<?php
session_start();
require_once '../config/config.php';
$con = getDatabaseConnection();

if (!isset($_SESSION['admin_id'])) {
    http_response_code(401);
    die('Unauthorized');
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(400);
    die('Invalid request');
}

// Get ALL settings from database
$settings_query = "SELECT setting_key, setting_value FROM tbl_domain_settings";
$settings_result = mysqli_query($con, $settings_query);
$settings = [];
while ($row = mysqli_fetch_assoc($settings_result)) {
    $settings[$row['setting_key']] = $row['setting_value'];
}

$currency = $settings['currency'] ?? 'INR';
$tax_percentage = floatval($settings['tax_percentage'] ?? 18);

// Get form data
$domain_name = mysqli_real_escape_string($con, $_POST['domain_name']);
$current_expiry = mysqli_real_escape_string($con, $_POST['current_expiry']);
$renewal_years = (int)$_POST['renewal_years'];
$user_id = (int)$_POST['user_id'];

// Get domain-specific pricing from database
$parts = explode('.', $domain_name);
if (count($parts) >= 2) {
    if (count($parts) >= 3 && in_array($parts[count($parts) - 2] . '.' . $parts[count($parts) - 1], ['.co.in', '.co.uk'])) {
        $tld = '.' . $parts[count($parts) - 2] . '.' . $parts[count($parts) - 1];
    } else {
        $tld = '.' . $parts[count($parts) - 1];
    }
} else {
    $tld = '.com';
}

// Fetch price from tbl_domain_pricing
$tld_escaped = mysqli_real_escape_string($con, $tld);
$price_query = "SELECT price_per_year FROM tbl_domain_pricing WHERE tld = '$tld_escaped'";
$price_result = mysqli_query($con, $price_query);

if ($price_result && mysqli_num_rows($price_result) > 0) {
    $price_row = mysqli_fetch_assoc($price_result);
    $price_per_year = floatval($price_row['price_per_year']);
} else {
    $price_per_year = 999.00; // Default
}

// Calculate amounts
$subtotal = $price_per_year * $renewal_years;
$tax_amount = $subtotal * ($tax_percentage / 100);
$total_amount = $subtotal + $tax_amount;
// Calculate new expiry date
$new_expiry = date('Y-m-d', strtotime($current_expiry . " +{$renewal_years} years"));

// Generate order number
$order_number = 'DOM' . date('Ymd') . rand(1000, 9999);

// Insert order
$insert_query = "INSERT INTO tbl_domain_orders (
    order_number, domain_name, user_id, renewal_years, 
    price_per_year, total_amount, currency, 
    current_expiry, new_expiry, payment_status
) VALUES (
    '$order_number', '$domain_name', $user_id, $renewal_years,
    $price_per_year, $total_amount, '$currency',
    '$current_expiry', '$new_expiry', 'pending'
)";

if (mysqli_query($con, $insert_query)) {
    $order_id = mysqli_insert_id($con);
    echo "admin/payment_page.php?order_id=" . $order_id;
} else {
    http_response_code(500);
    die('Error creating order');
}
?>