update_request.php

<?php
session_start();
include 'includes/db_connect.php';

if (!isset($_SESSION['user_id'])) {
    header("Location: auth/login.php");
    exit();
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['request_id'], $_POST['action'])) {
    $request_id = intval($_POST['request_id']);
    $action = $_POST['action'];
    $provider_id = $_SESSION['user_id'];

    // 🔹 Fetch requester ID
    $stmt = $conn->prepare("SELECT requester_id FROM requests WHERE id = ?");
    $stmt->bind_param("i", $request_id);
    $stmt->execute();
    $stmt->bind_result($requester_id);
    $stmt->fetch();
    $stmt->close();

    if (!$requester_id) {
        die("❌ Invalid request ID");
    }

    // 🔹 Decide status
    if ($action === 'accept') {
        $status = 'accepted';
    } elseif ($action === 'reject') {
        $status = 'rejected';
    } else {
        die("❌ Invalid action");
    }

    // 🔹 Update request status
    $update = $conn->prepare("UPDATE requests SET status = ? WHERE id = ?");
    $update->bind_param("si", $status, $request_id);
    $update->execute();
    $update->close();

    // 🔹 Add notification for requester
    $username = $_SESSION['username'] ?? 'Someone';
    $message = $status === 'accepted'
        ? "$username accepted your skill swap request!"
        : "$username rejected your skill swap request!";
    $type = $status;

    $notify = $conn->prepare("
        INSERT INTO notifications (user_id, message, type, is_read, created_at)
        VALUES (?, ?, ?, 0, NOW())
    ");
    $notify->bind_param("iss", $requester_id, $message, $type);
    $notify->execute();
    $notify->close();

    // ✅ Redirect back
    header("Location: requests_received.php?status=$status");
    exit();
} else {
    echo "⚠️ Invalid request.";
}
?>