<?php
require_once __DIR__ . '/../../connect.php';

// حارس الصلاحيات: رفع الحظر عملية إدارية، وكانت هذه النقطة بلا أي فحص دور.
if ($role !== 'admin' && $role !== 'super_admin') {
    http_response_code(403);
    echo json_encode([
        'status'  => 'failure',
        'message' => 'Forbidden. Admin access required.',
    ], JSON_UNESCAPED_UNICODE);
    exit;
}

$phone = filterRequest("phone");

if (empty($phone)) {
    jsonError("Phone number is required.");
    exit;
}

try {
    // تشفير الرقم للمطابقة مع المخزن
    $encPhone = $encryptionHelper->encryptData($phone);

    $sql = "DELETE FROM blacklist_driver WHERE phone = :phone";
    $stmt = $con->prepare($sql);
    $stmt->execute([':phone' => $encPhone]);

    if ($stmt->rowCount() > 0) {
        jsonSuccess(null, "Driver removed from blacklist successfully.");
    } else {
        jsonError("No driver found in blacklist with this phone.");
    }

} catch (PDOException $e) {
    error_log("[remove_from_blacklist.php] " . $e->getMessage());
    jsonError("An internal error occurred. Please try again later.");
}