<?php
require_once __DIR__ . '/../../connect.php';

// حارس الصلاحيات: هذه النقطة تعدّل التسعير/الأكواد الترويجية على الإنتاج.
// connect.php يتحقق من صحة التوكن فقط، لذا بدون هذا الفحص كان أي توكن صالح
// (سائق أو راكب) قادراً على تعديلها.
if ($role !== 'super_admin') {
    http_response_code(403);
    echo json_encode([
        'status'  => 'failure',
        'message' => 'Forbidden. Super Admin access required.',
    ]);
    exit;
}

$kazanPercent  = filterRequest("kazanPercent") ?: filterRequest("kazan");
$adminId       = filterRequest("adminId");
$fuelPrice     = filterRequest("fuelPrice");
$currency      = filterRequest("currency") ?: 'SYP';
$speedPrice    = filterRequest("speedPrice");
$comfortPrice  = filterRequest("comfortPrice");
$ladyPrice     = filterRequest("ladyPrice");
$electricPrice = filterRequest("electricPrice");
$vanPrice      = filterRequest("vanPrice");
$deliveryPrice = filterRequest("deliveryPrice");
$mishwarVipPrice = filterRequest("mishwarVipPrice");
$fixedPrice    = filterRequest("fixedPrice");
$awfarPrice    = filterRequest("awfarPrice");
$normalMinPrice = filterRequest("normalMinPrice");
$peakMinPrice  = filterRequest("peakMinPrice");
$lateMinPrice  = filterRequest("lateMinPrice") ?: filterRequest("latePrice");
$naturePrice   = filterRequest("naturePrice");
$heavyPrice    = filterRequest("heavyPrice");
$freePrice     = filterRequest("freePrice");
$country       = filterRequest("country");

$sql = "INSERT INTO `kazan`
        (`country`, `kazanPercent`, `fuelPrice`, `currency`,
         `speedPrice`, `comfortPrice`, `ladyPrice`, `electricPrice`, `vanPrice`,
         `deliveryPrice`, `mishwarVipPrice`, `fixedPrice`, `awfarPrice`,
         `normalMinPrice`, `peakMinPrice`, `lateMinPrice`,
         `adminId`)
        VALUES
        (:country, :kazanPercent, :fuelPrice, :currency,
         :speedPrice, :comfortPrice, :ladyPrice, :electricPrice, :vanPrice,
         :deliveryPrice, :mishwarVipPrice, :fixedPrice, :awfarPrice,
         :normalMinPrice, :peakMinPrice, :lateMinPrice,
         :adminId)
        ON DUPLICATE KEY UPDATE
            `kazanPercent`   = VALUES(`kazanPercent`),
            `fuelPrice`      = VALUES(`fuelPrice`),
            `currency`       = VALUES(`currency`),
            `speedPrice`     = VALUES(`speedPrice`),
            `comfortPrice`   = VALUES(`comfortPrice`),
            `ladyPrice`      = VALUES(`ladyPrice`),
            `electricPrice`  = VALUES(`electricPrice`),
            `vanPrice`       = VALUES(`vanPrice`),
            `deliveryPrice`  = VALUES(`deliveryPrice`),
            `mishwarVipPrice` = VALUES(`mishwarVipPrice`),
            `fixedPrice`     = VALUES(`fixedPrice`),
            `awfarPrice`     = VALUES(`awfarPrice`),
            `normalMinPrice` = VALUES(`normalMinPrice`),
            `peakMinPrice`   = VALUES(`peakMinPrice`),
            `lateMinPrice`   = VALUES(`lateMinPrice`),
            `adminId`        = VALUES(`adminId`)";

$stmt = $con->prepare($sql);

$stmt->bindParam(':kazanPercent', $kazanPercent);
$stmt->bindParam(':adminId', $adminId);
$stmt->bindParam(':fuelPrice', $fuelPrice);
$stmt->bindParam(':currency', $currency);
$stmt->bindParam(':speedPrice', $speedPrice);
$stmt->bindParam(':comfortPrice', $comfortPrice);
$stmt->bindParam(':ladyPrice', $ladyPrice);
$stmt->bindParam(':electricPrice', $electricPrice);
$stmt->bindParam(':vanPrice', $vanPrice);
$stmt->bindParam(':deliveryPrice', $deliveryPrice);
$stmt->bindParam(':mishwarVipPrice', $mishwarVipPrice);
$stmt->bindParam(':fixedPrice', $fixedPrice);
$stmt->bindParam(':awfarPrice', $awfarPrice);
$stmt->bindParam(':normalMinPrice', $normalMinPrice);
$stmt->bindParam(':peakMinPrice', $peakMinPrice);
$stmt->bindParam(':lateMinPrice', $lateMinPrice);
$stmt->bindParam(':country', $country);

if ($stmt->execute()) {
    jsonSuccess(null, "Kazan saved successfully");
} else {
    jsonError("Failed to save Kazan");
}

$stmt->close();
?>