<?php
session_start();
include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/ua.php');
include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/func.php');
include_once($_SERVER['DOCUMENT_ROOT'].'/vx_/site_info.php');
include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/mysql.php');

header('Content-Type: application/json');

if($_SERVER['REQUEST_METHOD'] !== 'POST') {
	echo json_encode(['success' => false, 'error' => 'Invalid request method.']);
	exit;
}

$user = $_SESSION['user'] ?? '';
if(empty($user)) {
	echo json_encode(['success' => false, 'error' => 'Not logged in.']);
	exit;
}

$grant_id = (int)($_POST['grant_id'] ?? 0);
$action = $_POST['action'] ?? '';

if($grant_id <= 0 || !in_array($action, ['add', 'remove'])) {
	echo json_encode(['success' => false, 'error' => 'Invalid parameters.']);
	exit;
}

$client_id = $db->clean($user);
$site = $db->clean($siteCode);

if($action === 'add') {
	$exists = $db->query("SELECT id FROM grdb.grd_usa_saved_grants WHERE site_code = '{$site}' AND client_id = '{$client_id}' AND grants_id = {$grant_id}");
	if(empty($exists)) {
		$db->query("INSERT INTO grdb.grd_usa_saved_grants (site_code, client_id, grants_id, ts_added) VALUES ('{$site}', '{$client_id}', {$grant_id}, NOW())");
	}
} else {
	$db->query("DELETE FROM grdb.grd_usa_saved_grants WHERE site_code = '{$site}' AND client_id = '{$client_id}' AND grants_id = {$grant_id}");
}

echo json_encode(['success' => true]);