                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    
<?php
require_once '../includes/config.php';
header('Content-Type: application/json');

if (!is_admin_logged_in()) {
    echo json_encode(['success' => false, 'message' => 'Unauthorized']);
    exit;
}

$id = intval($_POST['id'] ?? 0);
$table = preg_replace('/[^a-z_]/', '', $_POST['table'] ?? '');

$allowed = ['products', 'categories', 'brands', 'banners', 'coupons', 'subcategories'];
if (!in_array($table, $allowed) || !$id) {
    echo json_encode(['success' => false, 'message' => 'Invalid request']);
    exit;
}

try {
    $stmt = $db->prepare("UPDATE $table SET status = NOT status WHERE id = ?");
    $stmt->execute([$id]);
    echo json_encode(['success' => true]);
} catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => 'Update failed']);
}