<?php
require_once __DIR__ . '/app_init.php';
require_once __DIR__ . '/db_config.php';
require_once __DIR__ . '/functions.php';

requireLogin();

// Navigation buttons (Previous/Next/First/Last) - redirect to record view
if (isset($_POST['btnView_Previous']) || isset($_POST['btnView_Next']) || isset($_POST['btnView_First']) || isset($_POST['btnView_Last'])) {
    $db = getReadDb();
    $recordID = isset($_POST['RecordID']) ? (int)$_POST['RecordID'] : 0;

    if (isset($_POST['btnView_Previous'])) {
        $stmt = $db->prepare("SELECT users.ID AS ID_Field FROM users WHERE users.ID < ? ORDER BY users.ID DESC LIMIT 1");
        $stmt->execute([$recordID]);
    } elseif (isset($_POST['btnView_Next'])) {
        $stmt = $db->prepare("SELECT users.ID AS ID_Field FROM users WHERE users.ID > ? ORDER BY users.ID ASC LIMIT 1");
        $stmt->execute([$recordID]);
    } elseif (isset($_POST['btnView_First'])) {
        $stmt = $db->prepare("SELECT users.ID AS ID_Field FROM users ORDER BY users.ID ASC LIMIT 1");
        $stmt->execute();
    } elseif (isset($_POST['btnView_Last'])) {
        $stmt = $db->prepare("SELECT users.ID AS ID_Field FROM users WHERE users.ID > ? ORDER BY users.ID DESC LIMIT 1");
        $stmt->execute([$recordID]);
    }

    $row = $stmt->fetch();
    if ($row) {
        header('Location: user_RecordView.php?RecordID=' . urlencode($row['id_field']));
    } else {
        header('Location: user_RecordView.php?RecordID=' . urlencode($recordID));
    }
    exit;

} elseif (isset($_POST['btnView_Edit'])) {
    // Edit button - redirect to edit form
    $recordID = isset($_POST['RecordID']) ? $_POST['RecordID'] : '';
    header('Location: user_RecordEdit.php?RecordID=' . urlencode($recordID));
    exit;

} elseif (isset($_POST['btnView_Add'])) {
    // Add button - redirect to blank edit form
    header('Location: user_RecordEdit.php');
    exit;

} elseif (isset($_POST['btnView_Delete'])) {
    // Delete button
    $db = getWriteDb();
    $recordID = isset($_POST['RecordID']) ? (int)$_POST['RecordID'] : 0;
    $stmt = $db->prepare("DELETE FROM users WHERE users.ID = ?");
    $stmt->execute([$recordID]);
    header('Location: user_RecordView.php');
    exit;

} elseif (isset($_POST['btnEdit_OK'])) {
    // Update or Insert
    if (isset($_POST['RecordID']) && $_POST['RecordID'] !== '') {
        // UPDATE existing record
        $db = getWriteDb();
        $recordID = (int)$_POST['RecordID'];

        $stmt = $db->prepare("UPDATE users SET fname = ?, lname = ?, Member = ?, Password = ?, EMail = ?, emailsubscribe = ?, City = ?, State = ?, Country = ?, Address1 = ?, Address2 = ?, Phone = ?, Zip = ?, List = ? WHERE ID = ?");
        $stmt->execute([
            $_POST['fname'] ?? '',
            $_POST['lname'] ?? '',
            $_POST['Member'] ?? '',
            $_POST['Password'] ?? '',
            $_POST['EMail'] ?? '',
            $_POST['emailsubscribe'] ?? '',
            $_POST['City'] ?? '',
            $_POST['State'] ?? '',
            $_POST['Country'] ?? '',
            $_POST['Address1'] ?? '',
            $_POST['Address2'] ?? '',
            $_POST['Phone'] ?? '',
            $_POST['Zip'] ?? '',
            $_POST['List'] ?? '',
            $recordID
        ]);

        // Email notification (commented out - do not execute in production without review)
        /*
        $emailBody = "First Name: " . ($_POST['fname'] ?? '') . "\n"
            . "Last Name: " . ($_POST['lname'] ?? '') . "\n"
            . "Member Number: " . ($_POST['Member'] ?? '') . "\n"
            . "Password: " . ($_POST['Password'] ?? '') . "\n"
            . "E-Mail Address: " . ($_POST['EMail'] ?? '') . "\n"
            . "Address 1: " . ($_POST['Address1'] ?? '') . "\n"
            . "Address 2: " . ($_POST['Address2'] ?? '') . "\n"
            . "City: " . ($_POST['City'] ?? '') . "\n"
            . "State: " . ($_POST['State'] ?? '') . "\n"
            . "Zip: " . ($_POST['Zip'] ?? '') . "\n"
            . "Country: " . ($_POST['Country'] ?? '') . "\n"
            . "Phone Number: " . ($_POST['Phone'] ?? '') . "\n";

        sendEmail(
            '[email protected],[email protected],[email protected]',
            '[email protected]',
            'UPDATED ' . ($_POST['fname'] ?? '') . ' ' . ($_POST['lname'] ?? ''),
            $emailBody,
            'MCIFA UPDATE'
        );
        */

        header('Location: settings.php?RecordID=' . urlencode($recordID));
        exit;
    } else {
        // INSERT new record
        $db = getWriteDb();
        $fieldList = isset($_POST['FieldList']) ? explode(',', $_POST['FieldList']) : [];

        $stmt = $db->prepare("INSERT INTO users (fname, lname, Member, Password, EMail, emailsubscribe, City, State, Country, Address1, Address2, Phone, Zip, List) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
        $stmt->execute([
            $_POST['fname'] ?? '',
            $_POST['lname'] ?? '',
            $_POST['Member'] ?? '',
            $_POST['Password'] ?? '',
            $_POST['EMail'] ?? '',
            $_POST['emailsubscribe'] ?? '',
            $_POST['City'] ?? '',
            $_POST['State'] ?? '',
            $_POST['Country'] ?? '',
            $_POST['Address1'] ?? '',
            $_POST['Address2'] ?? '',
            $_POST['Phone'] ?? '',
            $_POST['Zip'] ?? '',
            $_POST['List'] ?? ''
        ]);

        // Get the new record ID
        $stmtNew = $db->prepare("SELECT users.ID AS ID_Field FROM users ORDER BY users.ID DESC LIMIT 1");
        $stmtNew->execute();
        $newRecord = $stmtNew->fetch();

        if ($newRecord) {
            header('Location: settings.php?RecordID=' . urlencode($newRecord['id_field']));
        } else {
            header('Location: settings.php');
        }
        exit;
    }

} elseif (isset($_POST['btnEdit_Cancel'])) {
    // Cancel button - redirect back to settings
    if (isset($_POST['RecordID']) && $_POST['RecordID'] !== '') {
        header('Location: settings.php?RecordID=' . urlencode($_POST['RecordID']));
    } else {
        header('Location: settings.php');
    }
    exit;
}

// Default: redirect to settings
header('Location: settings.php');
exit;