<?php
session_start();

// Check if the user is authenticated
if (!isset($_SESSION['authenticated']) || $_SESSION['authenticated'] !== true) {
    header("Location: admin_login.php");
    exit();
}

// Database connection
$servername = "localhost";
$username = "nodor"; // Replace with your database username
$password = "D@n33Nao40"; // Replace with your database password
$dbname = "wcfs"; // Replace with your database name

$conn = new mysqli($servername, $username, $password, $dbname);

// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// Check if 'id' parameter is provided
if (isset($_GET['id']) && is_numeric($_GET['id'])) {
    $id = (int)$_GET['id'];

    // Fetch the record to get the image path (if needed)
    $sql = "SELECT image_path FROM updates WHERE id = $id";
    $result = $conn->query($sql);

    if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();
        $imagePath = $row['image_path'];

        // Delete the record from the database
        $deleteSql = "DELETE FROM updates WHERE id = $id";
        if ($conn->query($deleteSql) === TRUE) {
            // Delete the image file if it exists
            if (!empty($imagePath) && file_exists($imagePath)) {
                unlink($imagePath);
            }

            // Redirect back to the admin dashboard with a success message
            header("Location: admin_dashboard.php?success=1");
            exit();
        } else {
            echo "Error deleting record: " . $conn->error;
        }
    } else {
        echo "Record not found.";
    }
} else {
    echo "Invalid request.";
}

$conn->close();
?>