<?php

/**
 * Adventi Leads Page
 * Displays the list of collected leads in the admin panel.
 */

// Already restricted in adventi.php with is_admin()

function adventi_leads_page()
{

	// ✔ Seguridad: Solo admins
	if (! current_user_can('manage_options')) {
		wp_die(esc_html__('You do not have permission to access this page.', 'adventi'));
	}

	global $wpdb;

	/**
	 * Table name (SAFE)
	 */
	$table = $wpdb->prefix . 'adventi_leads';

	/**
	 * Query: get all leads
	 */
	$query = "
    SELECT 
        id, 
        name, 
        email, 
        date
    FROM `{$wpdb->prefix}adventi_leads`
    ORDER BY id DESC
";

	/* ✔ FIX: do NOT pass $query variable to get_results() */
	$leads = $wpdb->get_results(
		"
    SELECT 
        id, 
        name, 
        email, 
        date
    FROM `{$wpdb->prefix}adventi_leads`
    ORDER BY id DESC
    "
	);

	$total = is_array($leads) ? count($leads) : 0;

	/**
	 * Today's leads (with prepare)
	 */
	$query_today = $wpdb->prepare(
		"
    SELECT COUNT(*) 
    FROM `{$wpdb->prefix}adventi_leads`
    WHERE DATE(`date`) = %s
    ",
		current_time('Y-m-d')
	);

	/* ✔ FIX: do NOT pass $query_today to get_var() */
	$today = (int) $wpdb->get_var(
		$wpdb->prepare(
			"
        SELECT COUNT(*) 
        FROM `{$wpdb->prefix}adventi_leads`
        WHERE DATE(`date`) = %s
        ",
			current_time('Y-m-d')
		)
	);


	/**
	 * Load leads view template
	 */
	$view_path = ADVENTI_PLUGIN_DIR . 'admin/views/leads-view.php';

	if (file_exists($view_path)) {
		include $view_path;
	}
}