Sindbad~EG File Manager

<?php
require_once '../config/config.php';

// Check if user is logged in
if (!isLoggedIn()) {
    http_response_code(401);
    echo json_encode(['success' => false, 'message' => 'Unauthorized']);
    exit;
}

if (!isset($_GET['id'])) {
    http_response_code(400);
    echo json_encode(['success' => false, 'message' => 'Program ID required']);
    exit;
}

$program_id = (int)$_GET['id'];

$db = new Database();
$conn = $db->getConnection();

$query = "SELECT * FROM programs WHERE id = ?";
$params = [$program_id];

// Add location restriction for admin users
if (hasRole('admin') && isset($_SESSION['location_id']) && $_SESSION['location_id']) {
    $query .= " AND location_id = ?";
    $params[] = $_SESSION['location_id'];
}

$stmt = $conn->prepare($query);
$stmt->execute($params);
$program = $stmt->fetch();

if (!$program) {
    http_response_code(404);
    echo json_encode(['success' => false, 'message' => 'Program not found']);
    exit;
}

header('Content-Type: application/json');
echo json_encode(['success' => true, 'program' => $program]);
?>