<?php
session_start();
require_once 'config.php';

$pdo = getConexaoAtiva(); // Banco Principal (Xtream/XUI para os clientes) - OBRIGATÓRIO PARA O SIDEBAR.PHP
$pdo_int = getConexaoInterna(); // Banco Local (Configs e Logs do Radar)

$pdo->exec("SET NAMES utf8mb4");
$pdo_int->exec("SET NAMES utf8mb4");

// --- PROTEÇÃO DE ADMINISTRADOR ---
if (!isset($_SESSION['user_id']) || $_SESSION['user_role'] !== 'admin') {
    die("Acesso negado. Apenas administradores podem acessar esta página.");
}

$id_usuario = $_SESSION['user_id'];
$nome_usuario = $_SESSION['username'] ?? 'Admin';
$role = 'admin';

// ====================================================================
// INTELIGÊNCIA ARTIFICIAL: DETECTA SE É XUI ONE OU XTREAM UI
// ====================================================================
$modo_ativo = 'interno';
try {
    $modo_ativo = $pdo_int->query("SELECT modo_ativo FROM configuracoes LIMIT 1")->fetchColumn() ?: 'interno';
} catch (Exception $e) {}

$tabela_clientes = ($modo_ativo === 'xui') ? '`lines`' : '`users`';

// --- INÍCIO: BUSCA DE PERSONALIZAÇÃO DINÂMICA ---
$nome_painel = 'TOP IPTV';
$logo_url = '';
$cor_primaria = '#007bff';

try {
    $tabela_existe = $pdo_int->query("SHOW TABLES LIKE 'painel_config'")->rowCount() > 0;
    if ($tabela_existe) {
        $config_painel = $pdo_int->query("SELECT * FROM painel_config LIMIT 1")->fetch(PDO::FETCH_ASSOC);
        if ($config_painel) {
            $nome_painel = !empty($config_painel['nome_painel']) ? $config_painel['nome_painel'] : $nome_painel;
            $logo_url = !empty($config_painel['logo_url']) ? $config_painel['logo_url'] : $logo_url;
            $cor_primaria = !empty($config_painel['cor_primaria']) ? $config_painel['cor_primaria'] : $cor_primaria;
        }
    }
} catch (Exception $e) { }

// --- LÓGICA DE MENU DINÂMICO PARA O BINSTREAM P2P ---
$api_conf = ['api_binstream_url' => ''];
try {
    $api_conf = $pdo_int->query("SELECT api_binstream_url FROM painel_config LIMIT 1")->fetch(PDO::FETCH_ASSOC) ?: ['api_binstream_url' => ''];
} catch (Exception $e) {}

// Busca saldo para o menu
try {
    $user_credits = $pdo->query("SELECT credits FROM reg_users WHERE id = " . intval($id_usuario))->fetchColumn() ?: 0;
} catch (Exception $e) { $user_credits = 0; }
// --- FIM: BUSCA DE PERSONALIZAÇÃO DINÂMICA ---

// =========================================================================
// BANCO DE DADOS: TABELAS ANTI-FRAUDE E AJUSTE NOS USERS
// =========================================================================
try {
    $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    
    // Adiciona as colunas espiãs na tabela de usuários do banco externo, se não existirem
    $check_ip = $pdo->query("SHOW COLUMNS FROM $tabela_clientes LIKE 'last_ip_connected'");
    if (!$check_ip->fetch()) {
        $pdo->exec("ALTER TABLE $tabela_clientes ADD COLUMN `last_ip_connected` varchar(50) DEFAULT NULL, 
                                                    ADD COLUMN `last_user_agent` varchar(255) DEFAULT NULL,
                                                    ADD COLUMN `last_connect_time` int(11) DEFAULT 0");
    }

    // Cria tabela de configuração do Radar no BANCO INTERNO
    $pdo_int->exec("CREATE TABLE IF NOT EXISTS `config_antifraude` (
        `id` int(11) PRIMARY KEY,
        `status` tinyint(1) DEFAULT 1,
        `minutos_tolerancia` int(11) DEFAULT 10
    )");
    
    if ($pdo_int->query("SELECT COUNT(*) FROM config_antifraude")->fetchColumn() == 0) {
        $pdo_int->exec("INSERT INTO config_antifraude (id, status, minutos_tolerancia) VALUES (1, 1, 10)");
    }

    // Cria tabela de registro de malandros (Logs) no BANCO INTERNO
    $pdo_int->exec("CREATE TABLE IF NOT EXISTS `logs_antifraude` (
        `id` int(11) AUTO_INCREMENT PRIMARY KEY,
        `cliente_id` int(11),
        `cliente_user` varchar(100),
        `ip_original` varchar(50),
        `ip_invasor` varchar(50),
        `aparelho` varchar(255),
        `data_bloqueio` timestamp DEFAULT CURRENT_TIMESTAMP
    )");

} catch (Exception $e) {}

$mensagem_status = "";

// AÇÃO: SALVAR CONFIGURAÇÕES NO BANCO INTERNO
if (isset($_POST['action_save_fraude'])) {
    $status = isset($_POST['fraude_status']) ? 1 : 0;
    $minutos = intval($_POST['fraude_minutos']);
    if ($minutos < 1) $minutos = 5;
    
    $pdo_int->prepare("UPDATE config_antifraude SET status = ?, minutos_tolerancia = ? WHERE id = 1")
        ->execute([$status, $minutos]);
    $mensagem_status = "<div class='alert success'><i class='fas fa-check-circle'></i> Radar Anti-Fraude atualizado com sucesso!</div>";
}

// AÇÃO: LIMPAR LOGS NO BANCO INTERNO
if (isset($_POST['action_clear_logs'])) {
    $pdo_int->exec("TRUNCATE TABLE logs_antifraude");
    $mensagem_status = "<div class='alert success'><i class='fas fa-trash'></i> Histórico de bloqueios limpo!</div>";
}

// Busca do Banco Interno
$conf = $pdo_int->query("SELECT * FROM config_antifraude WHERE id = 1")->fetch(PDO::FETCH_ASSOC);
$logs = $pdo_int->query("SELECT * FROM logs_antifraude ORDER BY id DESC LIMIT 50")->fetchAll(PDO::FETCH_ASSOC);

?>

<!DOCTYPE html>
<html lang="pt-BR">
<head>
    <link rel="stylesheet" href="tema.css">
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
    <title>Radar Anti-Fraude - <?php echo htmlspecialchars($nome_painel); ?></title>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <style>
        :root { --bg-dark: #121519; --bg-sidebar: #1e2227; --bg-card: #272c33; --text-main: #d1d5da; --text-muted: #8a94a1; --accent: <?php echo $cor_primaria; ?>; --border-color: #3a4149; --success: #28a745; --danger: #dc3545; --warning: #f39c12; }
        body { margin: 0; font-family: 'Segoe UI', sans-serif; background-color: var(--bg-dark); color: var(--text-main); display: flex; height: 100vh; overflow: hidden; }
        
        /* MENU LATERAL PADRÃO (USADO PELO INCLUDE) */
        .sidebar { width: 260px; background-color: var(--bg-sidebar); display: flex; flex-direction: column; transition: 0.3s; border-right: 1px solid var(--border-color); z-index: 1001; flex-shrink: 0; }
        .sidebar-header { padding: 25px 20px; text-align: center; font-size: 22px; font-weight: bold; color: white; border-bottom: 1px solid var(--border-color); }
        .sidebar-logo { max-width: 180px; max-height: 55px; object-fit: contain; }
        .user-info { padding: 20px; text-align: center; border-bottom: 1px solid var(--border-color); }
        .user-info .badge { background: rgba(255, 255, 255, 0.05); color: var(--accent); padding: 4px 10px; border-radius: 4px; font-size: 11px; text-transform: uppercase; font-weight: bold; margin-top: 5px; display: inline-block; }
        .credits-badge { display: block; margin-top: 10px; color: var(--success); font-weight: bold; font-size: 13px; }
        
        .menu-list { list-style: none; padding: 0; margin: 0; overflow-y: auto; flex: 1; }
        .menu-item { padding: 14px 20px; color: var(--text-main); text-decoration: none; display: flex; align-items: center; transition: 0.2s; border-left: 3px solid transparent; font-size: 14px; cursor: pointer; }
        .menu-item i:first-child { margin-right: 12px; width: 20px; text-align: center; color: var(--text-muted); }
        .menu-item:hover, .menu-item.active { background-color: #2c3138; color: white; border-left-color: var(--accent); }
        .menu-item.active i:first-child { color: var(--accent); }
        
        .submenu { display: none; background: #16191d; list-style: none; padding: 0; margin: 0; }
        .submenu .menu-item { padding-left: 52px; font-size: 13px; border-left: none; }
        .arrow-icon { margin-left: auto; transition: 0.3s; font-size: 11px; }
        .rotate { transform: rotate(180deg); }
        .menu-category { padding: 20px 20px 8px; font-size: 10px; text-transform: uppercase; color: var(--text-muted); font-weight: bold; letter-spacing: 1px; }
        .logout-btn { padding: 15px; background-color: #dc3545; color: white; text-align: center; text-decoration: none; font-weight: bold; margin-top: auto;}

        /* CONTEÚDO PRINCIPAL E RESPONSIVIDADE */
        .main-content { flex: 1; display: flex; flex-direction: column; overflow-y: auto; width: 100%; position: relative; }
        .topbar { display: flex; justify-content: space-between; align-items: center; padding: 15px 20px; background-color: var(--bg-sidebar); border-bottom: 1px solid var(--border-color); gap: 15px; }
        .topbar-right { display: flex; align-items: center; }
        .mode-badge { padding: 6px 15px; background: rgba(0, 123, 255, 0.15); color: var(--accent); border-radius: 20px; font-size: 12px; font-weight: bold; border: 1px solid var(--accent); white-space: nowrap; }
        .menu-toggle { display: none; background: none; border: none; color: white; font-size: 22px; cursor: pointer; padding: 5px; }
        .sidebar-overlay { display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0,0,0,0.7); z-index: 1000; }
        .content-area { padding: 25px; flex: 1; max-width: 1000px; margin: 0 auto; width: 100%; box-sizing: border-box; }

        /* ESTILOS ESPECÍFICOS DO RADAR */
        .card { background: var(--bg-card); border-radius: 12px; border: 1px solid var(--border-color); padding: 25px; margin-bottom: 25px; box-shadow: 0 4px 15px rgba(0,0,0,0.1); }
        .card h3 { margin-top: 0; color: white; border-bottom: 1px solid var(--border-color); padding-bottom: 15px; display: flex; align-items: center; gap: 10px;}
        
        .form-group { margin-bottom: 20px; }
        label { display: block; margin-bottom: 8px; font-size: 13px; font-weight: bold; color: var(--text-muted); }
        input[type="number"] { width: 100%; padding: 12px; background: #121519; border: 1px solid var(--border-color); color: white; border-radius: 8px; box-sizing: border-box; font-size: 14px;}
        input[type="number"]:focus { border-color: var(--accent); outline: none; }
        
        .btn-save { background: var(--accent); color: white; border: none; padding: 15px; border-radius: 8px; cursor: pointer; font-weight: bold; width: 100%; margin-top: 10px; font-size: 15px; transition: 0.2s;}
        .btn-save:hover { filter: brightness(1.1); box-shadow: 0 4px 15px rgba(0,123,255,0.2); }
        
        .alert { padding: 15px; border-radius: 8px; margin-bottom: 20px; font-weight: bold; }
        .alert.success { background: rgba(40, 167, 69, 0.15); border: 1px solid var(--success); color: var(--success); }
        .alert.danger { background: rgba(220, 53, 69, 0.15); border: 1px solid var(--danger); color: var(--danger); }
        
        .switch { position: relative; display: inline-block; width: 50px; height: 26px; }
        .switch input { opacity: 0; width: 0; height: 0; }
        .slider { position: absolute; cursor: pointer; top: 0; left: 0; right: 0; bottom: 0; background-color: #3a4149; transition: .3s; border-radius: 34px; }
        .slider:before { position: absolute; content: ""; height: 18px; width: 18px; left: 4px; bottom: 4px; background-color: white; transition: .3s; border-radius: 50%; }
        input:checked + .slider { background-color: var(--danger); } /* Vermelho para o Radar */
        input:checked + .slider:before { transform: translateX(24px); }

        .table-responsive { overflow-x: auto; width: 100%; }
        table { width: 100%; border-collapse: collapse; margin-top: 15px; font-size: 13px; min-width: 700px;}
        th, td { text-align: left; padding: 12px; border-bottom: 1px solid var(--border-color); }
        th { color: var(--text-muted); text-transform: uppercase; font-size: 11px; font-weight: bold;}
        td { color: var(--text-main); }
        .badge-ip { background: #3a4149; padding: 4px 8px; border-radius: 4px; color: white; font-family: monospace; font-size: 12px;}
        .badge-danger { background: rgba(220, 53, 69, 0.2); color: var(--danger); padding: 4px 8px; border-radius: 4px; font-weight: bold; font-size: 11px;}

        @media (max-width: 768px) {
            .menu-toggle { display: block; }
            .sidebar { position: fixed; left: -260px; height: 100%; box-shadow: 10px 0 20px rgba(0,0,0,0.5); }
            .sidebar.active { left: 0; }
            .sidebar-overlay.active { display: block; }
            .content-area { padding: 15px; }
            .card { padding: 20px; }
            .topbar-right { margin-left: auto; }
            .mode-badge { font-size: 10px; padding: 4px 10px; }
        }
    </style>
</head>
<body>
    <div class="sidebar-overlay" id="overlay" onclick="toggleMenu()"></div>
    
    <?php include 'sidebar.php'; ?>

    <div class="main-content">
        <header class="topbar">
            <div style="display:flex; align-items:center; gap:10px;">
                <button class="menu-toggle" onclick="toggleMenu()"><i class="fas fa-bars"></i></button>
                <h2 style="margin:0; font-size: 18px; color:white;">Radar Anti-Fraude</h2>
            </div>
            <div class="topbar-right">
                <span class="mode-badge"><i class="fas fa-database"></i> MODO: <?php echo defined('MODO_SISTEMA') ? strtoupper(MODO_SISTEMA) : strtoupper($modo_ativo); ?></span>
            </div>
        </header>

        <div class="content-area">
            <?php echo $mensagem_status; ?>

            <div class="card" style="border-top: 4px solid var(--danger);">
                <h3><i class="fas fa-satellite-dish" style="color:var(--danger);"></i> Configurações do Radar</h3>
                <p style="font-size: 13px; color: var(--text-muted); margin-bottom: 20px;">O Radar detecta e bloqueia automaticamente contas que são acessadas de IPs diferentes em um curto espaço de tempo, impedindo que os clientes revendam ou compartilhem suas senhas.</p>
                
                <form method="POST">
                    <input type="hidden" name="action_save_fraude" value="1">
                    
                    <div style="display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 15px; margin-bottom: 25px; background: rgba(0,0,0,0.2); padding: 15px; border-radius: 8px;">
                        <div>
                            <h4 style="margin:0; color:white; font-size: 15px;">Status do Radar</h4>
                            <p style="font-size: 12px; color: var(--text-muted); margin-top: 5px;">Ligar ou desligar o bloqueio automático.</p>
                        </div>
                        <label class="switch">
                            <input type="checkbox" name="fraude_status" <?php echo ($conf['status'] == 1) ? 'checked' : ''; ?>>
                            <span class="slider"></span>
                        </label>
                    </div>

                    <div class="form-group">
                        <label>Tolerância de Tempo (em minutos)</label>
                        <p style="font-size: 11px; color: var(--warning); margin-top: 0;">Se o cliente trocar de IP em um tempo <b>menor</b> que o definido abaixo, ele será bloqueado.</p>
                        <input type="number" name="fraude_minutos" value="<?php echo $conf['minutos_tolerancia']; ?>" min="1" required>
                    </div>
                    
                    <button type="submit" class="btn-save"><i class="fas fa-save"></i> ATUALIZAR RADAR</button>
                </form>
            </div>

            <div class="card">
                <div style="display:flex; justify-content:space-between; align-items:center; flex-wrap:wrap; gap:10px; border-bottom: 1px solid var(--border-color); padding-bottom: 15px; margin-bottom: 15px;">
                    <h3 style="margin:0; border:none; padding:0;"><i class="fas fa-list" style="color: #f39c12;"></i> Clientes Pegos no Pulo (Logs)</h3>
                    <form method="POST" onsubmit="return confirm('Apagar todo o histórico?')">
                        <input type="hidden" name="action_clear_logs" value="1">
                        <button type="submit" style="background:var(--danger); color:white; border:none; padding:8px 12px; border-radius:6px; cursor:pointer; font-weight:bold; font-size:12px;"><i class="fas fa-trash"></i> Limpar Lista</button>
                    </form>
                </div>
                
                <div class="table-responsive">
                    <table>
                        <thead>
                            <tr>
                                <th>Data / Hora</th>
                                <th>Cliente (Usuário)</th>
                                <th>Salto de IP (Antigo &rarr; Novo)</th>
                                <th>Aparelho Detectado</th>
                                <th>Ação Automática</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php if(empty($logs)): ?>
                                <tr><td colspan="5" style="text-align:center; color: var(--text-muted); padding: 30px 0;"><i class="fas fa-check-circle" style="font-size: 24px; color: var(--success); margin-bottom: 10px; display:block;"></i> Tudo tranquilo! Nenhum compartilhamento detectado ainda.</td></tr>
                            <?php else: foreach($logs as $l): ?>
                                <tr>
                                    <td><i class="far fa-clock" style="color:var(--text-muted);"></i> <?php echo date('d/m H:i', strtotime($l['data_bloqueio'])); ?></td>
                                    <td><strong><?php echo htmlspecialchars($l['cliente_user']); ?></strong></td>
                                    <td>
                                        <span class="badge-ip"><?php echo htmlspecialchars($l['ip_original']); ?></span> 
                                        <i class="fas fa-arrow-right" style="color:var(--text-muted); font-size:10px; margin:0 5px;"></i> 
                                        <span class="badge-ip" style="background: rgba(220, 53, 69, 0.2); color: #e74c3c;"><?php echo htmlspecialchars($l['ip_invasor']); ?></span>
                                    </td>
                                    <td><span style="font-size:11px; color:var(--text-muted); background:rgba(0,0,0,0.3); padding:3px 6px; border-radius:4px;"><?php echo htmlspecialchars(substr($l['aparelho'], 0, 30)) . (strlen($l['aparelho']) > 30 ? '...' : ''); ?></span></td>
                                    <td><span class="badge-danger"><i class="fas fa-ban"></i> CONTA DERRUBADA</span></td>
                                </tr>
                            <?php endforeach; endif; ?>
                        </tbody>
                    </table>
                </div>
            </div>
            <?php include 'rodape.php'; ?>
        </div>
    </div>

    <script>
        function toggleMenu() { 
            document.getElementById('sidebar').classList.toggle('active'); 
            document.getElementById('overlay').classList.toggle('active'); 
        }
        
        function toggleSubmenu(id) {
            const sub = document.getElementById(id);
            const arrow = document.getElementById('arrow-' + id);
            if (sub.style.display === "block") { 
                sub.style.display = "none"; 
                if(arrow) arrow.classList.remove('rotate'); 
            } else { 
                sub.style.display = "block"; 
                if(arrow) arrow.classList.add('rotate'); 
            }
        }
        
        setTimeout(function() { 
            try { 
                var alerts = document.querySelectorAll('.alert'); 
                for(var i=0; i<alerts.length; i++) { alerts[i].style.opacity='0'; } 
                setTimeout(function(){ 
                    for(var j=0; j<alerts.length; j++) { alerts[j].style.display='none'; } 
                }, 500); 
            } catch(e) {} 
        }, 4000);
    </script>
    <script src="tema.js"></script>
</body>
</html>