<?php
/**
 * modules/blocks/edit_blocks.php
 */

// 1. STRICT SECURITY KICK-OUT
$p = $GLOBALS['my_privs'] ?? ['can_edit' => 0];
if (in_array(1, $_SESSION['all_role_ids'] ?? [])) {
    $p['can_edit'] = 1;
}

if ($p['can_edit'] == 0) {
    header("Location: index.php?s=" . encrypt_url('mod=blocks&page=list_blocks') . "&status=access_denied");
    exit;
}

$block_id = isset($_GET['id']) ? (int)$_GET['id'] : 0;

if ($block_id == 0) {
    header("Location: index.php?s=" . encrypt_url('mod=blocks&page=list_blocks'));
    exit;
}

// 2. FORM POST HANDLER
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $location_id = (int)$_POST['location_id'];
    $block_name  = $db->escape($_POST['block_name']);
    $status      = $db->escape($_POST['status']);
    $updated_by  = (int)$_SESSION['user_id'];

    // Prevent Duplicates (Excluding current block)
    $check_sql = "SELECT BLOCK_ID FROM TBL_BLOCKS WHERE LOCATION_ID = $location_id AND BLOCK_NAME = '$block_name' AND BLOCK_ID != $block_id";
    if (mysqli_num_rows($db->query($check_sql)) > 0) {
        header("Location: index.php?s=" . encrypt_url("mod=blocks&page=edit_blocks&id=$block_id") . "&status=duplicate");
        exit;
    }

    $sql = "UPDATE TBL_BLOCKS 
            SET LOCATION_ID = $location_id,
                BLOCK_NAME = '$block_name', 
                STATUS = '$status', 
                UPDATED_BY = $updated_by, 
                UPDATED_DATE = CURRENT_TIMESTAMP 
            WHERE BLOCK_ID = $block_id";
    
    if ($db->query($sql)) {
        header("Location: index.php?s=" . encrypt_url('mod=blocks&page=list_blocks') . "&status=updated");
        exit;
    }
}

// 3. FETCH EXISTING DATA
$sql = "SELECT * FROM TBL_BLOCKS WHERE BLOCK_ID = $block_id";
$result = $db->query($sql);
$data = mysqli_fetch_assoc($result);

if (!$data) {
    header("Location: index.php?s=" . encrypt_url('mod=blocks&page=list_blocks'));
    exit;
}

$loc_sql = "SELECT LOCATION_ID, LOCATION_NAME FROM TBL_LOCATIONS WHERE STATUS = 'ACTIVE' ORDER BY LOCATION_NAME ASC";
$loc_res = $db->query($loc_sql);
?>

<div class="p-3">
    <section class="content-header px-0">
        <div class="container-fluid">
            <div class="row mb-2">
                <div class="col-sm-6">
                    <h1 class="font-weight-bold text-primary"><i class="fas fa-edit mr-2"></i>Edit Block</h1>
                </div>
                <div class="col-sm-6 text-right">
                    <a href="index.php?s=<?php echo encrypt_url('mod=blocks&page=list_blocks'); ?>" class="btn btn-default shadow-sm border">
                        <i class="fas fa-arrow-left mr-1"></i> Cancel Update
                    </a>
                </div>
            </div>
        </div>
    </section>

    <section class="content px-0">
        <div class="container-fluid">
            <form action="" method="POST">
                <div class="card card-outline card-primary shadow-sm" style="border-top: 4px solid #007bff;">
                    <div class="card-body">
                        <div class="row">
                            <div class="col-md-5 form-group">
                                <label class="text-secondary">Parent Location <span class="text-danger">*</span></label>
                                <select name="location_id" class="form-control" required>
                                    <?php while($l = mysqli_fetch_assoc($loc_res)): ?>
                                        <option value="<?php echo $l['LOCATION_ID']; ?>" <?php echo ($data['LOCATION_ID'] == $l['LOCATION_ID']) ? 'selected' : ''; ?>>
                                            <?php echo htmlspecialchars($l['LOCATION_NAME']); ?>
                                        </option>
                                    <?php endwhile; ?>
                                </select>
                            </div>
                            
                            <div class="col-md-4 form-group">
                                <label class="text-secondary">Block Identifier <span class="text-danger">*</span></label>
                                <select name="block_name" class="form-control" required>
                                    <?php for($i=1; $i<=50; $i++): 
                                        $b_val = "BLOCK-$i";
                                    ?>
                                        <option value="<?php echo $b_val; ?>" <?php echo ($data['BLOCK_NAME'] == $b_val) ? 'selected' : ''; ?>>
                                            <?php echo $b_val; ?>
                                        </option>
                                    <?php endfor; ?>
                                </select>
                            </div>

                            <div class="col-md-3 form-group">
                                <label class="text-secondary">Status</label>
                                <select name="status" class="form-control">
                                    <option value="ACTIVE" <?php echo ($data['STATUS'] == 'ACTIVE') ? 'selected' : ''; ?>>ACTIVE</option>
                                    <option value="INACTIVE" <?php echo ($data['STATUS'] == 'INACTIVE') ? 'selected' : ''; ?>>INACTIVE</option>
                                </select>
                            </div>
                        </div>
                    </div>
                    <div class="card-footer bg-white text-right p-3">
                        <button type="submit" class="btn btn-primary px-5 font-weight-bold shadow-sm">
                            <i class="fas fa-sync mr-2"></i> UPDATE BLOCK
                        </button>
                    </div>
                </div>
            </form>
        </div>
    </section>
</div>