<?php

session_start();

// -------------------- DB CONFIG --------------------

$servername = "localhost";

$username = "skanderbag_skanderbag_user";   // DB username

$password = "nmwCQ,wMKwgg@#";                // DB password

$dbname = "skanderbag_skanderbag_db";       // DB name

// Create connection

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) { die("Connection failed: " . $conn->connect_error); }

// -------------------- CREATE TABLE IF NOT EXISTS --------------------

$conn->query("

CREATE TABLE IF NOT EXISTS users (

    id INT AUTO_INCREMENT PRIMARY KEY,

    username VARCHAR(100),

    email VARCHAR(100) UNIQUE,

    password VARCHAR(255),

    ref_id INT DEFAULT 0,

    position ENUM('left','right') DEFAULT 'left',

    role VARCHAR(50) DEFAULT 'member',

    vip TINYINT(1) DEFAULT 0,

    profile_pic VARCHAR(255) DEFAULT 'default.png',

    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP

) ENGINE=InnoDB DEFAULT CHARSET=utf8;

");

// -------------------- PAGE LOGIC --------------------

$page = isset($_GET['page']) ? $_GET['page'] : 'login';

$message = '';

// -------------------- USER ROLES --------------------

$root_admin_id = 1;

$sub_admin_id = 2;

// -------------------- REGISTER --------------------

if($page=='register' && isset($_POST['register'])){

    $username = $_POST['username'];

    $email = $_POST['email'];

    $password = password_hash($_POST['password'], PASSWORD_DEFAULT);

    $ref_id = isset($_POST['ref_id']) ? $_POST['ref_id'] : 0;

    $position = isset($_POST['position']) ? $_POST['position'] : 'left';

    $role = 'member';

    $vip = 0;

    $check = $conn->prepare("SELECT id FROM users WHERE email=?");

    $check->bind_param("s",$email);

    $check->execute();

    $check->store_result();

    if($check->num_rows>0){

        $message="Email ইতিমধ্যেই ব্যবহার হয়েছে!";

    } else {

        $stmt=$conn->prepare("INSERT INTO users (username,email,password,ref_id,position,role,vip) VALUES (?,?,?,?,?,?,?)");

        $stmt->bind_param("ssssssi",$username,$email,$password,$ref_id,$position,$role,$vip);

        if($stmt->execute()){ $message="রেজিস্ট্রেশন সফল! লগইন করুন।"; }

        else { $message="রেজিস্ট্রেশন ব্যর্থ!"; }

    }

}

// -------------------- LOGIN --------------------

if($page=='login' && isset($_POST['login'])){

    $email=$_POST['email'];

    $password=$_POST['password'];

    $stmt=$conn->prepare("SELECT id,username,password,role,vip FROM users WHERE email=?");

    $stmt->bind_param("s",$email);

    $stmt->execute();

    $stmt->store_result();

    $stmt->bind_result($id,$username_db,$hash,$role,$vip);

    if($stmt->num_rows>0){

        $stmt->fetch();

        if(password_verify($password,$hash)){

            $_SESSION['user_id']=$id;

            $_SESSION['username']=$username_db;

            $_SESSION['role']=$role;

            $_SESSION['vip']=$vip;

            header("Location:?page=dashboard"); exit();

        } else { $message="পাসওয়ার্ড ভুল!"; }

    } else { $message="Email পাওয়া যায়নি!"; }

}

// -------------------- LOGOUT --------------------

if($page=='logout'){ session_destroy(); header("Location:?page=login"); exit(); }

// -------------------- DASHBOARD PROTECTION --------------------

if($page=='dashboard' && !isset($_SESSION['user_id'])){ header("Location:?page=login"); exit(); }

// -------------------- DASHBOARD DATA --------------------

if($page=='dashboard'){

    $user_id=$_SESSION['user_id'];

    $stmt=$conn->prepare("SELECT username,email,created_at,role,vip FROM users WHERE id=?");

    $stmt->bind_param("i",$user_id);

    $stmt->execute();

    $stmt->bind_result($username,$email,$created_at,$role,$vip);

    $stmt->fetch();

    $stmt->close();

    $referrals=12;

    $ref_income=3500;

    $daily_id=[15,64,256,1024,4096,16384,65536,262144];

    $daily_rank=["1 STAR","2 STAR","3 STAR","4 STAR","5 STAR","6 STAR","7 STAR","8 STAR"];

    $daily_reward=[20,50,100,300,500,1000,2000,5000];

    $members=[10,100,1000,10000,100000];

    $per_member=[300,200,100,100,100];

}

// -------------------- ACCESS CONTROL --------------------

function isRootAdmin(){ global $user_id,$root_admin_id; return $user_id==$root_admin_id; }

function isSubAdmin(){ global $user_id,$sub_admin_id; return $user_id==$sub_admin_id; }

function canSeeP2(){ return isRootAdmin()||isSubAdmin(); }

function canCreditBalance(){ return isRootAdmin()||($_SESSION['vip']==1); }

?>

<!DOCTYPE html>

<html lang="bn">

<head>

<meta charset="UTF-8">

<title>Skanderbag Dashboard</title>

<style>

body{font-family:Arial,sans-serif;background:#f4f4f4;color:#333;margin:0;padding:0;}

.container{max-width:900px;margin:20px auto;background:#fff;padding:20px;border-radius:8px;box-shadow:0 0 10px #ccc;}

h2{color:#333;}

input,button,select{width:100%;padding:10px;margin:5px 0;}

button{cursor:pointer;background:#FFD700;border:none;color:#222;font-weight:bold;}

.message{color:red;margin:10px 0;}

a{text-decoration:none;color:#007BFF;}

.header{background:#222;color:#FFD700;padding:20px;text-align:center;}

table{width:100%;border-collapse:collapse;margin-bottom:20px;}

table,th,td{border:1px solid #ccc;}

th,td{padding:10px;text-align:center;}

th{background:#f0f0f0;}

a.button{display:inline-block;background:#FFD700;color:#222;padding:10px 20px;border-radius:5px;text-decoration:none;font-weight:bold;}

.note{background:#fffae6;padding:10px;border-left:5px solid #f7d04b;margin-bottom:20px;}

</style>

</head>

<body>

<div class="container">

<?php if($page=='register'){ ?>

<h2>রেজিস্ট্রেশন ফর্ম</h2>

<form method="post">

<input type="text" name="username" placeholder="Username" required>

<input type="email" name="email" placeholder="Email" required>

<input type="password" name="password" placeholder="Password" required>

<input type="number" name="ref_id" placeholder="Referral ID (Optional)">

<select name="position"><option value="left">Left</option><option value="right">Right</option></select>

<button type="submit" name="register">Register</button>

</form>

<p class="message"><?php echo $message;?></p>

<a href="?page=login">লগইন করুন</a>

<?php } elseif($page=='login'){ ?>

<h2>লগইন ফর্ম</h2>

<form method="post">

<input type="email" name="email" placeholder="Email" required>

<input type="password" name="password" placeholder="Password" required>

<button type="submit" name="login">Login</button>

</form>

<p class="message"><?php echo $message;?></p>

<a href="?page=register">রেজিস্ট্রেশন করুন</a>

<?php } elseif($page=='dashboard'){ ?>

<div class="header">

<h1>স্বাগতম, <?php echo $username;?>!</h1>

<p>Skanderbag Dashboard</p>

</div>

<h2>ব্যবহারকারীর তথ্য</h2>

<table>

<tr><th>Username</th><th>Email</th><th>Joined</th><th>Role</th></tr>

<tr><td><?php echo $username;?></td><td><?php echo $email;?></td><td><?php echo $created_at;?></td><td><?php echo $role;?></td></tr>

</table>

<h2>রেফারেল তথ্য</h2>

<table>

<tr><th>Total Referrals</th><th>Referral Income</th></tr>

<tr><td><?php echo $referrals;?></td><td><?php echo $ref_income;?> টাকা</td></tr>

</table>

<h2>রেফারেল লিঙ্ক</h2>

<input type="text" value="https://yoursite.com/register?ref=<?php echo $user_id;?>" readonly style="width:100%;padding:10px;">

<?php if(canSeeP2()){ ?>

<h2>P2 Section (Visible to Admins)</h2>

<p>Sub Admin ও Root Admin এখানে কার্যক্রম করতে পারবেন।</p>

<?php } ?>

<h2>Daily Reward</h2>

<table>

<tr><th>ID সংখ্যা</th><th>Rank</th><th>Daily Reward</th></tr>

<?php for($i=0;$i<count($daily_id);$i++){ ?>

<tr>

<td><?php echo $daily_id[$i];?></td>

<td><?php echo $daily_rank[$i];?></td>

<td><?php echo $daily_reward[$i];?> টাকা</td>

</tr>

<?php } ?>

</table>

<h2>Salary Pool</h2>

<table>

<tr><th>Member সংখ্যা</th><th>Per Member Reward</th><th>Total Income</th></tr>

<?php for($i=0;$i<count($members);$i++){ $total=$members[$i]*$per_member[$i]; ?>

<tr>

<td><?php echo $members[$i];?></td>

<td><?php echo $per_member[$i];?> টাকা</td>

<td><?php echo $total;?> টাকা</td>

</tr>

<?php } ?>

</table>

<?php if(canCreditBalance()){ ?>

<h2>Credit Balance</h2>

<p>আপনি নিজের বা এডমিন থেকে প্রাপ্ত ক্রেডিট ব্যালান্স ট্রান্সফার করতে পারবেন।</p>

<?php } ?>

<a href="?page=logout" class="button">লগআউট</a>

<?php } else { ?>

<p>Page not found!</p>

<?php } ?>

</div>

</body>

</html>