<?php
session_start();
session_regenerate_id(true);

// Enforce HTTPS
if (!isset($_SERVER['HTTPS']) || $_SERVER['HTTPS'] !== 'on') {
    header("Location: https://" . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
    exit();
}

// Disable debug in production
if ($_SERVER['SERVER_NAME'] !== 'localhost') {
    ini_set('display_errors', 0);
    error_reporting(0);
}

// Check if admin is logged in
if (!isset($_SESSION['student_id']) || $_SESSION['role'] !== 'admin') {
    header("Location: login.php");
    exit();
}

// Database connection
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "school_db";

try {
    $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
    $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch(PDOException $e) {
    error_log("Connection failed: " . $e->getMessage());
    $error = "Connection failed. Please contact support.";
}

// CSRF token
if (!isset($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf_token = $_SESSION['csrf_token'];

// Fetch admin's student details
try {
    $stmt = $conn->prepare("SELECT name, grade, contact FROM students WHERE id = :student_id");
    $stmt->execute([':student_id' => $_SESSION['student_id']]);
    $admin_student = $stmt->fetch(PDO::FETCH_ASSOC);
} catch(PDOException $e) {
    error_log("Admin student fetch error: " . $e->getMessage());
    $error = "Error fetching admin's student data.";
}

// Fetch resources
$resources = [];
try {
    $stmt = $conn->query("SELECT id, title, description, file_path, uploaded_date FROM resources ORDER BY uploaded_date DESC");
    $resources = $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
} catch(PDOException $e) {
    error_log("Resources fetch error: " . $e->getMessage());
    $error = "Error fetching resources.";
}

// Handle add/edit/delete
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['csrf_token'] === $csrf_token) {
    if ($_POST['action'] === 'add_resource') {
        $title = filter_input(INPUT_POST, 'title', FILTER_SANITIZE_STRING);
        $description = filter_input(INPUT_POST, 'description', FILTER_SANITIZE_STRING);

        if ($title && $description && !empty($_FILES['file']['name'])) {
            $target_dir = "Uploads/";
            $file_path = $target_dir . basename($_FILES['file']['name']);
            $file_type = strtolower(pathinfo($file_path, PATHINFO_EXTENSION));
            $allowed_types = ['pdf', 'doc', 'docx', 'txt'];

            if (in_array($file_type, $allowed_types)) {
                if (move_uploaded_file($_FILES['file']['tmp_name'], $file_path)) {
                    try {
                        $stmt = $conn->prepare("INSERT INTO resources (title, description, file_path, uploaded_date) VALUES (:title, :description, :file_path, NOW())");
                        $stmt->execute([
                            ':title' => $title,
                            ':description' => $description,
                            ':file_path' => $file_path
                        ]);
                        $success = "Resource added successfully.";
                        header("Location: manage_resources.php?success=" . urlencode($success));
                        exit();
                    } catch(PDOException $e) {
                        error_log("Add resource error: " . $e->getMessage());
                        $error = "Error adding resource.";
                    }
                } else {
                    $error = "Failed to upload file.";
                }
            } else {
                $error = "Invalid file type. Allowed types: pdf, doc, docx, txt.";
            }
        } else {
            $error = "Title, description, and file are required.";
        }
    } elseif ($_POST['action'] === 'edit_resource') {
        $id = filter_input(INPUT_POST, 'id', FILTER_VALIDATE_INT);
        $title = filter_input(INPUT_POST, 'title', FILTER_SANITIZE_STRING);
        $description = filter_input(INPUT_POST, 'description', FILTER_SANITIZE_STRING);

        if ($id && $title && $description) {
            $file_path = null;
            if (!empty($_FILES['file']['name'])) {
                $target_dir = "Uploads/";
                $file_path = $target_dir . basename($_FILES['file']['name']);
                $file_type = strtolower(pathinfo($file_path, PATHINFO_EXTENSION));
                $allowed_types = ['pdf', 'doc', 'docx', 'txt'];

                if (!in_array($file_type, $allowed_types)) {
                    $error = "Invalid file type. Allowed types: pdf, doc, docx, txt.";
                } elseif (!move_uploaded_file($_FILES['file']['tmp_name'], $file_path)) {
                    $error = "Failed to upload file.";
                }
            }

            if (!isset($error)) {
                try {
                    $stmt = $conn->prepare("UPDATE resources SET title = :title, description = :description" . ($file_path ? ", file_path = :file_path" : "") . " WHERE id = :id");
                    $params = [':title' => $title, ':description' => $description, ':id' => $id];
                    if ($file_path) {
                        $params[':file_path'] = $file_path;
                    }
                    $stmt->execute($params);
                    $success = "Resource updated successfully.";
                    header("Location: manage_resources.php?success=" . urlencode($success));
                    exit();
                } catch(PDOException $e) {
                    error_log("Edit resource error: " . $e->getMessage());
                    $error = "Error updating resource.";
                }
            }
        } else {
            $error = "Invalid resource details.";
        }
    } elseif ($_POST['action'] === 'delete_resource') {
        $id = filter_input(INPUT_POST, 'id', FILTER_VALIDATE_INT);
        if ($id) {
            try {
                $stmt = $conn->prepare("SELECT file_path FROM resources WHERE id = :id");
                $stmt->execute([':id' => $id]);
                $file_path = $stmt->fetchColumn();
                if ($file_path && file_exists($file_path)) {
                    unlink($file_path);
                }
                $stmt = $conn->prepare("DELETE FROM resources WHERE id = :id");
                $stmt->execute([':id' => $id]);
                $success = "Resource deleted successfully.";
                header("Location: manage_resources.php?success=" . urlencode($success));
                exit();
            } catch(PDOException $e) {
                error_log("Delete resource error: " . $e->getMessage());
                $error = "Error deleting resource.";
            }
        } else {
            $error = "Invalid resource ID.";
        }
    }
}

// Handle logout
if (isset($_POST['logout']) && $_POST['csrf_token'] === $csrf_token) {
    session_unset();
    session_destroy();
    header("Location: login.php");
    exit();
}

// Handle redirect messages
$message = '';
$alert_type = '';
if (isset($_GET['success'])) {
    $message = htmlspecialchars($_GET['success']);
    $alert_type = 'alert-success';
} elseif (isset($_GET['error'])) {
    $message = htmlspecialchars($_GET['error']);
    $alert_type = 'alert-danger';
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="description" content="Manage resources for Gakero E.L.C.K High School.">
    <meta name="keywords" content="Gakero E.L.C.K High School, admin, resource management">
    <meta name="author" content="Gakero E.L.C.K High School">
    <title>Manage Resources - Gakero E.L.C.K High School</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css">
    <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;600&display=swap" rel="stylesheet">
    <style>
        * { box-sizing: border-box; }
        body { font-family: 'Poppins', sans-serif; background-color: #f5f6f5; color: #333; margin: 0; overflow-x: hidden; }
        .navbar { background-color: #003087; padding: 8px 0; box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1); z-index: 1001; position: sticky; top: 0; }
        .navbar-brand { font-size: 1.25rem; font-weight: 600; color: #fff !important; }
        .nav-link { font-size: 0.9rem; color: #fff !important; padding: 6px 12px; transition: color 0.3s ease, background-color 0.3s ease; }
        .nav-link:hover { color: #a9d6e5 !important; background-color: rgba(255, 255, 255, 0.1); border-radius: 4px; }
        .navbar-toggler { border-color: rgba(255, 255, 255, 0.5); }
        .sidebar { position: fixed; top: 48px; left: 0; width: 250px; height: calc(100vh - 48px); background-color: #003087; color: #fff; overflow-y: auto; z-index: 1000; box-shadow: 2px 0 4px rgba(0, 0, 0, 0.1); transition: transform 0.3s ease; }
        .sidebar-header { border-bottom: 1px solid rgba(255, 255, 255, 0.2); }
        .sidebar .nav-link { font-size: 0.95rem; padding: 10px 15px; color: #fff; transition: background-color 0.3s ease, padding-left 0.3s ease; }
        .sidebar .nav-link:hover { background-color: rgba(255, 255, 255, 0.1); padding-left: 20px; }
        .profile-card { background: rgba(255, 255, 255, 0.05); border-radius: 8px; margin: 15px; padding: 15px; }
        .avatar { width: 80px; height: 80px; display: flex; align-items: center; justify-content: center; border-radius: 50%; }
        main { margin-left: 250px; padding: 15px; min-height: calc(100vh - 48px); background-color: #fff; border-radius: 8px; box-shadow: 0 2px 8px rgba(0, 0, 0, 0.05); z-index: 999; width: calc(100% - 250px); }
        footer { background-color: #003087; color: #fff; padding: 20px 0; margin-top: 20px; z-index: 999; width: 100%; }
        footer a { color: #a9d6e5; text-decoration: none; transition: color 0.3s ease; }
        footer a:hover { color: #fff; }
        .hero-section { background: linear-gradient(135deg, #003087, #005f73); border-radius: 8px; padding: 20px; margin-bottom: 2rem; }
        .hero-section h1 { font-size: 1.75rem; font-weight: 600; }
        .hero-section p { font-size: 1rem; }
        .section-title { font-size: 1.75rem; color: #003087; margin-bottom: 1rem; position: relative; }
        .section-title::after { content: ''; display: block; width: 50px; height: 3px; background: #003087; margin-top: 0.5rem; }
        .card { border: none; border-radius: 8px; box-shadow: 0 2px 8px rgba(0, 0, 0, 0.1); transition: transform 0.3s ease, box-shadow 0.3s ease; }
        .card:hover { transform: translateY(-5px); box-shadow: 0 6px 16px rgba(0, 0, 0, 0.2); }
        .card-title { font-size: 1.25rem; color: #003087; margin-bottom: 0.75rem; }
        .card-body { padding: 1.5rem; }
        .btn-primary { background-color: #003087; border: none; padding: 0.75rem 1.5rem; border-radius: 8px; transition: background-color 0.3s ease; }
        .btn-primary:hover { background-color: #00205b; }
        .btn-outline-primary { border-color: #003087; color: #003087; }
        .btn-outline-primary:hover { background-color: #003087; color: #fff; }
        .btn-outline-danger { border-color: #dc3545; color: #dc3545; }
        .btn-outline-danger:hover { background-color: #dc3545; color: #fff; }
        .table { margin-top: 1rem; }
        .table th { background-color: #e9ecef; color: #003087; }
        .form-control { border-radius: 8px; border: 1px solid #ced4da; transition: border-color 0.3s ease, box-shadow 0.3s ease; }
        .form-control:focus { border-color: #003087; box-shadow: 0 0 5px rgba(0, 48, 135, 0.5); }
        .form-label { color: #003087; }
        .alert { border-radius: 8px; font-size: 0.9rem; }
        @media (max-width: 991px) {
            .sidebar { display: none; }
            main { margin-left: 0; width: 100%; }
            .navbar-brand { font-size: 1.1rem; }
            .nav-link { font-size: 0.85rem; }
            .hero-section { padding: 2rem 0; }
            .hero-section h1 { font-size: 1.5rem; }
            .section-title { font-size: 1.5rem; }
        }
        @media (min-width: 992px) {
            .sidebar { display: block; }
            main { margin-left: 250px; width: calc(100% - 250px); }
        }
    </style>
</head>
<body>
    <nav class="navbar navbar-expand-lg bg-primary text-white">
        <div class="container-fluid">
            <a class="navbar-brand" href="index.php">Gakero E.L.C.K High School</a>
            <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarNav" aria-controls="navbarNav" aria-expanded="false" aria-label="Toggle navigation">
                <span class="navbar-toggler-icon"></span>
            </button>
            <div class="collapse navbar-collapse" id="navbarNav">
                <ul class="navbar-nav ms-auto">
                    <li class="nav-item"><a class="nav-link" href="index.php">Home</a></li>
                    <li class="nav-item"><a class="nav-link" href="about.php">About</a></li>
                    <li class="nav-item"><a class="nav-link" href="contact.php">Contact</a></li>
                    <li class="nav-item"><a class="nav-link" href="news.php">News</a></li>
                    <li class="nav-item">
                        <form method="POST" action="manage_resources.php" style="display:inline;">
                            <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                            <button type="submit" name="logout" class="nav-link btn btn-link text-white">Logout</button>
                        </form>
                    </li>
                </ul>
            </div>
        </div>
    </nav>

    <div class="d-flex">
        <nav class="sidebar bg-primary text-white" id="sidebar">
            <div class="sidebar-header text-center p-3">
                <h4 class="mb-0">Gakero E.L.C.K</h4>
            </div>
            <div class="profile-card">
                <div class="text-center">
                    <div class="avatar bg-light text-primary rounded-circle mx-auto mb-2" role="img" aria-label="Admin profile icon">
                        <i class="bi bi-person-circle fs-2"></i>
                    </div>
                    <h6 class="mb-1"><?php echo htmlspecialchars($admin_student['name'] ?? 'Admin'); ?></h6>
                    <small class="text-white-50">ID: <?php echo htmlspecialchars($_SESSION['student_id'] ?? 'N/A'); ?></small><br>
                    <small class="text-white-50">Grade: <?php echo htmlspecialchars($admin_student['grade'] ?? 'N/A'); ?></small><br>
                    <small class="text-white-50">Contact: <?php echo htmlspecialchars($admin_student['contact'] ?? 'N/A'); ?></small>
                </div>
            </div>
            <ul class="nav flex-column p-3">
                <li class="nav-item"><a class="nav-link text-white" href="admin_page.php"><i class="bi bi-house-door me-2"></i>Dashboard</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="accommodation.php"><i class="bi bi-building me-2"></i>Manage Accommodation</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_academics.php"><i class="bi bi-book me-2"></i>Manage Academics</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_clearance.php"><i class="bi bi-check-circle me-2"></i>Manage Clearance</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_contact_messages.php"><i class="bi bi-envelope me-2"></i>Manage Contact Messages</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_financials.php"><i class="bi bi-wallet me-2"></i>Manage Financials</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_news.php"><i class="bi bi-newspaper me-2"></i>Manage News</a></li>
                <li class="nav-item"><a class="nav-link text-white active" href="manage_resources.php"><i class="bi bi-file-earmark me-2"></i>Manage Resources</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_special_exams.php"><i class="bi bi-pencil-square me-2"></i>Manage Special Exams</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_students.php"><i class="bi bi-people me-2"></i>Manage Students</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_student_requests.php"><i class="bi bi-file-text me-2"></i>Manage Student Requests</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_timetables.php"><i class="bi bi-calendar me-2"></i>Manage Timetables</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_transactions.php"><i class="bi bi-currency-exchange me-2"></i>Manage Transactions</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_transfers.php"><i class="bi bi-arrow-left-right me-2"></i>Manage Transfers</a></li>
                <li class="nav-item"><a class="nav-link text-white" href="manage_users.php"><i class="bi bi-person-circle me-2"></i>Manage Users</a></li>
                <li class="nav-item">
                    <form method="POST">
                        <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                        <button type="submit" name="logout" class="nav-link text-white bg-transparent border-0"><i class="bi bi-box-arrow-right me-2"></i>Logout</button>
                    </form>
                </li>
            </ul>
        </nav>

        <main class="flex-grow-1 p-4">
            <button class="btn btn-primary d-lg-none mb-3" type="button" data-bs-toggle="offcanvas" data-bs-target="#sidebarOffcanvas" aria-controls="sidebarOffcanvas">
                <i class="bi bi-list"></i> Menu
            </button>
            <div class="offcanvas offcanvas-start bg-primary text-white" tabindex="-1" id="sidebarOffcanvas" aria-labelledby="sidebarOffcanvasLabel">
                <div class="offcanvas-header">
                    <h5 class="offcanvas-title" id="sidebarOffcanvasLabel">Gakero E.L.C.K</h5>
                    <button type="button" class="btn-close btn-close-white" data-bs-dismiss="offcanvas" aria-label="Close"></button>
                </div>
                <div class="offcanvas-body">
                    <div class="profile-card">
                        <div class="text-center">
                            <div class="avatar bg-light text-primary rounded-circle mx-auto mb-2" role="img" aria-label="Admin profile icon">
                                <i class="bi bi-person-circle fs-2"></i>
                            </div>
                            <h6 class="mb-1"><?php echo htmlspecialchars($admin_student['name'] ?? 'Admin'); ?></h6>
                            <small class="text-white-50">ID: <?php echo htmlspecialchars($_SESSION['student_id'] ?? 'N/A'); ?></small><br>
                            <small class="text-white-50">Grade: <?php echo htmlspecialchars($admin_student['grade'] ?? 'N/A'); ?></small><br>
                            <small class="text-white-50">Contact: <?php echo htmlspecialchars($admin_student['contact'] ?? 'N/A'); ?></small>
                        </div>
                    </div>
                    <ul class="nav flex-column">
                        <li class="nav-item"><a class="nav-link text-white" href="admin_page.php"><i class="bi bi-house-door me-2"></i>Dashboard</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="accommodation.php"><i class="bi bi-building me-2"></i>Manage Accommodation</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_academics.php"><i class="bi bi-book me-2"></i>Manage Academics</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_clearance.php"><i class="bi bi-check-circle me-2"></i>Manage Clearance</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_contact_messages.php"><i class="bi bi-envelope me-2"></i>Manage Contact Messages</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_financials.php"><i class="bi bi-wallet me-2"></i>Manage Financials</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_news.php"><i class="bi bi-newspaper me-2"></i>Manage News</a></li>
                        <li class="nav-item"><a class="nav-link text-white active" href="manage_resources.php"><i class="bi bi-file-earmark me-2"></i>Manage Resources</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_special_exams.php"><i class="bi bi-pencil-square me-2"></i>Manage Special Exams</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_students.php"><i class="bi bi-people me-2"></i>Manage Students</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_student_requests.php"><i class="bi bi-file-text me-2"></i>Manage Student Requests</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_timetables.php"><i class="bi bi-calendar me-2"></i>Manage Timetables</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_transactions.php"><i class="bi bi-currency-exchange me-2"></i>Manage Transactions</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_transfers.php"><i class="bi bi-arrow-left-right me-2"></i>Manage Transfers</a></li>
                        <li class="nav-item"><a class="nav-link text-white" href="manage_users.php"><i class="bi bi-person-circle me-2"></i>Manage Users</a></li>
                        <li class="nav-item">
                            <form method="POST">
                                <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                                <button type="submit" name="logout" class="nav-link text-white bg-transparent border-0"><i class="bi bi-box-arrow-right me-2"></i>Logout</button>
                            </form>
                        </li>
                    </ul>
                </div>
            </div>

            <header class="hero-section text-white text-center py-4 rounded mb-4">
                <h1 class="display-5">Manage Resources</h1>
                <p class="lead">Add, edit, or delete resources</p>
            </header>

            <?php if ($message): ?>
                <div class="alert <?php echo $alert_type; ?> alert-dismissible fade show" role="alert">
                    <?php echo $message; ?>
                    <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                </div>
            <?php endif; ?>

            <section class="mb-5">
                <h2 class="section-title">Add Resource</h2>
                <div class="card">
                    <div class="card-body">
                        <form method="POST" enctype="multipart/form-data">
                            <input type="hidden" name="action" value="add_resource">
                            <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                            <div class="mb-3">
                                <label for="title" class="form-label">Title</label>
                                <input type="text" id="title" name="title" class="form-control" required>
                            </div>
                            <div class="mb-3">
                                <label for="description" class="form-label">Description</label>
                                <textarea id="description" name="description" class="form-control" rows="4" required></textarea>
                            </div>
                            <div class="mb-3">
                                <label for="file" class="form-label">File (PDF, DOC, DOCX, TXT)</label>
                                <input type="file" id="file" name="file" class="form-control" accept=".pdf,.doc,.docx,.txt" required>
                            </div>
                            <button type="submit" class="btn btn-primary">Add Resource</button>
                        </form>
                    </div>
                </div>
            </section>

            <section class="mb-5">
                <h2 class="section-title">Resources</h2>
                <div class="table-responsive">
                    <table class="table table-bordered table-striped">
                        <thead>
                            <tr>
                                <th scope="col">Title</th>
                                <th scope="col">Description</th>
                                <th scope="col">File</th>
                                <th scope="col">Uploaded Date</th>
                                <th scope="col">Actions</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php if (!empty($resources)): ?>
                                <?php foreach ($resources as $item): ?>
                                    <tr>
                                        <td><?php echo htmlspecialchars($item['title']); ?></td>
                                        <td><?php echo htmlspecialchars(substr($item['description'], 0, 50)) . (strlen($item['description']) > 50 ? '...' : ''); ?></td>
                                        <td><a href="<?php echo htmlspecialchars($item['file_path']); ?>" target="_blank"><?php echo htmlspecialchars(basename($item['file_path'])); ?></a></td>
                                        <td><?php echo date('F j, Y', strtotime($item['uploaded_date'])); ?></td>
                                        <td>
                                            <button class="btn btn-outline-primary btn-sm" data-bs-toggle="modal" data-bs-target="#editResourceModal<?php echo $item['id']; ?>">Edit</button>
                                            <form method="POST" style="display: inline;" onsubmit="return confirm('Are you sure you want to delete this resource?');">
                                                <input type="hidden" name="action" value="delete_resource">
                                                <input type="hidden" name="id" value="<?php echo htmlspecialchars($item['id']); ?>">
                                                <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                                                <button type="submit" class="btn btn-outline-danger btn-sm">Delete</button>
                                            </form>
                                        </td>
                                    </tr>
                                    <div class="modal fade" id="editResourceModal<?php echo $item['id']; ?>" tabindex="-1" aria-labelledby="editResourceModalLabel<?php echo $item['id']; ?>" aria-hidden="true">
                                        <div class="modal-dialog">
                                            <div class="modal-content">
                                                <div class="modal-header">
                                                    <h5 class="modal-title" id="editResourceModalLabel<?php echo $item['id']; ?>">Edit Resource</h5>
                                                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                                                </div>
                                                <div class="modal-body">
                                                    <form method="POST" enctype="multipart/form-data">
                                                        <input type="hidden" name="action" value="edit_resource">
                                                        <input type="hidden" name="id" value="<?php echo htmlspecialchars($item['id']); ?>">
                                                        <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                                                        <div class="mb-3">
                                                            <label for="title_<?php echo $item['id']; ?>" class="form-label">Title</label>
                                                            <input type="text" id="title_<?php echo $item['id']; ?>" name="title" class="form-control" value="<?php echo htmlspecialchars($item['title']); ?>" required>
                                                        </div>
                                                        <div class="mb-3">
                                                            <label for="description_<?php echo $item['id']; ?>" class="form-label">Description</label>
                                                            <textarea id="description_<?php echo $item['id']; ?>" name="description" class="form-control" rows="4" required><?php echo htmlspecialchars($item['description']); ?></textarea>
                                                        </div>
                                                        <div class="mb-3">
                                                            <label for="file_<?php echo $item['id']; ?>" class="form-label">File (Optional, PDF, DOC, DOCX, TXT)</label>
                                                            <input type="file" id="file_<?php echo $item['id']; ?>" name="file" class="form-control" accept=".pdf,.doc,.docx,.txt">
                                                        </div>
                                                        <button type="submit" class="btn btn-primary">Save Changes</button>
                                                    </form>
                                                </div>
                                            </div>
                                        </div>
                                    </div>
                                <?php endforeach; ?>
                            <?php else: ?>
                                <tr><td colspan="5" class="text-center">No resources found.</td></tr>
                            <?php endif; ?>
                        </tbody>
                    </table>
                </div>
            </section>
        </main>
    </div>

    <footer class="bg-dark text-white text-center py-4">
        <div class="container">
            <p>&copy; <?php echo date("Y"); ?> Gakero E.L.C.K High School. All rights reserved.</p>
            <p>Kisii County, Gucha Sub-county, Misesi Location</p>
            <p>Email: <a href="mailto:info@gakeroelckhigh.edu" class="text-white">info@gakeroelckhigh.edu</a> | Phone: <a href="tel:+1234567890" class="text-white">(123) 456-7890</a></p>
        </div>
    </footer>

    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
</body>
</html>