<?php
ini_set('log_errors', 1);
ini_set('error_log', __DIR__ . '/php_errors.log');
error_reporting(E_ALL);
header("Content-Type: application/json; charset=UTF-8");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type, Authorization");
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { http_response_code(200); exit; }

define('ENCRYPTION_KEY', 'MaCleSecreteSuperRobuste123!');

try {
    $pdo = new PDO("mysql:host=localhost;dbname=mon_cinema;charset=utf8mb4", "root", "", [
        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
        PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
    ]);
    
    $pdo->exec("CREATE TABLE IF NOT EXISTS users (id INT PRIMARY KEY, username VARCHAR(50) NOT NULL, password_hash VARCHAR(255) NOT NULL)");
    $pdo->exec("CREATE TABLE IF NOT EXISTS config (key_name VARCHAR(50) PRIMARY KEY, key_value TEXT NOT NULL)");
    $pdo->exec("CREATE TABLE IF NOT EXISTS critiques (id BIGINT PRIMARY KEY, title VARCHAR(255) NOT NULL, year VARCHAR(10), director VARCHAR(255), poster TEXT, rating DECIMAL(3,1) DEFAULT 3.0, review TEXT, streaming VARCHAR(255))");
    try { $pdo->exec("ALTER TABLE critiques MODIFY COLUMN rating DECIMAL(3,1) DEFAULT 3.0"); } catch (\Exception $e) {}
    
    $pdo->exec("CREATE TABLE IF NOT EXISTS videotheque (id BIGINT PRIMARY KEY, title VARCHAR(255) NOT NULL, year VARCHAR(10), director VARCHAR(255), poster TEXT, format VARCHAR(50), length VARCHAR(50), publisher VARCHAR(255), ean_isbn13 VARCHAR(50), number_of_discs INT DEFAULT 1, aspect_ratio VARCHAR(50), description TEXT, actors TEXT)");
    try { $pdo->exec("ALTER TABLE videotheque ADD COLUMN actors TEXT AFTER description"); } catch (\Exception $e) {}
    
} catch (\PDOException $e) { echo json_encode(["error" => "Erreur BDD : " . $e->getMessage()]); exit; }

// ── FONCTIONS UTILITAIRES ──
function makeStableId($type, $title, $year) {
    return (abs(crc32(strtolower(trim($type ?? '')) . '|' . strtolower(trim($title ?? '')) . '|' . trim($year ?? ''))) % 2000000000) + 100000000;
}

function checkAuth($pdo) {
    if ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0) return true;
    $token = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
    if (empty($token) && function_exists('apache_request_headers')) {
        $headers = apache_request_headers();
        $token = $headers['Authorization'] ?? $headers['authorization'] ?? '';
    }
    if ($token !== md5(ENCRYPTION_KEY . 'session')) { http_response_code(403); echo json_encode(["error" => "Accès interdit."]); exit; }
}

function encryptData($data) {
    $iv = openssl_random_pseudo_bytes(16);
    $key = hash('sha256', ENCRYPTION_KEY, true);
    return base64_encode(openssl_encrypt($data, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv) . '::' . $iv);
}

function decryptData($str) {
    $decoded = base64_decode($str);
    if (strpos($decoded, '::') === false) return null;
    list($enc, $iv) = explode('::', $decoded, 2);
    return openssl_decrypt($enc, 'AES-256-CBC', hash('sha256', ENCRYPTION_KEY, true), OPENSSL_RAW_DATA, substr($iv, 0, 16));
}

function getTmdbApiKey($pdo) {
    $stmt = $pdo->prepare("SELECT key_value FROM config WHERE key_name = 'tmdb_api_key'");
    $stmt->execute();
    $row = $stmt->fetch();
    return $row ? decryptData($row['key_value']) : null;
}

function httpGet($url, $timeout = 3, $ua = null) {
    if (!$ua) $ua = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
    
    if (!function_exists('curl_init')) {
        $ctx = stream_context_create(['http' => [
            'timeout' => $timeout,
            'user_agent' => $ua,
            'header' => "Accept: application/json\r\nAccept-Language: fr-FR,fr;q=0.9\r\n"
        ]]);
        return @file_get_contents($url, false, $ctx);
    }
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => $timeout,
        CURLOPT_CONNECTTIMEOUT => 3,
        CURLOPT_SSL_VERIFYPEER => false,
        CURLOPT_USERAGENT => $ua,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_HTTPHEADER => [
            'Accept: application/json',
            'Accept-Language: fr-FR,fr;q=0.9,en;q=0.8',
        ],
    ]);
    $res = curl_exec($ch);
    curl_close($ch);
    return $res ?: null;
}

function cleanTitle($title) {
    $clean = preg_replace('/\s*[\[\(].*?[\]\)]\s*/', '', $title);
    $clean = preg_replace('/\s*-\s*(Édition|Edition|Collector|Simple|Spéciale|Digibook|Ultimate|Intégrale|Combo|SteelBook|Boîtier).*$/i', '', $clean);
    $clean = preg_replace('/(blu-ray|bluray|dvd|4k|ultra hd|combo|vhs|bdrip).*$/i', '', $clean);
    return trim(preg_replace('/\s{2,}/', ' ', $clean));
}

function detectFormat($title, $desc = '') {
    $t = strtoupper($title . ' ' . $desc);
    if (strpos($t, '4K') !== false || strpos($t, 'UHD') !== false) return '4K Ultra HD';
    if (strpos($t, 'BLU-RAY') !== false || strpos($t, 'BLURAY') !== false) return 'Blu-ray';
    if (strpos($t, 'DVD') !== false) return 'DVD';
    if (strpos($t, 'VHS') !== false) return 'VHS';
    if (strpos($t, 'COFFRET') !== false || strpos($t, 'TRILOGIE') !== false) return 'Coffret';
    return 'Blu-ray';
}

function extractYear($dateStr) {
    if (preg_match('/(\d{4})/', $dateStr, $m)) return $m[1];
    return '';
}

// ── DVDCover.com via API REST WordPress ──
function fetchDVDCover($title, $year = '', $format = 'bluray') {
    if (empty($title)) return null;
    
    $cleanTitle = cleanTitle($title);
    if (empty($cleanTitle)) return null;
    
    // API REST WordPress de DVDcover
    // Endpoint : /wp-json/wp/v2/posts?search=TITRE&_embed
    $searchUrl = "https://www.dvdcover.com/wp-json/wp/v2/posts?search=" . urlencode($cleanTitle) . "&_embed&per_page=10";
    
    $json = httpGet($searchUrl, 10);
    if (!$json) {
        error_log("DVDCover API: Échec requête pour '$title'");
        return null;
    }
    
    $posts = json_decode($json, true);
    if (!is_array($posts) || empty($posts)) {
        error_log("DVDCover API: Aucun résultat pour '$title'");
        return null;
    }
    
    $cleanTitleLower = strtolower($cleanTitle);
    $bestPost = null;
    $bestScore = 0;
    
    // Parcourir les posts et scorer leur pertinence
    foreach ($posts as $post) {
        $postTitle = $post['title']['rendered'] ?? '';
        $postTitleLower = strtolower($postTitle);
        
        $score = 0;
        
        // Le titre du post contient-il le film recherché ?
        if (strpos($postTitleLower, $cleanTitleLower) !== false) {
            $score += 50;
        }
        
        // Correspondance de l'année
        if (!empty($year) && strpos($postTitle, $year) !== false) {
            $score += 30;
        }
        
        // Correspondance du format
        $formatLower = strtolower($format);
        if (stripos($postTitle, $format) !== false || 
            stripos($postTitle, str_replace('-', ' ', $format)) !== false) {
            $score += 20;
        }
        
        // Bonus si le titre contient "cover" ou "jaquette"
        if (stripos($postTitle, 'cover') !== false) {
            $score += 10;
        }
        
        if ($score > $bestScore) {
            $bestScore = $score;
            $bestPost = $post;
        }
        
        // Score parfait, on arrête
        if ($score >= 100) break;
    }
    
    // Si aucun post ne correspond assez bien, prendre le premier
    if (!$bestPost && !empty($posts)) {
        $bestPost = $posts[0];
    }
    
    if (!$bestPost) return null;
    
    // Extraire l'image du post
    $poster = '';
    
    // Méthode 1 : Image mise en avant (_embedded.wp:featuredmedia)
    if (isset($bestPost['_embedded']['wp:featuredmedia'][0])) {
        $featured = $bestPost['_embedded']['wp:featuredmedia'][0];
        // Chercher la plus grande taille disponible
        if (!empty($featured['media_details']['sizes'])) {
            $sizes = $featured['media_details']['sizes'];
            // Ordre de préférence : full > large > medium > thumbnail
            $preferredSizes = ['full', 'large', 'medium', 'thumbnail'];
            foreach ($preferredSizes as $size) {
                if (isset($sizes[$size]['source_url'])) {
                    $poster = $sizes[$size]['source_url'];
                    break;
                }
            }
        }
        // Fallback : source_url direct
        if (empty($poster) && !empty($featured['source_url'])) {
            $poster = $featured['source_url'];
        }
    }
    
    // Méthode 2 : Images dans le contenu du post
    if (empty($poster) && !empty($bestPost['content']['rendered'])) {
        $content = $bestPost['content']['rendered'];
        // Chercher les balises img
        if (preg_match_all('/<img[^>]+src=["\']([^"\']+)["\'][^>]*>/i', $content, $matches)) {
            foreach ($matches[1] as $img) {
                // Filtrer les images non pertinentes
                if (strpos($img, 'logo') === false && 
                    strpos($img, 'icon') === false &&
                    strpos($img, 'banner') === false &&
                    strpos($img, 'bg') === false &&
                    strpos($img, 'button') === false &&
                    strpos($img, 'social') === false &&
                    (strpos($img, '.jpg') !== false || strpos($img, '.jpeg') !== false || strpos($img, '.png') !== false || strpos($img, '.webp') !== false)) {
                    $poster = $img;
                    break;
                }
            }
        }
    }
    
    // Méthode 3 : Images embarquées dans _embedded.wp:embedded
    if (empty($poster) && isset($bestPost['_embedded']['wp:embedded'])) {
        foreach ($bestPost['_embedded']['wp:embedded'] as $embedded) {
            if (!empty($embedded['source_url'])) {
                $poster = $embedded['source_url'];
                break;
            }
        }
    }
    
    if (empty($poster)) {
        error_log("DVDCover API: Pas d'image trouvée pour le post ID " . ($bestPost['id'] ?? '?'));
        return null;
    }
    
    // S'assurer que l'URL est absolue
    if (strpos($poster, 'http') !== 0) {
        $poster = 'https://www.dvdcover.com' . (strpos($poster, '/') === 0 ? '' : '/') . ltrim($poster, '/');
    }
    
    // Supprimer les suffixes de taille WordPress pour avoir la version originale
    // Ex: image-300x200.jpg → image.jpg
    $poster = preg_replace('/-\d+x\d+(\.\w+)$/', '$1', $poster);
    
    return [
        'poster' => $poster,
        'title'  => $bestPost['title']['rendered'] ?? $cleanTitle,
        'format' => $format,
    ];
}

// ── API TMDB (uniquement pour les critiques) ──
function fetchTMDBFull($title, $year, $apiKey, $pdo) {
    if (empty($apiKey) || empty($title)) return null;
    $cleanTitle = cleanTitle($title);
    
    $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$apiKey}&query=" . urlencode($cleanTitle) . "&year={$year}&language=fr-FR";
    $searchRes = httpGet($searchUrl, 5);
    $searchData = $searchRes ? json_decode($searchRes, true) : [];
    
    if (empty($searchData['results'])) {
        $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$apiKey}&query=" . urlencode($cleanTitle) . "&language=fr-FR";
        $searchRes = httpGet($searchUrl, 5);
        $searchData = $searchRes ? json_decode($searchRes, true) : [];
    }
    
    if (empty($searchData['results'])) return null;
    $movieId = $searchData['results'][0]['id'];
    
    $detailsUrl = "https://api.themoviedb.org/3/movie/{$movieId}?api_key={$apiKey}&append_to_response=credits,watch/providers,translations&language=fr-FR";
    $detailsRes = httpGet($detailsUrl, 5);
    if (!$detailsRes) return null;
    $details = json_decode($detailsRes, true);
    
    $frenchTitle = $details['title'] ?? '';
    
    if (!empty($details['translations']['translations'])) {
        foreach ($details['translations']['translations'] as $translation) {
            if ($translation['iso_3166_1'] === 'FR' && !empty($translation['data']['title'])) {
                $frenchTitle = $translation['data']['title'];
                break;
            }
        }
    }
    
    $director = '';
    if (!empty($details['credits']['crew'])) {
        $directorsList = [];
        foreach ($details['credits']['crew'] as $crew) {
            if ($crew['job'] === 'Director') $directorsList[] = $crew['name'];
        }
        $director = implode(', ', $directorsList);
    }
    
    $cast = [];
    if (!empty($details['credits']['cast'])) {
        $topCast = array_slice($details['credits']['cast'], 0, 4);
        foreach ($topCast as $actor) $cast[] = $actor['name'];
    }
    
    $overview = $details['overview'] ?? '';
    
    $streaming = '';
    $frProviders = $details['watch/providers']['results']['FR'] ?? [];
    $platforms = [];
    if (!empty($frProviders['flatrate'])) { foreach ($frProviders['flatrate'] as $p) $platforms[] = $p['provider_name']; }
    if (empty($platforms)) {
        if (!empty($frProviders['rent'])) { foreach ($frProviders['rent'] as $p) $platforms[] = $p['provider_name'] . ' (loc.)'; }
        if (!empty($frProviders['buy'])) { foreach ($frProviders['buy'] as $p) $platforms[] = $p['provider_name'] . ' (achat)'; }
    }
    if (!empty($platforms)) $streaming = implode(', ', array_unique($platforms));
    
    $result = [
        'title'     => $frenchTitle,
        'year'      => !empty($details['release_date']) ? substr($details['release_date'], 0, 4) : '',
        'director'  => $director,
        'poster'    => !empty($details['poster_path']) ? "https://image.tmdb.org/t/p/w500" . $details['poster_path'] : '',
        'length'    => !empty($details['runtime']) ? $details['runtime'] . ' min' : '',
        'streaming' => $streaming,
        'overview'  => $overview,
        'cast'      => $cast
    ];
    
    return $result;
}

// ── ROUTEUR PRINCIPAL ──
$action = $_GET['action'] ?? '';
$data = json_decode(file_get_contents('php://input'), true) ?? [];

switch ($action) {
    case 'check_security_status':
        echo json_encode(["is_blank" => ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0)]);
        break;
        
    case 'login':
        if ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0) {
            echo json_encode(["success" => true, "token" => md5(ENCRYPTION_KEY . 'session'), "blank" => true]);
        } else {
            $stmt = $pdo->prepare("SELECT password_hash FROM users WHERE username = 'admin'");
            $stmt->execute(); $user = $stmt->fetch();
            if ($user && password_verify($data['password'] ?? '', $user['password_hash'])) {
                echo json_encode(["success" => true, "token" => md5(ENCRYPTION_KEY . 'session'), "blank" => false]);
            } else { http_response_code(401); echo json_encode(["error" => "Mot de passe incorrect."]); }
        }
        break;
        
    case 'setup_admin': case 'update_password':
        checkAuth($pdo);
        $pwd = $data['password'] ?? $data['new_password'] ?? '';
        $stmt = $pdo->prepare("REPLACE INTO users (id, username, password_hash) VALUES (1, 'admin', :pass)");
        $stmt->execute([':pass' => password_hash($pwd, PASSWORD_BCRYPT)]);
        echo json_encode(["success" => true]);
        break;
        
    case 'get_config_keys':
        checkAuth($pdo);
        $stmt = $pdo->prepare("SELECT key_value FROM config WHERE key_name = 'tmdb_api_key'");
        $stmt->execute(); $row = $stmt->fetch();
        echo json_encode(['tmdb_api_key' => $row ? '••••••••' : '']);
        break;
        
    case 'save_config':
        checkAuth($pdo);
        $keyName = $data['key_name'] ?? '';
        $keyValue = $data['key_value'] ?? '';
        if ($keyName === 'tmdb_api_key' && !empty($keyValue)) {
            $stmt = $pdo->prepare("REPLACE INTO config (key_name, key_value) VALUES (?, ?)");
            $stmt->execute([$keyName, encryptData($keyValue)]);
            echo json_encode(["success" => true]);
        } else {
            http_response_code(400); echo json_encode(["error" => "Données invalides."]);
        }
        break;
        
    case 'get_films':
        $sql = "
            SELECT id, title, year, director, poster, rating, review, NULL AS description, streaming, 'critique' AS type 
            FROM critiques
            UNION ALL
            SELECT id, title, year, director, poster, NULL AS rating, NULL AS review, description, NULL AS streaming, 'videotheque' AS type 
            FROM videotheque
            ORDER BY id DESC
        ";
        $result = $pdo->query($sql)->fetchAll();
        
        foreach ($result as &$row) {
            if ($row['rating'] !== null) {
                $ratingVal = (float)$row['rating'];
                $row['rating'] = ($ratingVal == floor($ratingVal)) ? (int)$ratingVal : $ratingVal;
            }
        }
        unset($row);
        
        echo json_encode($result);
        break;
        
    case 'search_ean_full':
        $ean = $_GET['ean'] ?? '';
        $type = $_GET['type'] ?? 'videotheque';
        if (!$ean) { echo json_encode(['error' => 'EAN manquant']); exit; }
        $result = [
            'ean' => $ean, 'title' => '', 'director' => '', 'year' => '',
            'poster' => '', 'publisher' => '', 'format' => '',
            'length' => '', 'number_of_discs' => 1, 'aspect_ratio' => '', 'actors' => ''
        ];
        
        $tmdbKey = getTmdbApiKey($pdo);
        $titleForSearch = '';
        
        if ($tmdbKey) {
            $searchUrl = "https://api.themoviedb.org/3/find/{$ean}?api_key={$tmdbKey}&external_source=imdb_id";
            $searchRes = httpGet($searchUrl, 5);
            $searchData = $searchRes ? json_decode($searchRes, true) : [];
            
            if (!empty($searchData['movie_results'][0])) {
                $titleForSearch = $searchData['movie_results'][0]['title'];
                $result['title'] = $titleForSearch;
                if (!empty($searchData['movie_results'][0]['release_date'])) {
                    $result['year'] = substr($searchData['movie_results'][0]['release_date'], 0, 4);
                }
            }
        }
        
        if (empty($titleForSearch)) {
            echo json_encode(['success' => true, 'data' => $result, 'warning' => 'Titre non trouvé']);
            exit;
        }
        
        if ($type === 'videotheque') {
            // DVDCover API pour vidéothèque
            $format = $result['format'] ?: 'Blu-ray';
            $dcData = fetchDVDCover($titleForSearch, $result['year'], $format);
            if (!empty($dcData)) {
                if (!empty($dcData['poster'])) $result['poster'] = $dcData['poster'];
                if (!empty($dcData['title'])) $result['title'] = $dcData['title'];
                $result['format'] = $format;
            }
        } else {
            if ($tmdbKey) {
                $tmdbData = fetchTMDBFull($titleForSearch, $result['year'], $tmdbKey, $pdo);
                if ($tmdbData) {
                    if (!empty($tmdbData['title']))    $result['title']    = $tmdbData['title'];
                    if (!empty($tmdbData['year']))     $result['year']     = $tmdbData['year'];
                    if (!empty($tmdbData['director'])) $result['director'] = $tmdbData['director'];
                    if (!empty($tmdbData['poster']))   $result['poster']   = $tmdbData['poster'];
                    if (!empty($tmdbData['length']))   $result['length']   = $tmdbData['length'];
                    if (!empty($tmdbData['cast']))     $result['actors']   = implode(', ', $tmdbData['cast']);
                }
            }
        }
        
        echo json_encode(['success' => true, 'data' => $result]);
        break;
        
    case 'save_film':
        checkAuth($pdo);
        $type = $data['type'] ?? 'critique';
        $id = !empty($data['id']) ? $data['id'] : makeStableId($type, $data['title'] ?? '', $data['year'] ?? '0000');
        
        if ($type === 'critique' && (empty($data['director']) || empty($data['poster']))) {
            $tmdbData = fetchTMDBFull($data['title'] ?? '', $data['year'] ?? '', getTmdbApiKey($pdo), $pdo);
            if ($tmdbData) {
                if (empty($data['director'])) $data['director'] = $tmdbData['director'];
                if (empty($data['poster']))   $data['poster']   = $tmdbData['poster'];
                if (empty($data['length']) && !empty($tmdbData['length'])) $data['length'] = $tmdbData['length'];
            }
        }
        
        if ($type === 'critique') {
            $streaming = $data['streaming'] ?? '';
            if (empty($streaming)) $streaming = 'Support physique / Cinéma';
            $sql = "INSERT INTO critiques (id, title, year, director, poster, rating, review, streaming) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON DUPLICATE KEY UPDATE title=VALUES(title), year=VALUES(year), director=VALUES(director), poster=VALUES(poster), rating=VALUES(rating), review=VALUES(review), streaming=VALUES(streaming)";
            $stmt = $pdo->prepare($sql);
            $stmt->execute([$id, $data['title'] ?? '', $data['year'] ?? '', $data['director'] ?? '', $data['poster'] ?? '', $data['rating'] ?? 3.0, $data['review'] ?? '', $streaming]);
        } else {
            // Vidéothèque : DVDCover API pour la jaquette
            if (empty($data['poster']) && !empty($data['title'])) {
                $format = $data['format'] ?: 'Blu-ray';
                $dcData = fetchDVDCover($data['title'], $data['year'] ?? '', $format);
                if (!empty($dcData['poster'])) {
                    $data['poster'] = $dcData['poster'];
                }
            }
            
            $sql = "INSERT INTO videotheque (id, title, year, director, poster, format, length, publisher, ean_isbn13, number_of_discs, aspect_ratio, description, actors) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) ON DUPLICATE KEY UPDATE title=VALUES(title), year=VALUES(year), director=IF(VALUES(director)!='', VALUES(director), director), poster=IF(VALUES(poster)!='', VALUES(poster), poster), format=IF(VALUES(format)!='', VALUES(format), format), length=IF(VALUES(length)!='', VALUES(length), length), publisher=IF(VALUES(publisher)!='', VALUES(publisher), publisher), ean_isbn13=IF(VALUES(ean_isbn13)!='', VALUES(ean_isbn13), ean_isbn13), number_of_discs=IF(VALUES(number_of_discs)!=1, VALUES(number_of_discs), number_of_discs), aspect_ratio=IF(VALUES(aspect_ratio)!='', VALUES(aspect_ratio), aspect_ratio), description=IF(VALUES(description)!='', VALUES(description), description), actors=IF(VALUES(actors)!='', VALUES(actors), actors)";
            $stmt = $pdo->prepare($sql);
            $stmt->execute([$id, $data['title'] ?? '', $data['year'] ?? '', $data['director'] ?? '', $data['poster'] ?? '', $data['format'] ?? '', $data['length'] ?? '', $data['publisher'] ?? '', $data['ean_isbn13'] ?? '', $data['number_of_discs'] ?? 1, $data['aspect_ratio'] ?? '', $data['description'] ?? '', $data['actors'] ?? '']);
        }
        echo json_encode(["success" => true]);
        break;
        
    case 'delete_film':
        checkAuth($pdo);
        $type = $_GET['type'] ?? 'critique'; $table = ($type === 'videotheque') ? 'videotheque' : 'critiques';
        $id = $_GET['id'] ?? null;
        if (!$id) { http_response_code(400); echo json_encode(["error" => "ID manquant."]); break; }
        $stmt = $pdo->prepare("DELETE FROM $table WHERE id = ?"); $stmt->execute([$id]);
        echo json_encode(["success" => true]);
        break;
        
    case 'bulk_delete':
        checkAuth($pdo);
        $ids = $data['ids'] ?? []; $type = $data['type'] ?? 'critique'; $table = ($type === 'videotheque') ? 'videotheque' : 'critiques';
        if (!empty($ids)) { $placeholders = implode(',', array_fill(0, count($ids), '?')); $stmt = $pdo->prepare("DELETE FROM $table WHERE id IN ($placeholders)"); $stmt->execute($ids); echo json_encode(["success" => true]); }
        else { http_response_code(400); echo json_encode(["success" => false, "error" => "Aucun élément sélectionné."]); }
        break;
        
    case 'import_batch':
        checkAuth($pdo);
        set_time_limit(0);
        $items = $data['items'] ?? [];
        $type = $data['type'] ?? 'videotheque';
        $tmdbApiKey = getTmdbApiKey($pdo);
        $imported = 0;
        $debugLog = [];

        $pdo->beginTransaction();
        try {
            $sqlVideotheque = "INSERT INTO videotheque (id, title, year, director, poster, format, length, publisher, ean_isbn13, number_of_discs, aspect_ratio, description, actors) 
                               VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) 
                               ON DUPLICATE KEY UPDATE 
                               title=VALUES(title), year=VALUES(year), 
                               director=IF(VALUES(director)!='',VALUES(director),director), 
                               poster=IF(VALUES(poster)!='',VALUES(poster),poster), 
                               format=IF(VALUES(format)!='',VALUES(format),format), 
                               length=IF(VALUES(length)!='',VALUES(length),length), 
                               publisher=IF(VALUES(publisher)!='',VALUES(publisher),publisher), 
                               ean_isbn13=IF(VALUES(ean_isbn13)!='',VALUES(ean_isbn13),ean_isbn13), 
                               number_of_discs=IF(VALUES(number_of_discs)!=1,VALUES(number_of_discs),number_of_discs), 
                               aspect_ratio=IF(VALUES(aspect_ratio)!='',VALUES(aspect_ratio),aspect_ratio), 
                               description=IF(VALUES(description)!='',VALUES(description),description), 
                               actors=IF(VALUES(actors)!='',VALUES(actors),actors)";
            $stmtVideotheque = $pdo->prepare($sqlVideotheque);

            $sqlCritiques = "INSERT INTO critiques (id, title, year, director, poster, rating, review, streaming) 
                             VALUES (?, ?, ?, ?, ?, ?, ?, ?) 
                             ON DUPLICATE KEY UPDATE 
                             title=VALUES(title), year=VALUES(year), 
                             rating=VALUES(rating), 
                             review=IF(VALUES(review)!='',VALUES(review),review), 
                             director=IF(VALUES(director)!='',VALUES(director),director), 
                             poster=IF(VALUES(poster)!='',VALUES(poster),poster), 
                             streaming=IF(VALUES(streaming)!='',VALUES(streaming),streaming)";
            $stmtCritiques = $pdo->prepare($sqlCritiques);

            foreach ($items as $rowData) {
                $title = $rowData['title'] ?? $rowData['Name'] ?? $rowData['Title'] ?? 'Sans titre';
                $publishDate = $rowData['publish_date'] ?? $rowData['Year'] ?? $rowData['year'] ?? $rowData['Date'] ?? '';
                $year = extractYear($publishDate);
                $id = makeStableId($type, $title, $year);

                if ($type === 'videotheque') {
                    $csvActors = $rowData['ensemble'] ?? $rowData['creators'] ?? '';
                    $actors = '';
                    if (!empty($csvActors)) {
                        $actorsArray = array_map('trim', explode(',', $csvActors));
                        $actors = implode(', ', array_slice($actorsArray, 0, 4));
                    }

                    $ean = $rowData['ean_isbn13'] ?? $rowData['EAN'] ?? '';
                    if (!empty($ean)) {
                        $eanFloat = floatval($ean);
                        if ($eanFloat > 0) $ean = (string) round($eanFloat);
                        $ean = preg_replace('/[^0-9]/', '', $ean);
                    }

                    $lengthRaw = $rowData['length'] ?? '';
                    $length = '';
                    if ($lengthRaw !== '' && $lengthRaw !== null) {
                        $lengthVal = floatval($lengthRaw);
                        if ($lengthVal > 0) $length = (string) round($lengthVal);
                    }

                    $discsRaw = $rowData['number_of_discs'] ?? '';
                    $discs = (is_numeric($discsRaw) && floatval($discsRaw) > 0) ? (int) round(floatval($discsRaw)) : 1;

                    $description = $rowData['description'] ?? $rowData['Description'] ?? '';
                    $publisher = $rowData['publisher'] ?? '';
                    $aspect = $rowData['aspect_ratio'] ?? '';
                    $format = $rowData['format'] ?? detectFormat($title, $description);
                    $poster = $rowData['poster'] ?? '';
                    $director = '';

                    // Récupération jaquette via DVDCover API
                    $cleanTitleForDC = cleanTitle($title);
                    if (!empty($cleanTitleForDC)) {
                        $dcData = fetchDVDCover($cleanTitleForDC, $year, $format);
                        if (!empty($dcData)) {
                            if (!empty($dcData['poster'])) {
                                $poster = $dcData['poster'];
                            }
                            if (!empty($dcData['title']) && ($title === 'Sans titre' || empty($title))) {
                                $title = $dcData['title'];
                            }
                        }
                    }

                    $stmtVideotheque->execute([$id, $title, $year, $director, $poster, $format, $length, $publisher, $ean, $discs, $aspect, $description, $actors]);

                } else {
                    $ratingRaw = $rowData['Rating'] ?? $rowData['rating'] ?? '';
                    $rating = ($ratingRaw !== '' && $ratingRaw !== null) ? (float)$ratingRaw : null;
                    $review = $rowData['Review'] ?? $rowData['review'] ?? '';
                    $director = ''; $poster = ''; $streaming = '';

                    if ($tmdbApiKey && !empty($title)) {
                        $tmdbData = fetchTMDBFull($title, $year, $tmdbApiKey, $pdo);
                        if ($tmdbData) {
                            $director = $tmdbData['director'];
                            $poster = $tmdbData['poster'];
                            $streaming = $tmdbData['streaming'];
                            if (empty($year)) $year = $tmdbData['year'];
                            if (!empty($tmdbData['title'])) $title = $tmdbData['title'];
                        }
                    }
                    if (empty($streaming)) $streaming = 'Support physique / Cinéma';

                    $stmtCritiques->execute([$id, $title, $year, $director, $poster, $rating, $review, $streaming]);
                }
                $imported++;
            }

            $pdo->commit();
            echo json_encode(["success" => true, "imported" => $imported, "debug" => $debugLog]);

        } catch (\Throwable $e) {
            if ($pdo->inTransaction()) {
                $pdo->rollBack();
            }
            http_response_code(500);
            echo json_encode(["success" => false, "error" => "Erreur serveur : " . $e->getMessage(), "debug" => $debugLog]);
        }
        break;

    case 'debug_dvdcover':
        $title = $_GET['title'] ?? '';
        $year = $_GET['year'] ?? '';
        $format = $_GET['format'] ?? 'Blu-ray';
        
        if (!$title) { echo json_encode(['error' => 'Titre manquant']); exit; }
        
        $result = ['title' => $title, 'year' => $year, 'format' => $format];
        
        // Test direct de l'API
        $cleanTitle = cleanTitle($title);
        $apiUrl = "https://www.dvdcover.com/wp-json/wp/v2/posts?search=" . urlencode($cleanTitle) . "&_embed&per_page=5";
        $result['api_url'] = $apiUrl;
        
        $json = httpGet($apiUrl, 10);
        if ($json) {
            $posts = json_decode($json, true);
            $result['posts_count'] = is_array($posts) ? count($posts) : 0;
            $result['posts'] = [];
            
            if (is_array($posts)) {
                foreach ($posts as $post) {
                    $postData = [
                        'id' => $post['id'] ?? null,
                        'title' => $post['title']['rendered'] ?? '',
                        'link' => $post['link'] ?? '',
                    ];
                    
                    // Extraire les images
                    $imgs = [];
                    if (isset($post['_embedded']['wp:featuredmedia'][0])) {
                        $featured = $post['_embedded']['wp:featuredmedia'][0];
                        if (!empty($featured['source_url'])) {
                            $imgs[] = $featured['source_url'];
                        }
                        if (!empty($featured['media_details']['sizes'])) {
                            foreach ($featured['media_details']['sizes'] as $size => $data) {
                                if (!empty($data['source_url'])) {
                                    $imgs[] = $data['source_url'] . " ($size)";
                                }
                            }
                        }
                    }
                    $postData['images'] = $imgs;
                    
                    $result['posts'][] = $postData;
                }
            }
        } else {
            $result['api_error'] = 'Impossible de joindre l\'API';
        }
        
        // Test de la fonction complète
        $data = fetchDVDCover($title, $year, $format);
        $result['fetch_result'] = $data;
        $result['status'] = $data ? 'OK' : 'AUCUN_RÉSULTAT';
        
        echo json_encode($result, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
        exit;
    break;
}
?>