<?php
require_once("env.php");
require_once("session.php");
require_once("connection.php");
require_once("functions.php");

if (!isset($_SESSION['user_id'])) {
    http_response_code(401);
    echo "Not authorized";
    exit;
}

$article_id = (int)($_POST['id'] ?? 0);
$user_id = $_SESSION['user_id'];

if ($article_id <= 0) {
    http_response_code(400);
    echo "Invalid blog ID";
    exit;
}

$stmt = $conn->prepare("UPDATE blogs SET status = 'published' WHERE blog_id = ? AND author = ?");
$stmt->bind_param("ii", $article_id, $user_id);

if ($stmt->execute()) {
    echo "Published";
} else {
    http_response_code(500);
    echo "Failed to publish: " . $stmt->error;
}
?>