<?php
require_once __DIR__ . '/inc/secure.php'; // Security bootstrap
require_once __DIR__ . '/admin-panal/includes/db.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $name    = trim($_POST['name'] ?? '');
    $email   = trim($_POST['email'] ?? '');
    $message = trim($_POST['message'] ?? '');

    if (empty($name) || empty($email) || empty($message)) {
        $_SESSION['flash'] = ['type' => 'danger', 'msg' => 'Please fill all required fields.'];
    } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        $_SESSION['flash'] = ['type' => 'danger', 'msg' => 'Please enter a valid email address.'];
    } else {
        try {
            $stmt = $pdo->prepare("INSERT INTO contact_messages (name, email, message) VALUES (?, ?, ?)");
            if ($stmt->execute([$name, $email, $message])) {
                $_SESSION['flash'] = ['type' => 'success', 'msg' => 'Thank you for your message. We will get back to you soon!'];
            } else {
                $_SESSION['flash'] = ['type' => 'danger', 'msg' => 'Something went wrong. Please try again.'];
            }
        } catch (PDOException $e) {
            $_SESSION['flash'] = ['type' => 'danger', 'msg' => 'Database error: ' . $e->getMessage()];
        }
    }
}

header("Location: contact-us.php");
exit;