Sindbad~EG File Manager

<?php
session_start();
require_once __DIR__ . '/../config/database.php';
require_once __DIR__ . '/../includes/functions.php';

// Check if user is logged in
if (!isset($_SESSION['user_id'])) {
    http_response_code(401);
    echo json_encode(['error' => 'Unauthorized']);
    exit();
}

// Check permission
if (!checkPermission('admin') && $_SESSION['user_level'] !== 'superuser') {
    http_response_code(403);
    echo json_encode(['error' => 'Access denied']);
    exit();
}

if (!isset($_GET['area_id']) || empty($_GET['area_id'])) {
    http_response_code(400);
    echo json_encode(['error' => 'Area ID is required']);
    exit();
}

$area_id = (int)$_GET['area_id'];

try {
    $query = "SELECT id, name FROM districts WHERE area_id = :area_id ORDER BY name";
    $stmt = $db->prepare($query);
    $stmt->bindParam(':area_id', $area_id);
    $stmt->execute();
    
    $districts = $stmt->fetchAll(PDO::FETCH_ASSOC);
    
    header('Content-Type: application/json');
    echo json_encode($districts);
    
} catch (Exception $e) {
    error_log("Error in get-districts.php: " . $e->getMessage());
    http_response_code(500);
    echo json_encode(['error' => 'Database error: ' . $e->getMessage()]);
}
?>