<?php
session_start();
require 'config/db.php';

// Enable error reporting
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

// Check if the user is logged in and has admin privileges
if (!isset($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') {
    header('Location: dashboard.php');
    exit();
}

// Check if school_id is set
if (!isset($_SESSION['school_id'])) {
    die('Error: school_id is not set in the session.');
}

// Process form submission
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $type = $_POST['type'];
    $message = $_POST['message'];
    $school_id = $_SESSION['school_id'];

    try {
        // Insert alert into the database
        $stmt = $pdo->prepare("INSERT INTO alerts (school_id, type, message, status) VALUES (?, ?, ?, 'active')");
        $stmt->execute([$school_id, $type, $message]);

        // Redirect to dashboard if the alert was successfully created
        header('Location: dashboard.php');
        exit();
    } catch (PDOException $e) {
        echo "Error: Could not create alert. " . $e->getMessage();
    }
}
?>

<!-- HTML for the create alert form starts here -->
<?php include __DIR__ . '/views/header.php'; ?>
<h2>Create Alert</h2>
<form method="POST" action="create_alert.php">
    <label for="type">Type:</label>
    <select name="type" id="type" required>
        <option value="lockdown">Lockdown</option>
        <option value="evacuation">Evacuation</option>
        <option value="shelter_in_place">Shelter in Place</option>
    </select>

    <label for="message">Message:</label>
    <textarea name="message" id="message" required></textarea>

    <button type="submit">Create Alert</button>
</form>
<?php include __DIR__ . '/views/footer.php'; ?>