<?php
session_start();

if (!isset($_SESSION['user_id'])) {
    header("Location: login.php");
    exit();
}

require_once 'db_connection.php';

if (!isset($_GET['id'])) {
    $_SESSION['error'] = "Expense ID is required.";
    header("Location: expenses.php");
    exit();
}

$expenseId = intval($_GET['id']);

try {
    $stmt = $conn->prepare("DELETE FROM expenses WHERE id = ?");
    $stmt->bind_param("i", $expenseId);
    $stmt->execute();
    $stmt->close();
    $_SESSION['success'] = "Expense deleted successfully!";
} catch (Exception $e) {
    $_SESSION['error'] = "Error deleting expense.";
    error_log("Delete expense error: " . $e->getMessage());
}

header("Location: expenses.php");
exit();
?>