<?php
if(session_status() === PHP_SESSION_NONE){
    session_start();
}

include($_SERVER['DOCUMENT_ROOT']."/wall/baba/shiva.php");

// login check
if(!isset($_SESSION['wall_user'])){
    echo "not_allowed";
    exit;
}

$login_user = $_SESSION['wall_user'];

// active check
$check = mysqli_fetch_assoc(mysqli_query($conn,"
SELECT is_active FROM wall_users 
WHERE username='$login_user'
"));

if(!$check || $check['is_active'] == 0){
    echo "not_active";
    exit;
}

// POST check
if(!isset($_POST['field']) || !isset($_POST['value'])){
    echo "invalid";
    exit;
}

$field = $_POST['field'];
$value = mysqli_real_escape_string($conn, $_POST['value']);

// empty check
if(trim($value) == ""){
    echo "empty";
    exit;
}

// allowed fields
if(!in_array($field, ['name','about'])){
    echo "invalid";
    exit;
}

// ✅ FINAL UPDATE (single query only)
mysqli_query($conn,"
UPDATE wall_users 
SET $field='$value' 
WHERE username='$login_user'
");

echo "success";
?>