<?php
include '../config.php';
include 'auth.php';

// Check if ID is set
if (!isset($_GET['id']) || empty($_GET['id'])) {
    $_SESSION['error_message'] = 'ไม่พบรหัสผู้ใช้ที่ต้องการลบ';
    header("Location: user-list.php");
    exit;
}

$id = mysqli_real_escape_string($conn, $_GET['id']);

// Check if user exists
$check_query = "SELECT * FROM users WHERE id = $id";
$check_result = mysqli_query($conn, $check_query);

if (mysqli_num_rows($check_result) == 0) {
    $_SESSION['error_message'] = 'ไม่พบข้อมูลผู้ใช้';
    header("Location: user-list.php");
    exit;
}

$user = mysqli_fetch_assoc($check_result);

// Prevent deletion of own account
if ($user['id'] == $_SESSION['user_id']) {
    $_SESSION['error_message'] = 'ไม่สามารถลบบัญชีของตัวเองได้';
    header("Location: user-list.php");
    exit;
}

// Delete user image if exists
if (!empty($user['profile_image'])) {
    $image_path = "../uploads/images/" . $user['profile_image'];
    if (file_exists($image_path)) {
        unlink($image_path);
    }
}

// Delete user
$query = "DELETE FROM users WHERE id = $id";

if (mysqli_query($conn, $query)) {
    $_SESSION['success_message'] = 'ลบข้อมูลผู้ใช้เรียบร้อยแล้ว';
} else {
    $_SESSION['error_message'] = 'เกิดข้อผิดพลาด: ' . mysqli_error($conn);
}

header("Location: user-list.php");
exit;
?>