<?php
session_start();
$id = $_SESSION['user_data']['id'];
$email = $_SESSION['user_data']['email'];
$username = $_SESSION['user_data']['username'];
$db_username = $_SESSION['user_data']['db_username'];
$db_password = $_SESSION['user_data']['db_password'];
$db_database = $_SESSION['user_data']['db_database'];
$upload_location = $_SESSION['user_data']['upload_location'];

// Database connection
$con = mysqli_connect("localhost", $db_username, $db_password, $db_database);

// Check connection
if (!$con) {
    die("Connection failed: " . mysqli_connect_error());
}

header('Content-Type: application/json');

if (!isset($_POST['pid']) || !isset($_POST['values'])) {
    echo json_encode(['success' => false, 'message' => 'Missing required parameters']);
    exit;
}

$pid = $_POST['pid'];
$values = $_POST['values'];

// Validate that the user has permission to delete this variation
// Add your authentication/authorization logic here

try {
    $conditions = [];
    $types = "";
    $params = array();
    $params[] = &$pid;
    $types .= "s";
    
    // Add conditions for each value
    $values = explode(' | ', $values);
    for ($i = 0; $i < count($values); $i++) {
        if (!empty($values[$i])) {
            $conditions[] = "VALUE" . ($i + 1) . " = ?";
            $params[] = &$values[$i];
            $types .= "s";
        }
    }
    
    $sql = "DELETE FROM multi_variation WHERE PID = ? AND " . implode(' AND ', $conditions);
    
    $stmt = $con->prepare($sql);
    if ($stmt) {
        call_user_func_array(array($stmt, 'bind_param'), array_merge(array($types), $params));
        $result = $stmt->execute();
        
        if ($result) {
            echo json_encode(['success' => true]);
        } else {
            echo json_encode(['success' => false, 'message' => 'Failed to delete variation']);
        }
    } else {
        echo json_encode(['success' => false, 'message' => 'Failed to prepare statement']);
    }
} catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
}

$con->close();
?>