<?php
defined('BASEPATH') or exit('No direct script access allowed');

class Spinwheel extends Admin_Controller
{

    public function __construct()
    {
        parent::__construct();
        $this->load->library('session');
        $this->load->model('Spin_model');
    }

    public function index()
    {
        $token = $this->input->get('token');
        if ($token) {
            $valid_token = 'J5K2L4';

            // Validasi token
            if ($token === $valid_token) {
                // Jika token valid, simpan token di session
                $this->session->set_userdata('access_token', $token);

                // Redirect ke halaman tanpa parameter token di URL
                redirect('spinwheel');
            } else {
                // Jika token tidak valid, tampilkan pesan error
                show_error('Invalid token. Access denied.', 403);
            }
        }

        $access_token = $this->session->userdata('access_token');
        if ($access_token) {
            // Token ada di session, user bisa mengakses halaman spin wheel
            $this->load->view('spin_wheel');
        } else {
            // Tidak ada token di URL dan session, tampilkan pesan error
            show_error('No valid token found. Access denied.', 403);
        }
    }

    public function spin()
    {
        // Ambil hadiah dari model berdasarkan peluang
        $prize = $this->Spin_model->get_random_prize();
        echo json_encode(['prize' => $prize]);
    }
    public function log_prize()
    {
        if ($this->input->is_ajax_request()) {
            $prize_name = $this->input->post('result');

            if ($prize_name) {
                if ($this->Spin_model->save_log($prize_name)) {
                    echo json_encode(['status' => 'success', 'message' => 'Log saved successfully.']);
                } else {
                    echo json_encode(['status' => 'error', 'message' => 'Failed to save log.']);
                }
            } else {
                echo json_encode(['status' => 'error', 'message' => 'Prize name is required.']);
            }
        } else {
            show_error('Unauthorized request', 403);
        }
    }
}