<?php

declare(strict_types=1);
require_once __DIR__ . '/../includes/forum.php';

if (!is_logged()) {
    header('Location: ../index.php?action=login', true, 302);
    exit;
}

$id   = (int)($_GET['id'] ?? 0);
$post = forum_post_get($id);

if (!$post) { header('Location: index.php'); exit; }
if (!can_edit_post($post)) {
    http_response_code(403);
    die('403 — Доступ запрещён');
}

$topic = forum_topic_get((int)$post['topic_id']);

$error   = '';
$content = $post['content'];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (!csrf_check($_POST['csrf'] ?? null)) {
        $error = 'Ошибка CSRF';
    } else {
        $content = (string)($_POST['content'] ?? '');
        $res = forum_post_update($id, $content);
        if ($res['ok']) {
            header('Location: topic.php?id=' . $post['topic_id'] . '#post-' . $id, true, 302);
            exit;
        }
        $error = $res['error'];
    }
}

$pageTitle = 'Редактировать сообщение';
require __DIR__ . '/../includes/head.php';
?>

<div class="container">

    <div class="forum-breadcrumb">
        <a href="index.php">
            <span class="material-symbols-rounded">forum</span>
            Форум
        </a>
        <span>/</span>
        <a href="topic.php?id=<?= (int)$post['topic_id'] ?>">
            <?= e($topic['title'] ?? 'Тема') ?>
        </a>
        <span>/</span>
        <span>Редактировать сообщение</span>
    </div>

    <div class="forum-home-head">
        <h2>
            <span class="material-symbols-rounded" style="font-size:28px">edit</span>
            Редактировать сообщение
        </h2>
        <a href="topic.php?id=<?= (int)$post['topic_id'] ?>" class="btn btn--ghost btn--sm">
            <span class="material-symbols-rounded">arrow_back</span>
            К теме
        </a>
    </div>

    <div class="admin-panel" style="max-width:720px;margin:0 auto">

        <?php if ($error): ?>
            <div class="alert error"><?= e($error) ?></div>
        <?php endif; ?>

        <form method="post" class="news-form">
            <input type="hidden" name="csrf" value="<?= csrf_token() ?>">

            <label for="content">
                Текст сообщения
                <span style="color:var(--danger)">*</span>
            </label>
            <textarea id="content" name="content"
                      rows="10" required
                      placeholder="Введите текст сообщения"><?= e($content) ?></textarea>

            <div class="form-actions">
                <button class="btn btn--accent" type="submit">
                    <span class="material-symbols-rounded">save</span>
                    Сохранить
                </button>
                <a href="topic.php?id=<?= (int)$post['topic_id'] ?>" class="btn btn--ghost">
                    <span class="material-symbols-rounded">close</span>
                    Отмена
                </a>
            </div>
        </form>

    </div>
</div>

<?php require __DIR__ . '/../includes/foot.php'; ?>