<?php
// ============================================
// 文件: users.php (完整版，含编辑功能)
// ============================================

require_once 'config.php';
checkLogin();

$admin = getCurrentAdmin();
$db = getDB();

// 获取所有观影人
$stmt = $db->query("SELECT * FROM persons ORDER BY name");
$all_persons = $stmt->fetchAll();

$message = '';
$error = '';

// 处理关联观影人（当前用户）
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'link_person') {
    $admin_id = (int)$_POST['admin_id'];
    $person_id = !empty($_POST['person_id']) ? (int)$_POST['person_id'] : null;
    
    if ($admin_id != $_SESSION['admin_id']) {
        $error = '只能修改自己的关联';
    } else {
        if (updateAdminPersonId($admin_id, $person_id)) {
            $message = '关联观影人更新成功';
            $_SESSION['admin_id'] = $admin_id;
            $admin = getCurrentAdmin();
        } else {
            $error = '更新失败';
        }
    }
}

// 处理添加用户
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'add') {
    $new_user = trim($_POST['new_username'] ?? '');
    $new_pass = $_POST['new_password'] ?? '';
    $confirm = $_POST['confirm_password'] ?? '';
    $person_id = !empty($_POST['person_id']) ? (int)$_POST['person_id'] : null;
    
    if (empty($new_user)) {
        $error = '用户名不能为空';
    } elseif (strlen($new_pass) < 6) {
        $error = '密码至少6位';
    } elseif ($new_pass !== $confirm) {
        $error = '两次密码不一致';
    } else {
        if (addAdmin($new_user, $new_pass, null, $person_id)) {
            $message = "用户 {$new_user} 添加成功";
        } else {
            $error = '用户名已存在';
        }
    }
}

// 处理编辑用户
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'edit') {
    $edit_id = (int)$_POST['id'];
    $username = trim($_POST['username'] ?? '');
    $new_password = $_POST['new_password'] ?? '';
    $confirm_password = $_POST['confirm_password'] ?? '';
    $person_id = !empty($_POST['person_id']) ? (int)$_POST['person_id'] : null;
    
    if (empty($username)) {
        $error = '用户名不能为空';
    } else {
        // 检查用户名是否已被其他用户使用
        $stmt = $db->prepare("SELECT COUNT(*) FROM admins WHERE username = ? AND id != ?");
        $stmt->execute([$username, $edit_id]);
        if ($stmt->fetchColumn() > 0) {
            $error = '用户名已被占用';
        } else {
            // 构建更新语句
            $sql = "UPDATE admins SET username = ?, person_id = ?";
            $params = [$username, $person_id];
            if (!empty($new_password)) {
                if (strlen($new_password) < 6) {
                    $error = '密码至少6位';
                } elseif ($new_password !== $confirm_password) {
                    $error = '两次密码不一致';
                } else {
                    $hashed = password_hash($new_password, PASSWORD_DEFAULT);
                    $sql .= ", password = ?";
                    $params[] = $hashed;
                }
            }
            if (empty($error)) {
                $sql .= " WHERE id = ?";
                $params[] = $edit_id;
                $stmt = $db->prepare($sql);
                if ($stmt->execute($params)) {
                    $message = "用户 {$username} 更新成功";
                    // 如果编辑的是自己，刷新 session 信息
                    if ($edit_id == $_SESSION['admin_id']) {
                        $_SESSION['admin_id'] = $edit_id;
                        $admin = getCurrentAdmin();
                    }
                } else {
                    $error = '更新失败';
                }
            }
        }
    }
}

// 处理删除用户
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'delete') {
    $delete_id = (int)$_POST['delete_id'];
    if (deleteAdmin($delete_id)) {
        $message = '用户已删除';
    } else {
        $error = '无法删除该用户（可能是最后一个管理员或您自己）';
    }
}

// 获取编辑数据
$edit_data = null;
if (isset($_GET['action']) && $_GET['action'] === 'edit' && isset($_GET['id'])) {
    $edit_id = (int)$_GET['id'];
    $stmt = $db->prepare("SELECT * FROM admins WHERE id = ?");
    $stmt->execute([$edit_id]);
    $edit_data = $stmt->fetch();
    if (!$edit_data) {
        header('Location: users.php');
        exit;
    }
}

$users = getAllAdmins();
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>用户管理 - 电影日志</title>
    <link rel="stylesheet" href="css/style.css">
    <style>
        .form-container {
            max-width: 800px;
            margin: 0 auto;
            padding: 20px;
        }
        .card {
            background: var(--card-bg);
            border-radius: 16px;
            padding: 28px 32px;
            box-shadow: var(--shadow);
            margin-bottom: 24px;
        }
        .card h2 {
            font-size: 22px;
            font-weight: 700;
            margin: 0 0 8px;
            color: var(--text-primary);
        }
        .card .sub {
            color: var(--text-secondary);
            font-size: 14px;
            margin-bottom: 16px;
        }
        .form-group {
            margin-bottom: 16px;
        }
        .form-group label {
            display: block;
            font-weight: 600;
            font-size: 14px;
            color: var(--text-primary);
            margin-bottom: 4px;
        }
        .form-group input, .form-group select {
            width: 100%;
            padding: 10px 14px;
            border: 1px solid var(--border-color);
            border-radius: 8px;
            font-size: 15px;
            box-sizing: border-box;
            transition: border-color 0.2s;
        }
        .form-group input:focus, .form-group select:focus {
            outline: none;
            border-color: var(--primary);
            box-shadow: 0 0 0 4px rgba(230,126,34,0.12);
        }
        .btn {
            padding: 10px 20px;
            border-radius: 8px;
            font-size: 14px;
            font-weight: 600;
            border: none;
            cursor: pointer;
            transition: var(--transition);
            text-decoration: none;
            display: inline-block;
        }
        .btn-primary {
            background: linear-gradient(135deg, var(--primary), var(--primary-light));
            color: #fff;
        }
        .btn-primary:hover {
            transform: translateY(-2px);
            box-shadow: 0 8px 28px rgba(230,126,34,0.35);
        }
        .btn-danger {
            background: #e74c3c;
            color: #fff;
        }
        .btn-danger:hover {
            background: #c0392b;
        }
        .btn-outline {
            background: transparent;
            color: var(--text-secondary);
            border: 1px solid var(--border-color);
        }
        .btn-outline:hover {
            background: var(--bg-secondary);
        }
        .btn-sm {
            padding: 4px 12px;
            font-size: 13px;
        }
        .user-list {
            list-style: none;
            padding: 0;
            margin: 0;
        }
        .user-list li {
            display: flex;
            justify-content: space-between;
            align-items: center;
            padding: 10px 0;
            border-bottom: 1px solid var(--border-color);
            flex-wrap: wrap;
            gap: 8px;
        }
        .user-list li:last-child {
            border-bottom: none;
        }
        .user-list .username {
            font-weight: 500;
        }
        .user-list .badge {
            background: var(--bg-secondary);
            color: var(--text-secondary);
            font-size: 12px;
            padding: 2px 10px;
            border-radius: 12px;
            margin-left: 8px;
        }
        .user-list .badge.self {
            background: var(--primary);
            color: #fff;
        }
        .user-list .badge.has-link {
            background: #2ecc71;
            color: #fff;
        }
        .error-box {
            background: rgba(231,76,60,0.08);
            border: 1px solid rgba(231,76,60,0.2);
            color: #e74c3c;
            padding: 10px 14px;
            border-radius: 8px;
            margin-bottom: 16px;
            font-size: 14px;
        }
        .success-box {
            background: rgba(39,174,96,0.08);
            border: 1px solid rgba(39,174,96,0.2);
            color: #27ae60;
            padding: 10px 14px;
            border-radius: 8px;
            margin-bottom: 16px;
            font-size: 14px;
        }
        .form-row {
            display: flex;
            gap: 12px;
            align-items: flex-end;
            flex-wrap: wrap;
        }
        .form-row .form-group {
            flex: 1;
            margin-bottom: 0;
            min-width: 150px;
        }
        .link-form {
            display: flex;
            gap: 12px;
            align-items: center;
            flex-wrap: wrap;
        }
        .link-form select {
            flex: 1;
            min-width: 150px;
        }
        @media (max-width: 600px) {
            .form-row {
                flex-direction: column;
            }
            .card {
                padding: 20px 16px;
            }
            .link-form {
                flex-direction: column;
                align-items: stretch;
            }
        }
    </style>
</head>
<body>
    <?php include 'nav.php'; ?>

    <main class="main-content">
        <div class="form-container">
            <!-- 当前用户关联设置 -->
            <div class="card">
                <h2>🔗 关联我的观影人身份</h2>
                <p class="sub">设置你作为观影人的身份，用于年度报告等统计功能（排除自己）</p>
                
                <?php if ($message): ?>
                    <div class="success-box"><?= h($message) ?></div>
                <?php endif; ?>
                <?php if ($error): ?>
                    <div class="error-box"><?= h($error) ?></div>
                <?php endif; ?>
                
                <form method="POST" class="link-form">
                    <input type="hidden" name="action" value="link_person">
                    <input type="hidden" name="admin_id" value="<?= $_SESSION['admin_id'] ?>">
                    <select name="person_id">
                        <option value="">-- 不关联 --</option>
                        <?php foreach ($all_persons as $p): ?>
                            <option value="<?= $p['id'] ?>" <?= ($admin['person_id'] == $p['id']) ? 'selected' : '' ?>>
                                <?= h($p['name']) ?>
                            </option>
                        <?php endforeach; ?>
                    </select>
                    <button type="submit" class="btn btn-primary">保存关联</button>
                    <?php if ($admin['person_id']): ?>
                        <span style="font-size:13px;color:#27ae60;">✅ 当前关联：<?= h($admin['person_name'] ?? '') ?></span>
                    <?php else: ?>
                        <span style="font-size:13px;color:var(--text-secondary);">⚠️ 未关联观影人，年度报告将无法排除你自己</span>
                    <?php endif; ?>
                </form>
            </div>

            <!-- 添加/编辑用户 -->
            <div class="card">
                <h2><?= $edit_data ? '✏️ 编辑用户' : '➕ 添加新管理员' ?></h2>
                <p class="sub"><?= $edit_data ? '修改用户信息' : '新增一个可登录系统的账户' ?></p>

                <form method="POST">
                    <input type="hidden" name="action" value="<?= $edit_data ? 'edit' : 'add' ?>">
                    <?php if ($edit_data): ?>
                        <input type="hidden" name="id" value="<?= $edit_data['id'] ?>">
                    <?php endif; ?>
                    <div class="form-row">
                        <div class="form-group">
                            <label>用户名</label>
                            <input type="text" name="<?= $edit_data ? 'username' : 'new_username' ?>" 
                                   value="<?= $edit_data ? h($edit_data['username']) : '' ?>" 
                                   placeholder="如: manager" required>
                        </div>
                        <div class="form-group">
                            <label><?= $edit_data ? '新密码 (留空则不修改)' : '密码 (至少6位)' ?></label>
                            <input type="password" name="new_password" placeholder="<?= $edit_data ? '留空则不修改' : '输入密码' ?>">
                        </div>
                        <?php if ($edit_data): ?>
                            <div class="form-group">
                                <label>确认新密码</label>
                                <input type="password" name="confirm_password" placeholder="再次输入新密码">
                            </div>
                        <?php endif; ?>
                        <div class="form-group">
                            <label>关联观影人</label>
                            <select name="person_id">
                                <option value="">-- 不关联 --</option>
                                <?php foreach ($all_persons as $p): ?>
                                    <option value="<?= $p['id'] ?>" <?= ($edit_data && $edit_data['person_id'] == $p['id']) ? 'selected' : '' ?>>
                                        <?= h($p['name']) ?>
                                    </option>
                                <?php endforeach; ?>
                            </select>
                        </div>
                        <div>
                            <button type="submit" class="btn btn-primary"><?= $edit_data ? '💾 保存修改' : '添加用户' ?></button>
                            <?php if ($edit_data): ?>
                                <a href="users.php" class="btn btn-outline">取消</a>
                            <?php endif; ?>
                        </div>
                    </div>
                </form>
            </div>

            <!-- 用户列表 -->
            <div class="card">
                <h2>👥 现有管理员</h2>
                <p class="sub">共 <?= count($users) ?> 个账户</p>
                <?php if (count($users) > 0): ?>
                    <ul class="user-list">
                        <?php foreach ($users as $u): ?>
                            <li>
                                <span>
                                    <span class="username"><?= h($u['username']) ?></span>
                                    <?php if ($u['id'] == $_SESSION['admin_id']): ?>
                                        <span class="badge self">当前登录</span>
                                    <?php else: ?>
                                        <span class="badge">管理员</span>
                                    <?php endif; ?>
                                    <?php if ($u['person_id']): ?>
                                        <span class="badge has-link">👤 关联: <?= h($u['person_name']) ?></span>
                                    <?php endif; ?>
                                </span>
                                <span>
                                    <a href="?action=edit&id=<?= $u['id'] ?>" class="btn btn-outline btn-sm">✏️ 编辑</a>
                                    <?php if ($u['id'] != $_SESSION['admin_id']): ?>
                                        <form method="POST" style="display:inline;" onsubmit="return confirm('确定删除用户 <?= h($u['username']) ?> 吗？')">
                                            <input type="hidden" name="action" value="delete">
                                            <input type="hidden" name="delete_id" value="<?= $u['id'] ?>">
                                            <button type="submit" class="btn btn-danger btn-sm">删除</button>
                                        </form>
                                    <?php else: ?>
                                        <span style="color: var(--text-secondary); font-size:13px;">不可删除自己</span>
                                    <?php endif; ?>
                                </span>
                            </li>
                        <?php endforeach; ?>
                    </ul>
                <?php else: ?>
                    <p style="color: var(--text-secondary);">暂无其他管理员</p>
                <?php endif; ?>
            </div>
        </div>
    </main>
</body>
</html>