<?php
require 'auth_check.php'; // Ensure only Admin can access this
require '../config/db.php';
require_once '../includes/functions.php'; // For logger

if (isset($_GET['id'])) {
    $user_id = $_GET['id'];

    // Fetch User Details
    $stmt = $pdo->prepare("SELECT * FROM users WHERE id = ?");
    $stmt->execute([$user_id]);
    $user = $stmt->fetch();

    if ($user) {
        // LOG THE ACTION (Security)
        logActivity("Ghost Login", "Admin logged in as user: " . $user['email']);

        // SWAP SESSION
        $_SESSION['user_id'] = $user['id'];
        $_SESSION['user_name'] = $user['name'];
        $_SESSION['role'] = $user['role'];
        $_SESSION['reseller_status'] = $user['reseller_status'];
        
        // Redirect to User Dashboard
        header("Location: ../profile.php");
        exit();
    }
}
header("Location: users.php");
exit();
?>