<?php
require_once 'db/config.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['filename'])) {
    $filename = basename($_POST['filename']);
    $uploadDir = 'uploads/';
    $targetFile = $uploadDir . $filename;

    if (file_exists($targetFile) && realpath($targetFile) == realpath($uploadDir . $filename)) {
        if (unlink($targetFile)) {
            try {
                $conn = db();
                $stmt = $conn->prepare("DELETE FROM files WHERE filename = ?");
                $stmt->execute([$filename]);
                header("Location: index.php?message=File+deleted+successfully&type=success");
            } catch (PDOException $e) {
                header("Location: index.php?message=File+deleted+but+database+error:+" . $e->getMessage() . "&type=danger");
            }
        } else {
            header("Location: index.php?message=Error+deleting+file&type=danger");
        }
    } else {
        header("Location: index.php?message=File+not+found+or+invalid&type=danger");
    }
} else {
    header("Location: index.php");
}
?>