<?php
require_once __DIR__ . '/../../includes/auth.php';
header('Content-Type: application/json');

if (!AdminAuth::getUser()) {
    http_response_code(401);
    echo json_encode(['error' => 'Unauthorized']);
    exit;
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['error' => 'No file received']); exit;
}

$result = handleImageUpload('image', __DIR__ . '/../../uploads/splashes/', 'splash_');

if (isset($result['success'])) {
    echo json_encode(['success' => true, 'url' => '/uploads/splashes/' . $result['filename']]);
} else {
    echo json_encode(['error' => $result['error']]);
}
