<?php
include 'auth.php';
require_permission('offers_delete');
include '../includes/db.php';

if (isset($_GET['id'])) {
    $id = $_GET['id'];

    // Get image filename
    $stmt_select = $conn->prepare("SELECT image FROM offers WHERE id = ?");
    $stmt_select->bind_param("i", $id);
    $stmt_select->execute();
    $result = $stmt_select->get_result();
    
    if ($result->num_rows === 1) {
        $offer = $result->fetch_assoc();
        $image_to_delete = $offer['image'];

        // Delete DB record
        $stmt_delete = $conn->prepare("DELETE FROM offers WHERE id = ?");
        $stmt_delete->bind_param("i", $id);

        if ($stmt_delete->execute()) {
            // Delete image file
            if (!empty($image_to_delete) && file_exists('../uploads/offers/' . $image_to_delete)) {
                unlink('../uploads/offers/' . $image_to_delete);
            }
            header("Location: offers.php?success=تم حذف العرض بنجاح");
        } else {
            header("Location: offers.php?error=حدث خطأ أثناء الحذف");
        }
        $stmt_delete->close();
    } else {
        header("Location: offers.php?error=لم يتم العثور على العرض");
    }
    $stmt_select->close();
    $conn->close();
} else {
    header("Location: offers.php");
    exit();
}
?>