<?php
session_start();
if (!isset($_SESSION['user_id']) || $_SERVER['REQUEST_METHOD'] !== 'POST') {
    header('Location: login.php');
    exit();
}

include 'db/config.php';

if (isset($_POST['name'])) {
    $name = trim($_POST['name']);
    $display_order = trim($_POST['display_order']);
    if (!empty($name)) {
        $pdo = db();
        $stmt = $pdo->prepare("functions (name, display_order) VALUES (:name, :display_order)");
        $stmt->execute(['name' => $name, 'display_order' => $display_order]);
    }
}

header('Location: roles.php');
exit();