<?php
require 'config.php'; // Your DB connection

if (session_status() == PHP_SESSION_NONE) {
    session_start();
}

// ✅ 1. Redirect to login if not logged in
if (!isset($_SESSION['admin']) || !isset($_SESSION['admin_id'])) {
    header("Location: login.html");
    exit();
}

// ✅ 2. Inactivity check (30 minutes)
$inactiveLimit = 1800; // 30 minutes in seconds

if (isset($_SESSION['last_active'])) {
    $elapsed = time() - $_SESSION['last_active'];
    if ($elapsed > $inactiveLimit) {
        session_unset();
        session_destroy();
        echo "<script>alert('Session expired due to inactivity. Please login again.'); window.location.href='login.html';</script>";
        exit();
    }
}

// // ✅ 3. Check if admin still exists in DB
if (isset($_SESSION['admin_id'])) {
    $adminId = $_SESSION['admin_id'];

    // Check if it's a super admin
    $stmt = $conn->prepare("SELECT id FROM super_admins WHERE id = ?");
    $stmt->bind_param("i", $adminId);
    $stmt->execute();
    $result = $stmt->get_result();

    if ($result->num_rows > 0) {
        // Super admin found, proceed with super admin-specific logic
        // You can add any specific super admin logic here

    } else {
        // If not a super admin, check the regular admin table
        $stmt = $conn->prepare("SELECT id FROM admins WHERE id = ?");
        $stmt->bind_param("i", $adminId);
        $stmt->execute();
        $result = $stmt->get_result();

        if ($result->num_rows === 0) {
            // No admin record found, the account might have been deleted
            session_unset(); // Clear all session variables
            session_destroy(); // Destroy the session
            echo "<script>alert('Your account has been deleted.'); window.location.href='login.html';</script>";
            exit();
        }
    }

} else {
    // If no session exists for the admin, redirect to login
    echo "<script>alert('You must be logged in to access this page.'); window.location.href='login.html';</script>";
    exit();
}

// ✅ Update last active timestamp
$_SESSION['last_active'] = time();