<?php
include 'auth.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    if (empty($_POST['id'])) {
        require_permission('slider_add');
    } else {
        require_permission('slider_edit');
    }
    $id = $_POST['id'];
    $title = $_POST['title'];
    $subtitle = $_POST['subtitle'];
    $active = isset($_POST['active']) ? 1 : 0;
    $car_id = !empty($_POST['car_id']) ? intval($_POST['car_id']) : null;
    $current_image = $_POST['current_image'] ?? '';
    $image_name = $current_image;

    // Image Upload
    if (isset($_FILES['image']) && $_FILES['image']['error'] == 0) {
        $upload_dir = '../uploads/slider/';
        $image_name = uniqid() . '-' . basename($_FILES['image']['name']);
        $target_file = $upload_dir . $image_name;
        
        if (move_uploaded_file($_FILES['image']['tmp_name'], $target_file)) {
            if (!empty($current_image) && file_exists($upload_dir . $current_image)) {
                unlink($upload_dir . $current_image);
            }
        } else {
            header("Location: slider.php?error=Failed to upload image");
            exit();
        }
    }

    if (empty($id)) {
        // INSERT
        $sql = "INSERT INTO slider (title, subtitle, image_path, active, car_id) VALUES (?, ?, ?, ?, ?)";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("sssii", $title, $subtitle, $image_name, $active, $car_id);
    } else {
        // UPDATE
        $sql = "UPDATE slider SET title=?, subtitle=?, image_path=?, active=?, car_id=? WHERE id=?";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("sssiii", $title, $subtitle, $image_name, $active, $car_id, $id);
    }

    if ($stmt->execute()) {
        header("Location: slider.php?success=تم حفظ الشريحة بنجاح");
    } else {
        header("Location: slider.php?error=حدث خطأ: " . $stmt->error);
    }

    $stmt->close();
    $conn->close();

} else {
    header("Location: slider.php");
    exit();
}
?>