delete_message.php

<?php
session_start();
include 'includes/db_connect.php';

// Check login
if (!isset($_SESSION['user_id'])) {
    die("unauthorized");
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['message_id'])) {
    $message_id = intval($_POST['message_id']);
    $user_id = intval($_SESSION['user_id']);

    // 1️⃣ Fetch message details
    $stmt = $conn->prepare("SELECT sender_id, image_path FROM chat_messages WHERE id = ?");
    $stmt->bind_param("i", $message_id);
    $stmt->execute();
    $result = $stmt->get_result();
    $message = $result->fetch_assoc();
    $stmt->close();

    // 2️⃣ Debug check — is the message found?
    if (!$message) {
        die("not_found");
    }

    // 3️⃣ Compare user ID with sender ID
    if ((int)$message['sender_id'] === (int)$user_id) {
        // 4️⃣ If message had an image, delete it from server
        if (!empty($message['image_path'])) {
            $filePath = $message['image_path'];
            if (file_exists($filePath)) {
                unlink($filePath);
            } elseif (file_exists("uploads/chat_images/" . $filePath)) {
                unlink("uploads/chat_images/" . $filePath);
            }
        }

        // 5️⃣ Delete message from database
        $delete = $conn->prepare("DELETE FROM chat_messages WHERE id = ?");
        $delete->bind_param("i", $message_id);
        $delete->execute();
        $delete->close();

        echo "success";
    } else {
        echo "unauthorized";
    }
}
?>