<?php
session_start();

if ( !isset( $_SESSION[ 'operatorloggedin' ] ) ) {
  header( 'Location: login.php' );
  exit;
}
// Absolute expiration check
if ( isset( $_SESSION[ 'expires_at' ] ) && time() > $_SESSION[ 'expires_at' ] ) {
  session_unset();
  session_destroy();
  header( "Location: login.php?expired=1" );
  exit;
}
$logged_in_user = $_SESSION[ 'name' ];
require_once( __DIR__ . '/../my.php' );
require_once( __DIR__ . '/../public/include/password_reset_helpers.php' );

// Authorization check
$sql2 = "SELECT persons FROM itsm_ob_operators WHERE username = ?";
$result2 = mysqli_prepare( $con, $sql2 );
mysqli_stmt_bind_param( $result2, "s", $logged_in_user );
mysqli_stmt_execute( $result2 );
mysqli_stmt_bind_result( $result2, $operators );
mysqli_stmt_fetch( $result2 );
mysqli_stmt_close( $result2 );
if ( $operators == 0 ) {
  header( "Location: ob-menu.php" );
  exit();
}
// Validate ID
if ( !isset( $_GET[ 'id' ] ) || !is_numeric( $_GET[ 'id' ] ) ) {
  die( "Invalid ID" );
}

$id = ( int )$_GET[ 'id' ];
$messages = [];

// All boolean fields
$boolFields = [
  'allowssp'
];
if ( isset( $_POST[ 'delete' ] ) ) {

  $stmt = mysqli_prepare( $con, "DELETE FROM itsm_ob_persons WHERE id = ?" );
  mysqli_stmt_bind_param( $stmt, "i", $id );

  if ( !mysqli_stmt_execute( $stmt ) ) {
    die( "Delete failed: " . mysqli_stmt_error( $stmt ) );
  }

  header( 'Location: persons.php' );
  exit;
}

if ( isset( $_POST['send_password_reset'] ) ) {
  $stmt = mysqli_prepare( $con, "SELECT id, firstname, lastname, email, allowssp FROM itsm_ob_persons WHERE id = ?" );
  mysqli_stmt_bind_param( $stmt, "i", $id );
  mysqli_stmt_execute( $stmt );
  $result = mysqli_stmt_get_result( $stmt );
  $person_for_reset = mysqli_fetch_assoc( $result );
  mysqli_stmt_close( $stmt );

  if ( !$person_for_reset ) {
    die( "Person not found" );
  }
  if ( (int)$person_for_reset['allowssp'] !== 1 ) {
    $messages[] = 'Deze persoon heeft geen SelfService toegang. Zet eerst AllowSSP aan en sla op.';
  } elseif ( !filter_var( $person_for_reset['email'], FILTER_VALIDATE_EMAIL ) ) {
    $messages[] = 'Deze persoon heeft geen geldig e-mailadres.';
  } else {
    try {
      $token_data = ssp_reset_create_token( $con, (int)$person_for_reset['id'], 60 );
      if ( $token_data && ssp_reset_send_mail( $person_for_reset, $token_data ) ) {
        $messages[] = 'Wachtwoordresetmail is verzonden.';
      } else {
        $messages[] = 'Wachtwoordreset kon niet worden verzonden. Controleer SMTP-configuratie en password_reset.html.';
      }
    } catch ( Exception $exception ) {
      $messages[] = 'Wachtwoordreset kon niet worden aangemaakt.';
    }
  }
}

// Handle form submit
if ( $_SERVER[ 'REQUEST_METHOD' ] === 'POST' && !isset( $_POST['send_password_reset'] ) ) {

  // Convert checkboxes to 0/1
  $boolValues = [];
  foreach ( $boolFields as $field ) {
    $boolValues[ $field ] = isset( $_POST[ $field ] ) ? 1 : 0;
  }

  $preferred_language = trim( (string)( $_POST['preferredlanguage'] ?? '' ) );
  $preferred_language = $preferred_language !== '' ? itsm_normalize_language_code( $preferred_language ) : null;
  $stmt = mysqli_prepare( $con, "
        UPDATE itsm_ob_persons SET
            firstname=?,
            lastname=?,
            email=?,
            phone=?,
            allowssp=?,
            preferredlanguage=?
        WHERE id=?
    " );

  mysqli_stmt_bind_param(
    $stmt,
    "ssssisi",
    $_POST[ 'firstname' ],
    $_POST[ 'lastname' ],
    $_POST[ 'email' ],
    $_POST[ 'phone' ],
    $boolValues[ 'allowssp' ],
    $preferred_language,
    $id
  );

  mysqli_stmt_execute( $stmt );

  header( 'Location: persons.php' );
  exit;
}

// Fetch operator
$stmt = mysqli_prepare( $con, "SELECT * FROM itsm_ob_persons WHERE id=?" );
mysqli_stmt_bind_param( $stmt, "i", $id );
mysqli_stmt_execute( $stmt );

$result = mysqli_stmt_get_result( $stmt );
$operator = mysqli_fetch_assoc( $result );


if ( !$operator ) {
  die( "Person not found" );
}
?>
<?php require_once(__DIR__ . '/nav/nav.php'); ?>
<div class="content"> <?php $list_back_url = 'persons.php'; require(__DIR__ . '/include/back_links.php'); ?>
  <center>
    <h1>Persoon bewerken:
      <?= htmlspecialchars($operator['firstname']) ?>
      <?= htmlspecialchars($operator['lastname']) ?>
    </h1>
  </center>
  <?php foreach ( $messages as $message ): ?>
  <p class="info-note"><?= htmlspecialchars($message) ?></p>
  <?php endforeach; ?>
  <div class="form-wrapper">
    <div class="form-card">
      <form method="post" class="form-grid">
        <div class="form-group"> 
          <!-- Basic fields -->
          <label>Voornaam:
            <input type="text" name="firstname" value="<?= htmlspecialchars($operator['firstname']) ?>">
          </label>
        </div>
        <br>
        <div class="form-group">
          <label>Achternaam:
            <input type="text" name="lastname" value="<?= htmlspecialchars($operator['lastname']) ?>">
          </label>
        </div>
        <br>
        <div class="form-group">
          <label>E-mail:
            <input type="email" name="email" value="<?= htmlspecialchars($operator['email']) ?>">
          </label>
        </div>
        <br>
        <div class="form-group">
          <label>Telefoonnummer:
            <input type="text" name="phone" value="<?= htmlspecialchars($operator['phone']) ?>">
          </label>
        </div>
        <br>
        <div class="form-group">
          <label><?= htmlspecialchars(t('person.preferred_language')) ?>:
            <select name="preferredlanguage">
              <option value="">-</option>
              <?php foreach ( itsm_available_languages() as $code => $label ): ?>
              <option value="<?= htmlspecialchars($code) ?>" <?= ($operator['preferredlanguage'] ?? '') === $code ? 'selected' : '' ?>><?= htmlspecialchars($label) ?></option>
              <?php endforeach; ?>
            </select>
          </label>
        </div>
        <br>
        <hr>
        
        <!-- Boolean fields -->
        <h3>Rechten</h3>
        <div class=checkbox-grid>
          <?php foreach ($boolFields as $field): ?>
          <label>
            <input type="checkbox" name="<?= $field ?>" <?= $operator[$field] ? 'checked' : '' ?>>
            <?= ucfirst($field) ?>
          </label>
          <?php endforeach; ?>
        </div>
        <hr>
        <p class="info-note">Wachtwoorden worden niet handmatig gezet. Gebruik een resetmail zodat de gebruiker zelf een nieuw SelfService wachtwoord instelt.</p>
        <div class="form-actions">
          <button type="submit" class="btn-primary">Opslaan</button>
          <button type="submit" name="send_password_reset" value="1" class="btn-primary" formnovalidate>Verstuur wachtwoordreset</button>
          <button type="submit" name="delete" 
        onclick="return confirm('Weet je zeker dat je deze persoon wil verwijderen?');"
        class="btn-danger"> Verwijder persoon </button>
        </div>
      </form>
    </div>
  </div>
</div>
<?php require_once(__DIR__ . '/nav/end.php'); ?>
