<?php
require_once __DIR__ . '/../lib/auth.php';
require_once __DIR__ . '/../lib/db.php';
require_admin();

$action = $_POST['_action'] ?? '';

if ($action === 'add') {
    $title = trim((string)($_POST['title'] ?? ''));
    $text  = trim((string)($_POST['text']  ?? ''));
    $date  = trim((string)($_POST['date']  ?? '')) ?: date('Y-m-d');
    if ($title === '' || $text === '') {
        header('Location: ../pages/admin.php?tab=news&err=empty');
        exit;
    }
    $stmt = db()->prepare(
        'INSERT INTO news (title, text, date, created_at) VALUES (?, ?, ?, ?)'
    );
    $stmt->execute([$title, $text, $date, date('c')]);
    header('Location: ../pages/admin.php?tab=news&ok=added');
    exit;
}

if ($action === 'delete') {
    $id = (int)($_POST['news_id'] ?? 0);
    if ($id > 0) {
        db()->prepare('DELETE FROM news WHERE id = ?')->execute([$id]);
    }
    header('Location: ../pages/admin.php?tab=news&ok=deleted');
    exit;
}

header('Location: ../pages/admin.php?tab=news');
exit;