<?php
/**
 * Terminal-Einstieg für Reel Royale (ohne Login).
 *   terminal.php?h=<terminal_hash>&v=<view_token>&t=<token>[&go=slf]
 * Verifiziert den Token, meldet den Terminal-Gast-Spieler an und leitet in die
 * Lobby – oder per go=<ziel> direkt in ein Spiel (Whitelist unten).
 */
require_once __DIR__ . '/includes/bootstrap.php';
require_once __DIR__ . '/includes/terminal.php';

$hash = (string)($_GET['h'] ?? '');
$view = (string)($_GET['v'] ?? '');
$tok  = (string)($_GET['t'] ?? '');

if ($hash === '' || $view === '' || !rr_term_verify($hash, $view, $tok)) {
    http_response_code(403);
    exit('Kein Zugriff.');
}

$row = rr_term_ensure($hash, $view);

$_SESSION['user_id'] = (int)$row['slots_user_id'];
$_SESSION['last_ping_ts'] = time();
$_SESSION['rr_terminal'] = [
    'hash'  => $hash,
    'view'  => $view,
    'games' => rr_term_selected_games($row),
    'back'  => '/terminal/terminal.php?h=' . rawurlencode($hash),
];
db()->prepare('UPDATE users SET last_login_at = NOW(), last_seen_at = NOW() WHERE id = ?')->execute([(int)$row['slots_user_id']]);

// Direkteinstieg in ein Spiel (Whitelist) – z.B. Stadt Land Fluss als eigene Terminal-Ansicht.
$targets = ['slf' => 'slf.php'];
$go = (string)($_GET['go'] ?? '');

header('Location: ' . ($targets[$go] ?? 'index.php'));
exit;