<?php
ob_start();
// 1. Session & Auth Control
if (session_status() === PHP_SESSION_NONE) { session_start(); }
if (!isset($_SESSION['user_id'])) { header("Location: login.php"); exit(); }

require_once('../titancore/titanconfig.php');
require_once('../titancore/titanheader.php');

$uid = $_SESSION['user_id'];
$u_name = $_SESSION['user_name'] ?? 'User';

$swal_msg = "";

// 2. Pricing Fetch (Updated Name)
$price_check = $conn->query("SELECT price FROM pricing WHERE service_name = 'voter_link_without_otp'");
$service_price = ($price_check && $price_check->num_rows > 0) ? $price_check->fetch_assoc()['price'] : 25.00;

// 3. API Config Fetch from TitanPayment
$api_settings = $conn->query("SELECT titanurl, titan_api_key FROM TitanPayment WHERE id = 1")->fetch_assoc();
$TitanApi_Url = $api_settings['titanurl'] ?? '';
$api_key = $api_settings['titan_api_key'] ?? '';

if (empty($TitanApi_Url) || empty($api_key)) {
    echo "<script>alert('System Error: TitanPayment API URL or Key is not configured. Contact Admin.'); window.location.href='titanhome.php';</script>";
    exit();
}

// 4. Handle Link Logic
if (isset($_POST['link_btn'])) {
    $input_epic = mysqli_real_escape_string($conn, trim($_POST['epic_no']));
    $input_mobile = mysqli_real_escape_string($conn, trim($_POST['mobile_no']));
    
    // Wallet Check
    $user_wallet = $conn->query("SELECT wallet FROM users WHERE id = '$uid'")->fetch_assoc()['wallet'];
    
    if (empty($input_epic) || strlen($input_mobile) !== 10 || !is_numeric($input_mobile)) {
        $swal_msg = "Swal.fire('Invalid Input!', 'Please enter a valid EPIC and 10-digit Mobile number.', 'error');";
    } elseif ($user_wallet < $service_price) {
        $swal_msg = "Swal.fire('Low Balance!', 'You need ₹$service_price in your wallet to use this service.', 'warning');";
    } else {
        // Build API URL
        $endpoint = rtrim($TitanApi_Url, '/') . "/api/v1/VoterMobileLink_Instant.php?api_key=" . urlencode($api_key) . "&epic=" . urlencode($input_epic) . "&mobile=" . urlencode($input_mobile);
        
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $endpoint);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        $api_response = curl_exec($ch);
        curl_close($ch);
        
        if ($api_response) {
            $data = json_decode($api_response, true);
            
            if (isset($data['success']) && $data['success'] === true) {
                
                // Deduct Wallet
                $conn->query("UPDATE users SET wallet = wallet - $service_price WHERE id = '$uid'");
                
                // Save to Database History Table (Updated Table Name)
                $msg = mysqli_real_escape_string($conn, $data['message']);
                $sys_status = mysqli_real_escape_string($conn, $data['payload']['system_status']);
                $api_ref = mysqli_real_escape_string($conn, $data['payload']['api_ref_id']);
                $date_time = date('Y-m-d H:i:s');
                
                $insert = "INSERT INTO voter_link_without_otp_history (user_id, epic_no, mobile_no, message, system_status, api_ref_id, created_at) 
                           VALUES ('$uid', '$input_epic', '$input_mobile', '$msg', '$sys_status', '$api_ref', '$date_time')";
                
                if ($conn->query($insert)) {
                    $swal_msg = "Swal.fire('Linked!', 'Voter Mobile Linked Successfully! Redirecting...', 'success').then(() => { window.location.href='VoterLink_WithoutOtp_list.php'; });";
                } else {
                    $swal_msg = "Swal.fire('Database Error!', 'Linked successfully but failed to save history.', 'error');";
                }
                
            } else {
                $err = $data['message'] ?? 'Linking failed or invalid API response.';
                $swal_msg = "Swal.fire('Failed!', '" . addslashes($err) . "', 'error');";
            }
        } else {
            $swal_msg = "Swal.fire('Server Error!', 'Could not connect to the Master API Server.', 'error');";
        }
    }
}
?>

<div class="row mb-3">
    <div class="col">
        <div class="card bg-100 shadow-none border">
            <div class="row gx-0 flex-between-center p-3">
                <div class="col-sm-auto d-flex align-items-center">
                    <div class="icon-item bg-info-subtle shadow-none me-3">
                        <span class="fas fa-id-card text-info fs-4"></span>
                    </div>
                    <div>
                        <h6 class="text-info fs-10 mb-0">Identity Services</h6>
                        <h4 class="text-primary fw-bold mb-0">Voter Mobile Link <span class="text-info fw-medium">Without OTP</span></h4>
                    </div>
                </div>
                <div class="col-md-auto">
                    <a href="VoterLink_WithoutOtp_list.php" class="btn btn-sm btn-outline-primary shadow-none fw-bold"><i class="fas fa-list me-1"></i> View History List</a>
                </div>
            </div>
        </div>
    </div>
</div>

<div class="row justify-content-center">
    <div class="col-lg-6">
        <div class="card h-100">
            <div class="card-header bg-light border-bottom">
                <h5 class="mb-0 text-primary fw-bold text-center"><i class="fas fa-link me-2"></i>Link Mobile Without OTP</h5>
            </div>
            <div class="card-body bg-body-tertiary p-4">
                <div class="alert alert-info border-0 d-flex align-items-center mb-4">
                    <i class="fas fa-rupee-sign fs-3 me-3 text-info"></i>
                    <p class="mb-0 fs-11">Service charge: <strong>₹<?php echo number_format($service_price, 2); ?></strong> will be deducted from your wallet upon success.</p>
                </div>
                
                <form method="POST">
                    <div class="mb-3">
                        <label class="form-label fw-bold text-900">Voter ID (EPIC Number) <span class="text-danger">*</span></label>
                        <div class="input-group">
                            <span class="input-group-text bg-white"><i class="fas fa-address-card"></i></span>
                            <input type="text" class="form-control shadow-none text-uppercase" name="epic_no" placeholder="e.g. WRI1735059" required>
                        </div>
                    </div>
                    
                    <div class="mb-4">
                        <label class="form-label fw-bold text-900">Mobile Number <span class="text-danger">*</span></label>
                        <div class="input-group">
                            <span class="input-group-text bg-white"><i class="fas fa-mobile-alt"></i></span>
                            <input type="text" class="form-control shadow-none" name="mobile_no" placeholder="Enter 10-digit mobile number" maxlength="10" pattern="\d{10}" required>
                        </div>
                    </div>
                    
                    <button class="btn btn-info w-100 fw-bold shadow-none py-2" type="submit" name="link_btn">
                        <i class="fas fa-bolt me-2"></i> Link Mobile Instantly
                    </button>
                </form>
            </div>
        </div>
    </div>
</div>

<script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
<script>
    <?php echo $swal_msg; ?>
</script>

<?php 
require_once('../titancore/TitanFooter.php'); 
ob_end_flush();
?>