<?php
session_start();
if (!isset($_SESSION['user_id']) || $_SERVER['REQUEST_METHOD'] !== 'POST') {
    header('Location: login.php');
    exit();
}

include 'db/config.php';

if (isset($_POST['id'], $_POST['name'])) {
    $id = $_POST['id'];
    $name = trim($_POST['name']);
    $display_order = trim($_POST['display_order']);

    if (!empty($name)) {
        $pdo = db();
        $stmt = $pdo->prepare("UPDATE functions SET name = :name, display_order = :display_order WHERE id = :id");
        $stmt->execute(['name' => $name, 'display_order' => $display_order, 'id' => $id]);
    }
}

header('Location: roles.php');
exit();