<?php
header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Headers: Content-Type");
header("Access-Control-Allow-Methods: POST, OPTIONS");
if ($_SERVER["REQUEST_METHOD"] === "OPTIONS") { http_response_code(200); exit; }

$data = json_decode(file_get_contents("php://input"), true) ?: [];
$name = trim($data["name"] ?? "");
$email = trim($data["email"] ?? "");
$message = trim($data["message"] ?? "");
$subject = trim($data["subject"] ?? "contact");
$source = trim($data["source"] ?? "site");
$company = trim($data["company"] ?? "");

if (!$email) { echo json_encode(["success"=>false,"error"=>"Email requis"]); exit; }

// Store in DB
$pg = pg_connect("host=127.0.0.1 dbname=adx_system user=postgres");
if ($pg) {
    pg_query($pg, "CREATE TABLE IF NOT EXISTS admin.contact_messages (id SERIAL PRIMARY KEY, name TEXT, email TEXT, company TEXT, subject TEXT, message TEXT, source TEXT, read BOOLEAN DEFAULT false, created_at TIMESTAMP DEFAULT NOW())");
    $n = pg_escape_string($pg, $name);
    $e = pg_escape_string($pg, $email);
    $c = pg_escape_string($pg, $company);
    $s = pg_escape_string($pg, $subject);
    $m = pg_escape_string($pg, $message);
    $src = pg_escape_string($pg, $source);
    pg_query($pg, "INSERT INTO admin.contact_messages (name,email,company,subject,message,source) VALUES('$n','$e','$c','$s','$m','$src')");
    pg_close($pg);
}

// Log for safety
@file_put_contents("/tmp/weval-contacts.log", date("Y-m-d H:i")." | $name | $email | $subject | $message
", FILE_APPEND);

// Send email notification to Yanis
$headers = "From: WEVAL Notifications <noreply@weval-consulting.com>
Content-Type: text/plain; charset=UTF-8";
@mail("yacineutt@gmail.com", "WEVAL Contact: $subject - $name", "Nouveau message WEVAL:

Nom: $name
Email: $email
Company: $company
Sujet: $subject
Message: $message
Source: $source
Date: ".date("Y-m-d H:i"), $headers);

echo json_encode(["success"=>true,"message"=>"Message envoyé. Nous vous contacterons sous 24h."]);