<?php
require_once 'session.php';
require_once 'config.php';

// Require user to be logged in
requireLogin();

// Get current user
$user = getCurrentUser();
if (!$user) {
    logout();
    getSessionManager()->redirectToLogin('Session expired. Please log in again.');
}

// Initialize database
try {
    $db = new Database();
    $pdo = $db->getConnection();
} catch (Exception $e) {
    logError('Database connection failed in mobile-verification.php: ' . $e->getMessage());
    die('System error. Please try again later.');
}

$errors = [];
$success_message = '';
$step = 'enter_mobile'; // enter_mobile, verify_otp, completed

// Check if mobile is already verified
$mobileData = null;
try {
    $stmt = $pdo->prepare("SELECT mobile_number, is_verified, otp_code, otp_expires_at, verification_attempts FROM mobile_verifications WHERE user_id = ?");
    $stmt->execute([$user['id']]);
    $mobileData = $stmt->fetch();
    
    if ($mobileData && $mobileData['is_verified']) {
        $step = 'completed';
    } elseif ($mobileData && $mobileData['otp_code'] && $mobileData['otp_expires_at'] > date('Y-m-d H:i:s')) {
        $step = 'verify_otp';
    }
} catch (Exception $e) {
    logError('Error fetching mobile verification data', ['user_id' => $user['id'], 'error' => $e->getMessage()]);
}

// Handle form submissions
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_POST['action'])) {
        if ($_POST['action'] === 'send_otp') {
            $mobileNumber = isset($_POST['mobile_number']) ? sanitize($_POST['mobile_number']) : '';
            
            // Validate mobile number
            if (empty($mobileNumber)) {
                $errors[] = 'Please enter your mobile number.';
            } elseif (!preg_match('/^[6-9]\d{9}$/', $mobileNumber)) {
                $errors[] = 'Please enter a valid 10-digit mobile number starting with 6, 7, 8, or 9.';
            } else {
                // Check if mobile number is already verified by another user
                try {
                    $stmt = $pdo->prepare("SELECT user_id FROM mobile_verifications WHERE mobile_number = ? AND is_verified = 1 AND user_id != ?");
                    $stmt->execute([$mobileNumber, $user['id']]);
                    $existingUser = $stmt->fetch();
                    
                    if ($existingUser) {
                        $errors[] = 'This mobile number is already verified by another account.';
                    } else {
                        // Generate OTP
                        $otpCode = sprintf('%06d', mt_rand(100000, 999999));
                        $otpExpiry = date('Y-m-d H:i:s', strtotime('+10 minutes'));
                        
                        // Store OTP in database
                        $stmt = $pdo->prepare("INSERT INTO mobile_verifications (user_id, mobile_number, otp_code, otp_expires_at, verification_attempts) VALUES (?, ?, ?, ?, 0) ON DUPLICATE KEY UPDATE mobile_number = ?, otp_code = ?, otp_expires_at = ?, verification_attempts = 0, updated_at = NOW()");
                        $stmt->execute([$user['id'], $mobileNumber, $otpCode, $otpExpiry, $mobileNumber, $otpCode, $otpExpiry]);
                        
                        // Here you would integrate with SMS gateway to send OTP
                        // For now, we'll just log it for testing
                        logError('OTP generated for mobile verification', [
                            'user_id' => $user['id'],
                            'mobile_number' => $mobileNumber,
                            'otp_code' => $otpCode // Remove this in production
                        ]);
                        
                        $success_message = 'OTP sent to your mobile number. Please enter the 6-digit code below.';
                        $step = 'verify_otp';
                        $mobileData = ['mobile_number' => $mobileNumber, 'verification_attempts' => 0];
                    }
                } catch (Exception $e) {
                    logError('Error sending OTP', ['user_id' => $user['id'], 'mobile' => $mobileNumber, 'error' => $e->getMessage()]);
                    $errors[] = 'Error sending OTP. Please try again.';
                }
            }
        } elseif ($_POST['action'] === 'verify_otp') {
            $otpCode = isset($_POST['otp_code']) ? sanitize($_POST['otp_code']) : '';
            
            if (empty($otpCode)) {
                $errors[] = 'Please enter the OTP code.';
            } elseif (!preg_match('/^\d{6}$/', $otpCode)) {
                $errors[] = 'Please enter a valid 6-digit OTP code.';
            } else {
                try {
                    // Get stored OTP
                    $stmt = $pdo->prepare("SELECT mobile_number, otp_code, otp_expires_at, verification_attempts FROM mobile_verifications WHERE user_id = ?");
                    $stmt->execute([$user['id']]);
                    $storedData = $stmt->fetch();
                    
                    if (!$storedData) {
                        $errors[] = 'No OTP found. Please request a new OTP.';
                        $step = 'enter_mobile';
                    } elseif ($storedData['otp_expires_at'] < date('Y-m-d H:i:s')) {
                        $errors[] = 'OTP has expired. Please request a new OTP.';
                        $step = 'enter_mobile';
                    } elseif ($storedData['verification_attempts'] >= 3) {
                        $errors[] = 'Maximum verification attempts exceeded. Please request a new OTP.';
                        $step = 'enter_mobile';
                    } elseif ($storedData['otp_code'] !== $otpCode) {
                        // Increment verification attempts
                        $stmt = $pdo->prepare("UPDATE mobile_verifications SET verification_attempts = verification_attempts + 1 WHERE user_id = ?");
                        $stmt->execute([$user['id']]);
                        
                        $remainingAttempts = 3 - ($storedData['verification_attempts'] + 1);
                        $errors[] = "Invalid OTP code. You have $remainingAttempts attempts remaining.";
                        $step = 'verify_otp';
                        $mobileData = $storedData;
                    } else {
                        // OTP is correct - verify mobile
                        $pdo->beginTransaction();
                        
                        // Mark mobile as verified
                        $stmt = $pdo->prepare("UPDATE mobile_verifications SET is_verified = 1, verified_at = NOW() WHERE user_id = ?");
                        $stmt->execute([$user['id']]);
                        
                        // Award points for mobile verification
                        $stmt = $pdo->prepare("INSERT INTO user_points (user_id, points, total_earned) VALUES (?, 10.00, 10.00) ON DUPLICATE KEY UPDATE points = points + 10.00, total_earned = total_earned + 10.00");
                        $stmt->execute([$user['id']]);
                        
                        // Add transaction record
                        $stmt = $pdo->prepare("INSERT INTO point_transactions (user_id, transaction_type, points, source, description) VALUES (?, 'earned', 10.00, 'mobile_verification', 'Mobile number verification completed')");
                        $stmt->execute([$user['id']]);
                        
                        $pdo->commit();
                        
                        logError('Mobile verification completed', [
                            'user_id' => $user['id'],
                            'mobile_number' => $storedData['mobile_number'],
                            'points_awarded' => 10
                        ]);
                        
                        $success_message = 'Mobile number verified successfully! You have earned 10 points.';
                        $step = 'completed';
                        $mobileData = array_merge($storedData, ['is_verified' => 1]);
                    }
                } catch (Exception $e) {
                    $pdo->rollback();
                    logError('Error verifying OTP', ['user_id' => $user['id'], 'error' => $e->getMessage()]);
                    $errors[] = 'Error verifying OTP. Please try again.';
                }
            }
        } elseif ($_POST['action'] === 'resend_otp') {
            try {
                $stmt = $pdo->prepare("SELECT mobile_number FROM mobile_verifications WHERE user_id = ?");
                $stmt->execute([$user['id']]);
                $existing = $stmt->fetch();
                
                if ($existing) {
                    // Generate new OTP
                    $otpCode = sprintf('%06d', mt_rand(100000, 999999));
                    $otpExpiry = date('Y-m-d H:i:s', strtotime('+10 minutes'));
                    
                    $stmt = $pdo->prepare("UPDATE mobile_verifications SET otp_code = ?, otp_expires_at = ?, verification_attempts = 0, updated_at = NOW() WHERE user_id = ?");
                    $stmt->execute([$otpCode, $otpExpiry, $user['id']]);
                    
                    // Send SMS using 2Factor
                    require_once 'sms-config.php';
                    $smsResult = sendOTPSMS($existing['mobile_number'], $otpCode);
                    
                    if ($smsResult['success']) {
                        logError('OTP resent successfully via 2Factor', [
                            'user_id' => $user['id'],
                            'mobile_number' => $existing['mobile_number'],
                            'sms_response' => $smsResult['response']
                        ]);
                        $success_message = 'New OTP sent to your mobile number +91-' . $existing['mobile_number'];
                    } else {
                        logError('Failed to resend OTP via 2Factor', [
                            'user_id' => $user['id'],
                            'mobile_number' => $existing['mobile_number'],
                            'error' => $smsResult['message']
                        ]);
                        $errors[] = 'Failed to resend OTP. Please try again or contact support.';
                    }
                    $step = 'verify_otp';
                    $mobileData = $existing;
                }
            } catch (Exception $e) {
                logError('Error resending OTP', ['user_id' => $user['id'], 'error' => $e->getMessage()]);
                $errors[] = 'Error resending OTP. Please try again.';
            }
        }
    }
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
    <title>Mobile Verification - Relevant Reflex</title>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    
    <link rel="apple-touch-icon" href="assets/img/apple-icon.png">
    <link rel="shortcut icon" type="image/x-icon" href="assets/img/favicon.png">

    <link rel="stylesheet" href="assets/css/bootstrap.min.css">
    <link rel="stylesheet" href="assets/css/templatemo.css">
    <link rel="stylesheet" href="assets/css/custom.css">
    <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Roboto:wght@100;200;300;400;500;700;900&display=swap">
    <link rel="stylesheet" href="assets/css/fontawesome.min.css">
    
    <style>
        .verification-header {
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            color: white;
            padding: 2rem 0;
            margin-bottom: 2rem;
        }
        .verification-card {
            background: white;
            border-radius: 15px;
            padding: 2rem;
            box-shadow: 0 4px 20px rgba(0,0,0,0.1);
            margin-bottom: 2rem;
            max-width: 500px;
            margin: 0 auto 2rem;
        }
        .verification-success {
            background: linear-gradient(135deg, #28a745, #20c997) !important;
        }
        .step-indicator {
            display: flex;
            justify-content: center;
            margin-bottom: 2rem;
        }
        .step {
            display: flex;
            align-items: center;
            padding: 0.5rem 1rem;
            border-radius: 25px;
            margin: 0 0.5rem;
            background: #f8f9fa;
            color: #6c757d;
            font-size: 0.9rem;
        }
        .step.active {
            background: linear-gradient(135deg, #28a745, #20c997);
            color: white;
        }
        .step.completed {
            background: #28a745;
            color: white;
        }
        .otp-input {
            text-align: center;
            font-size: 1.5rem;
            letter-spacing: 0.5rem;
            font-weight: bold;
        }
        .btn-verify {
            background: linear-gradient(135deg, #667eea, #764ba2);
            border: none;
            color: white;
            padding: 0.75rem 2rem;
            border-radius: 25px;
            font-weight: bold;
        }
        .btn-verify:hover {
            background: linear-gradient(135deg, #764ba2, #667eea);
            color: white;
        }
        .btn-success-custom {
            background: linear-gradient(135deg, #28a745, #20c997);
            border: none;
            color: white;
            padding: 0.75rem 2rem;
            border-radius: 25px;
            font-weight: bold;
        }
        .btn-success-custom:hover {
            background: linear-gradient(135deg, #20c997, #28a745);
            color: white;
        }
        .mobile-icon {
            font-size: 4rem;
            color: #667eea;
            margin-bottom: 1rem;
        }
        .success-icon {
            font-size: 4rem;
            color: #28a745;
            margin-bottom: 1rem;
        }
    </style>
</head>

<body>
    <!-- Header -->
    <nav class="navbar navbar-expand-lg navbar-light shadow">
        <div class="container d-flex justify-content-between align-items-center">
            <a class="navbar-brand text-success logo h1 align-self-center" href="index.php">
                Relevant Reflex
            </a>
            <div class="d-flex align-items-center">
                <a href="dashboard.php#profiler" class="btn btn-outline-success me-3">
                    <i class="fa fa-arrow-left"></i> Back to Profiler
                </a>
                <span class="text-muted">Welcome, <?php echo htmlspecialchars(explode('@', $user['email'])[0]); ?></span>
            </div>
        </div>
    </nav>

    <!-- Verification Header -->
    <div class="verification-header <?php echo $step === 'completed' ? 'verification-success' : ''; ?>">
        <div class="container text-center">
            <h1>
                <i class="fa fa-mobile-alt"></i> Mobile Verification
                <?php if ($step === 'completed'): ?>
                    <i class="fa fa-check-circle ms-2"></i>
                <?php endif; ?>
            </h1>
            <p class="mb-0">
                <?php if ($step === 'completed'): ?>
                    Your mobile number has been verified successfully!
                <?php else: ?>
                    Verify your mobile number to earn 10 points and receive survey notifications
                <?php endif; ?>
            </p>
        </div>
    </div>

    <div class="container">
        <!-- Step Indicator -->
        <div class="step-indicator">
            <div class="step <?php echo in_array($step, ['enter_mobile', 'verify_otp', 'completed']) ? 'active' : ''; ?> <?php echo in_array($step, ['verify_otp', 'completed']) ? 'completed' : ''; ?>">
                <i class="fa fa-mobile-alt me-2"></i> Enter Mobile
            </div>
            <div class="step <?php echo in_array($step, ['verify_otp', 'completed']) ? 'active' : ''; ?> <?php echo $step === 'completed' ? 'completed' : ''; ?>">
                <i class="fa fa-key me-2"></i> Verify OTP
            </div>
            <div class="step <?php echo $step === 'completed' ? 'active completed' : ''; ?>">
                <i class="fa fa-check-circle me-2"></i> Completed
            </div>
        </div>

        <!-- Error Messages -->
        <?php if (!empty($errors)): ?>
            <div class="alert alert-danger">
                <h5><i class="fa fa-exclamation-triangle"></i> Error</h5>
                <ul class="mb-0">
                    <?php foreach ($errors as $error): ?>
                        <li><?php echo htmlspecialchars($error); ?></li>
                    <?php endforeach; ?>
                </ul>
            </div>
        <?php endif; ?>

        <!-- Success Messages -->
        <?php if ($success_message): ?>
            <div class="alert alert-success">
                <i class="fa fa-check-circle"></i> <?php echo htmlspecialchars($success_message); ?>
            </div>
        <?php endif; ?>

        <!-- Enter Mobile Number Step -->
        <?php if ($step === 'enter_mobile'): ?>
            <div class="verification-card">
                <div class="text-center">
                    <i class="fa fa-mobile-alt mobile-icon"></i>
                    <h4>Enter Your Mobile Number</h4>
                    <p class="text-muted mb-4">We'll send you a 6-digit OTP to verify your mobile number</p>
                </div>
                
                <form method="POST">
                    <input type="hidden" name="action" value="send_otp">
                    <div class="mb-3">
                        <label class="form-label">Mobile Number</label>
                        <div class="input-group">
                            <span class="input-group-text">+91</span>
                            <input type="tel" class="form-control" name="mobile_number" placeholder="Enter 10-digit mobile number" maxlength="10" pattern="[6-9][0-9]{9}" required value="<?php echo $mobileData ? htmlspecialchars($mobileData['mobile_number']) : ''; ?>">
                        </div>
                        <small class="text-muted">Enter a mobile number that you have access to</small>
                    </div>
                    
                    <div class="text-center">
                        <button type="submit" class="btn btn-verify">
                            <i class="fa fa-paper-plane"></i> Send OTP
                        </button>
                    </div>
                </form>
            </div>
        <?php endif; ?>

        <!-- Verify OTP Step -->
        <?php if ($step === 'verify_otp'): ?>
            <div class="verification-card">
                <div class="text-center">
                    <i class="fa fa-key mobile-icon"></i>
                    <h4>Enter OTP Code</h4>
                    <p class="text-muted">We've sent a 6-digit OTP to</p>
                    <p class="fw-bold">+91 <?php echo htmlspecialchars($mobileData['mobile_number']); ?></p>
                </div>
                
                <form method="POST">
                    <input type="hidden" name="action" value="verify_otp">
                    <div class="mb-3">
                        <label class="form-label">Enter 6-digit OTP</label>
                        <input type="text" class="form-control otp-input" name="otp_code" placeholder="000000" maxlength="6" pattern="\d{6}" required>
                        <small class="text-muted">OTP is valid for 10 minutes</small>
                    </div>
                    
                    <div class="text-center">
                        <button type="submit" class="btn btn-verify">
                            <i class="fa fa-check"></i> Verify OTP
                        </button>
                    </div>
                </form>
                
                <div class="text-center mt-3">
                    <form method="POST" style="display: inline;">
                        <input type="hidden" name="action" value="resend_otp">
                        <button type="submit" class="btn btn-link">
                            <i class="fa fa-redo"></i> Resend OTP
                        </button>
                    </form>
                    <span class="mx-2">|</span>
                    <a href="?step=enter_mobile" class="btn btn-link">
                        <i class="fa fa-edit"></i> Change Number
                    </a>
                </div>
            </div>
        <?php endif; ?>

        <!-- Completed Step -->
        <?php if ($step === 'completed'): ?>
            <div class="verification-card">
                <div class="text-center">
                    <i class="fa fa-check-circle success-icon"></i>
                    <h4>Mobile Verified Successfully!</h4>
                    <p class="text-success mb-3">
                        <i class="fa fa-coins"></i> You have earned 10 points!
                    </p>
                    <p class="text-muted">Your mobile number <strong>+91 <?php echo htmlspecialchars($mobileData['mobile_number']); ?></strong> has been verified.</p>
                    <p class="text-muted mb-4">You'll now receive survey notifications and updates on this number.</p>
                    
                    <div class="d-grid gap-2">
                        <a href="dashboard.php#profiler" class="btn btn-success-custom">
                            <i class="fa fa-user-check"></i> Continue Profile Completion
                        </a>
                        <a href="dashboard.php#rewards" class="btn btn-outline-success">
                            <i class="fa fa-coins"></i> View My Points
                        </a>
                    </div>
                </div>
            </div>
        <?php endif; ?>

        <!-- Information Card -->
        <div class="verification-card bg-light">
            <h5><i class="fa fa-info-circle text-info"></i> Why Verify Your Mobile?</h5>
            <ul class="mb-0">
                <li><strong>Earn 10 Points:</strong> Get instant rewards for verification</li>
                <li><strong>Survey Notifications:</strong> Receive SMS alerts for new surveys</li>
                <li><strong>Quick Support:</strong> Get faster support via WhatsApp</li>
                <li><strong>Account Security:</strong> Add an extra layer of security</li>
                <li><strong>Payment Updates:</strong> Get notified about reward payments</li>
            </ul>
        </div>
    </div>

    <!-- Footer -->
    <footer class="bg-dark mt-5" id="tempaltemo_footer">
        <div class="container">
            <div class="row text-light py-4">
                <div class="col-md-4 pt-5">
                    <h2 class="h2 text-success border-bottom pb-3 border-light logo">Relevant Reflex</h2>
                    <ul class="list-unstyled text-light footer-link-list">
                        <li><a class="text-decoration-none" href="dashboard.php">Dashboard</a></li>
                        <li><a class="text-decoration-none" href="dashboard.php#profiler">Complete Profile</a></li>
                        <li><a class="text-decoration-none" href="dashboard.php#rewards">Rewards</a></li>
                    </ul>
                </div>
                <div class="col-md-4 pt-5">
                    <h2 class="h2 text-light border-bottom pb-3 border-light">Support</h2>
                    <ul class="list-unstyled text-light footer-link-list">
                        <li><a class="text-decoration-none" href="user-support.php">Contact Support</a></li>
                        <li><a class="text-decoration-none" href="doubts.php">How It Works</a></li>
                        <li><a class="text-decoration-none" href="contact.php">Contact Us</a></li>
                    </ul>
                </div>
                <div class="col-md-4 pt-5">
                    <h2 class="h2 text-light border-bottom pb-3 border-light">Legal</h2>
                    <ul class="list-unstyled text-light footer-link-list">
                        <li><a class="text-decoration-none" href="privacy.php">Privacy Policy</a></li>
                        <li><a class="text-decoration-none" href="terms.php">Terms of Service</a></li>
                    </ul>
                </div>
            </div>
        </div>
        <div class="w-100 bg-black py-3">
            <div class="container">
                <div class="row pt-2">
                    <div class="col-12">
                        <p class="text-center text-light">
                            Copyright &copy; <?php echo date('Y'); ?> Relevant Reflex | India's Premier Survey Platform
                        </p>
                    </div>
                </div>
            </div>
        </div>
    </footer>

    <!-- Scripts -->
    <script src="assets/js/jquery-1.11.0.min.js"></script>
    <script src="assets/js/jquery-migrate-1.2.1.min.js"></script>
    <script src="assets/js/bootstrap.bundle.min.js"></script>
    <script src="assets/js/templatemo.js"></script>
    <script src="assets/js/custom.js"></script>

    <script>
        // Auto-focus on OTP input
        document.addEventListener('DOMContentLoaded', function() {
            const otpInput = document.querySelector('.otp-input');
            if (otpInput) {
                otpInput.focus();
                
                // Auto-submit when 6 digits are entered
                otpInput.addEventListener('input', function() {
                    if (this.value.length === 6) {
                        // Auto-submit after a short delay
                        setTimeout(() => {
                            this.form.submit();
                        }, 500);
                    }
                });
            }
            
            // Format mobile number input
            const mobileInput = document.querySelector('input[name="mobile_number"]');
            if (mobileInput) {
                mobileInput.addEventListener('input', function() {
                    // Remove non-digits
                    this.value = this.value.replace(/\D/g, '');
                    
                    // Limit to 10 digits
                    if (this.value.length > 10) {
                        this.value = this.value.slice(0, 10);
                    }
                });
            }
        });
    </script>
</body>
</html>