Sindbad~EG File Manager

<?php
session_start();
require_once __DIR__ . '/../config/database.php';
require_once __DIR__ . '/../includes/functions.php';

// Check if user is logged in
if (!isset($_SESSION['user_id'])) {
    http_response_code(401);
    echo json_encode(['error' => 'Unauthorized']);
    exit();
}

// Check permission
if (!checkPermission('admin') && $_SESSION['user_level'] !== 'superuser') {
    http_response_code(403);
    echo json_encode(['error' => 'Access denied']);
    exit();
}

if (!isset($_GET['district_id']) || empty($_GET['district_id'])) {
    http_response_code(400);
    echo json_encode(['error' => 'District ID is required']);
    exit();
}

$district_id = (int)$_GET['district_id'];

try {
    $query = "SELECT id, name FROM assemblies WHERE district_id = :district_id ORDER BY name";
    $stmt = $db->prepare($query);
    $stmt->bindParam(':district_id', $district_id);
    $stmt->execute();
    
    $assemblies = $stmt->fetchAll(PDO::FETCH_ASSOC);
    
    header('Content-Type: application/json');
    echo json_encode($assemblies);
    
} catch (Exception $e) {
    error_log("Error in get-assemblies.php: " . $e->getMessage());
    http_response_code(500);
    echo json_encode(['error' => 'Database error: ' . $e->getMessage()]);
}
?>