<?php
require 'db_connection.php';
session_start();

// Check if the admin is logged in
if (!isset($_SESSION['user_email']) || $_SESSION['role'] !== 'admin') {
    header("Location: login.php");
    exit;
}

// Check if the donation ID is provided
if (isset($_GET['id']) && is_numeric($_GET['id'])) {
    $donation_id = $_GET['id'];

    // Update the donation status to 'rejected'
    $stmt = $conn->prepare("UPDATE material_donations SET status = 'rejected' WHERE id = ?");
    $stmt->bind_param("i", $donation_id);

    if ($stmt->execute()) {
        $_SESSION['success_message'] = "Donation rejected successfully.";
    } else {
        $_SESSION['error_message'] = "Failed to reject the donation. Please try again.";
    }

    $stmt->close();
} else {
    $_SESSION['error_message'] = "Invalid donation ID.";
}

header("Location: admin_dashboard.php");
exit;
?>