-100 min-h-screen p-6">

    <nav class="flex justify-between items-center mb-6">
        <div class="flex items-center gap-2">
            <a href="dashboard.php" class="bg-gray-600 text-white px-3 py-1 rounded text-sm">← Dashboard</a>
            <h1 class="text-2xl font-bold text-teal-800">Portal Access Requests</h1>
        </div>
    </nav>

    <div class="grid md:grid-cols-2 gap-6">
        
        <div class="bg-white rounded shadow-md border-t-4 border-orange-500">
            <h2 class="text-lg font-bold p-4 border-b bg-orange-50 text-orange-800">⏳ Pending Requests</h2>
            <div class="p-4">
                <?php
                $sql = "SELECT * FROM portal_access WHERE status='Pending' ORDER BY id DESC";
                $res = $conn->query($sql);
                
                if($res->num_rows > 0) {
                    while($row = $res->fetch_assoc()) {
                        echo '<div class="flex justify-between items-center border-b py-3 last:border-0">';
                        echo '<div>
                                <p class="font-bold text-lg">'.$row['phone'].'</p>
                                <p class="text-xs text-gray-500">Requested: '.date('d M, h:i A', strtotime($row['requested_at'])).'</p>
                              </div>';
                        echo '<div class="flex gap-2">
                                <a href="approve_access.php?approve='.$row['phone'].'" class="bg-green-600 text-white px-4 py-2 rounded font-bold hover:bg-green-700 text-sm">Allow</a>
                                <a href="approve_access.php?reject='.$row['phone'].'" class="bg-red-100 text-red-600 px-3 py-2 rounded font-bold hover:bg-red-200 text-sm">Deny</a>
                              </div>';
                        echo '</div>';
                    }
                } else {
                    echo '<p class="text-gray-400 text-sm text-center py-4">No pending requests.</p>';
                }
                ?>
            </div>
        </div>

        <div class="bg-white rounded shadow-md border-t-4 border-green-500">
            <h2 class="text-lg font-bold p-4 border-b bg-green-50 text-green-800">✅ Approved Numbers</h2>
            <div class="p-4">
                <?php
                $sql = "SELECT * FROM portal_access WHERE status='Approved' ORDER BY id DESC LIMIT 10";
                $res = $conn->query($sql);
                
                if($res->num_rows > 0) {
                    while($row = $res->fetch_assoc()) {
                        echo '<div class="flex justify-between items-center border-b py-2 last:border-0">';
                        echo '<p class="font-bold text-gray-700">'.$row['phone'].'</p>';
                        echo '<span class="bg-green-100 text-green-700 px-2 py-1 rounded text-xs font-bold">Active</span>';
                        echo '</div>';
                    }
                } else {
                    echo '<p class="text-gray-400 text-sm text-center">No active users.</p>';
                }
                ?>
            </div>
        </div>

    </div>
</body>
</html>