<?php 
include 'koneksi.php'; 

// Fungsi helper untuk path aman (jika belum didefinisikan di koneksi.php)
if (!function_exists('getPath')) {
    function getPath($file) {
        return 'uploads/' . basename($file); // Sanitasi untuk cegah path traversal
    }
}

// Fetch data dengan error handling sederhana
$set_result = $conn->query("SELECT * FROM settings WHERE id=1");
$set = $set_result ? $set_result->fetch_assoc() : []; // Handle jika null

$ban_result = $conn->query("SELECT * FROM banner LIMIT 1");
$ban = $ban_result ? $ban_result->fetch_assoc() : [];

$tit_result = $conn->query("SELECT * FROM section_title LIMIT 1");
$tit = $tit_result ? $tit_result->fetch_assoc() : [];

$con_result = $conn->query("SELECT * FROM home_content LIMIT 1");
$con = $con_result ? $con_result->fetch_assoc() : [];

// Proses form dengan CSRF sederhana (opsional, tapi direkomendasikan)
session_start(); // Mulai session untuk CSRF
if (!isset($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

if (isset($_POST['kirim']) && isset($_POST['csrf_token']) && $_POST['csrf_token'] === $_SESSION['csrf_token']) {
    $stmt = $conn->prepare("INSERT INTO pesan (nama, whatsapp, isi_pesan) VALUES (?, ?, ?)");
    $stmt->bind_param("sss", $_POST['nama'], $_POST['wa'], $_POST['pesan']);
    if ($stmt->execute()) {
        echo "<script>alert('Pesan Terkirim!');</script>";
    } else {
        // Silent fail atau log error, jangan expose
    }
}
?>
<!DOCTYPE html>
<html lang="id">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title><?= htmlspecialchars($set['nama_website'] ?? 'Default Title', ENT_QUOTES, 'UTF-8') ?></title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css">
    <link href="https://fonts.googleapis.com/css2?family=Montserrat:wght@400;600;700&display=swap" rel="stylesheet">
    <link href="https://unpkg.com/aos@2.3.1/dist/aos.css" rel="stylesheet">
    <style>
        :root { --primary: #1e3a8a; --accent: #fbbf24; }
        body { font-family: 'Montserrat', sans-serif; color: #333; overflow-x: hidden; }
        .navbar-custom { background: rgba(30,58,138,0.85); backdrop-filter: blur(10px); border-bottom: 1px solid rgba(255,255,255,0.1); }
        .hero-section { background: linear-gradient(rgba(30,58,138,0.8), rgba(15,23,42,0.9)), url('<?= htmlspecialchars(getPath($ban['gambar'] ?? ''), ENT_QUOTES, 'UTF-8') ?>'); background-size: cover; color: white; padding: 180px 0 120px; }
        .card-hover { transition: transform 0.3s, box-shadow 0.3s; border: none; }
        .card-hover:hover { transform: translateY(-10px); box-shadow: 0 15px 30px rgba(0,0,0,0.1); }
        .wa-float { position: fixed; bottom: 30px; right: 30px; background: #25d366; color: white; width: 60px; height: 60px; border-radius: 50%; display: flex; align-items: center; justify-content: center; font-size: 30px; z-index: 99; animation: pulse 2s infinite; }
        @keyframes pulse { 0% { box-shadow: 0 0 0 0 rgba(37,211,102,0.7); } 70% { box-shadow: 0 0 0 15px rgba(37,211,102,0); } 100% { box-shadow: 0 0 0 0 rgba(37,211,102,0); } }
    </style>
</head>
<body id="home">

    <nav class="navbar navbar-expand-lg navbar-dark navbar-custom fixed-top">
        <div class="container">
            <a class="navbar-brand fw-bold d-flex align-items-center" href="#">
                <?php if(!empty($set['logo'])): ?><img src="<?= htmlspecialchars(getPath($set['logo']), ENT_QUOTES, 'UTF-8') ?>" height="40" class="bg-white rounded p-1 me-2"><?php endif; ?>
                <?= htmlspecialchars($set['nama_website'] ?? '', ENT_QUOTES, 'UTF-8') ?>
            </a>
            <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#nav"><span class="navbar-toggler-icon"></span></button>
            <div class="collapse navbar-collapse" id="nav">
                <ul class="navbar-nav ms-auto align-items-center">
                    <?php 
                    $menu = $conn->query("SELECT * FROM menu ORDER BY urutan"); 
                    while($m = $menu->fetch_assoc()): ?>
                    <li class="nav-item"><a class="nav-link text-uppercase small fw-bold mx-2" href="<?= htmlspecialchars($m['link'] ?? '#', ENT_QUOTES, 'UTF-8') ?>"><?= htmlspecialchars($m['nama'] ?? '', ENT_QUOTES, 'UTF-8') ?></a></li>
                    <?php endwhile; ?>
                    <li class="nav-item ms-lg-3"><a href="https://wa.me/<?= htmlspecialchars($set['wa_number'] ?? '', ENT_QUOTES, 'UTF-8') ?>" class="btn btn-warning rounded-pill fw-bold btn-sm px-4">Kontak</a></li>
                </ul>
            </div>
        </div>
    </nav>

    <section class="hero-section text-center">
        <div class="container" data-aos="fade-up">
            <h1 class="display-3 fw-bold mb-3"><?= htmlspecialchars($ban['judul'] ?? '', ENT_QUOTES, 'UTF-8') ?></h1>
            <p class="lead mb-4 mx-auto" style="max-width:700px"><?= htmlspecialchars($ban['subjudul'] ?? '', ENT_QUOTES, 'UTF-8') ?></p>
            <a href="<?= htmlspecialchars($ban['tombol_link'] ?? '#', ENT_QUOTES, 'UTF-8') ?>" class="btn btn-warning btn-lg rounded-pill px-5 fw-bold shadow"><?= htmlspecialchars($ban['tombol_text'] ?? 'Tombol', ENT_QUOTES, 'UTF-8') ?></a>
        </div>
    </section>

    <section id="tentang" class="py-5">
        <div class="container py-5">
            <div class="row align-items-center">
                <div class="col-lg-6 mb-4" data-aos="fade-right"><img src="<?= htmlspecialchars(!empty($con['about_img']) ? getPath($con['about_img']) : 'https://source.unsplash.com/600x400/?office', ENT_QUOTES, 'UTF-8') ?>" class="img-fluid rounded-4 shadow w-100" alt="About Image"></div>
                <div class="col-lg-6 ps-lg-5" data-aos="fade-left">
                    <h6 class="text-primary fw-bold text-uppercase ls-2"><?= htmlspecialchars($tit['tentang_judul'] ?? '', ENT_QUOTES, 'UTF-8') ?></h6>
                    <h2 class="fw-bold mb-4"><?= htmlspecialchars($tit['tentang_sub'] ?? '', ENT_QUOTES, 'UTF-8') ?></h2>
                    <div class="text-muted mb-4"><?= $con['about_text'] ?? '<p>Deskripsi perusahaan belum diisi.</p>' // Note: Hindari decode jika mungkin; asumsikan DB sudah sanitized ?></div>
                </div>
            </div>
        </div>
    </section>

    <section id="alur" class="py-5 bg-light">
        <div class="container">
            <div class="text-center mb-5" data-aos="fade-up"><h2 class="fw-bold">Alur Penerbitan</h2></div>
            <div class="row text-center">
                <?php 
                $alur = [
                    ['icon'=>'bi-file-text', 'judul'=> $con['alur_1_judul'] ?? '', 'desc'=> $con['alur_1_desc'] ?? ''],
                    ['icon'=>'bi-pencil', 'judul'=> $con['alur_2_judul'] ?? '', 'desc'=> $con['alur_2_desc'] ?? ''],
                    ['icon'=>'bi-award', 'judul'=> $con['alur_3_judul'] ?? '', 'desc'=> $con['alur_3_desc'] ?? ''],
                    ['icon'=>'bi-printer', 'judul'=> $con['alur_4_judul'] ?? '', 'desc'=> $con['alur_4_desc'] ?? '']
                ];
                foreach($alur as $i => $a): ?>
                <div class="col-md-3 mb-4" data-aos="fade-up" data-aos-delay="<?=$i*100?>">
                    <div class="bg-white p-4 rounded shadow-sm h-100 card-hover">
                        <i class="bi <?= htmlspecialchars($a['icon'], ENT_QUOTES, 'UTF-8') ?> fs-1 text-primary mb-3"></i><h5 class="fw-bold"><?= htmlspecialchars($a['judul'], ENT_QUOTES, 'UTF-8') ?></h5><p class="text-muted small"><?= htmlspecialchars($a['desc'], ENT_QUOTES, 'UTF-8') ?></p>
                    </div>
                </div>
                <?php endforeach; ?>
            </div>
        </div>
    </section>

    <section id="layanan" class="py-5">
        <div class="container py-5">
            <div class="text-center mb-5" data-aos="fade-up"><h2 class="fw-bold"><?= htmlspecialchars($tit['layanan_judul'] ?? '', ENT_QUOTES, 'UTF-8') ?></h2><p><?= htmlspecialchars($tit['layanan_sub'] ?? '', ENT_QUOTES, 'UTF-8') ?></p></div>
            <div class="row justify-content-center g-4">
                <?php 
                $lay = $conn->query("SELECT * FROM layanan ORDER BY harga ASC"); 
                while($l = $lay->fetch_assoc()): ?>
                <div class="col-md-4" data-aos="zoom-in">
                    <div class="card h-100 border-0 shadow-sm text-center p-4 card-hover">
                        <h4 class="fw-bold"><?= htmlspecialchars($l['nama_paket'] ?? '', ENT_QUOTES, 'UTF-8') ?></h4>
                        <h2 class="text-primary my-3">Rp <?= number_format((int)($l['harga'] ?? 0)/1000, 0) ?>k</h2>
                        <p class="small text-muted"><?= htmlspecialchars($l['fitur'] ?? '', ENT_QUOTES, 'UTF-8') ?></p>
                        <a href="https://wa.me/<?= htmlspecialchars($set['wa_number'] ?? '', ENT_QUOTES, 'UTF-8') ?>?text=Info paket <?= urlencode(htmlspecialchars($l['nama_paket'] ?? '', ENT_QUOTES, 'UTF-8')) ?>" class="btn btn-outline-primary rounded-pill w-100">Pilih</a>
                    </div>
                </div>
                <?php endwhile; ?>
            </div>
        </div>
    </section>

    <section id="katalog" class="py-5 bg-light">
        <div class="container py-5">
            <div class="text-center mb-5" data-aos="fade-up"><h2 class="fw-bold"><?= htmlspecialchars($tit['katalog_judul'] ?? '', ENT_QUOTES, 'UTF-8') ?></h2></div>
            <div class="row g-4">
                <?php 
                $buku = $conn->query("SELECT * FROM buku WHERE status='published' ORDER BY id DESC LIMIT 8"); 
                while($b = $buku->fetch_assoc()): ?>
                <div class="col-lg-3 col-md-4 col-6" data-aos="fade-up">
                    <div class="card h-100 border-0 shadow-sm card-hover">
                        <img src="<?= htmlspecialchars(getPath($b['cover'] ?? ''), ENT_QUOTES, 'UTF-8') ?>" class="card-img-top" style="height:300px; object-fit:cover;" alt="Cover Buku">
                        <div class="card-body">
                            <h6 class="fw-bold text-truncate"><?= htmlspecialchars($b['judul'] ?? '', ENT_QUOTES, 'UTF-8') ?></h6>
                            <span class="fw-bold text-primary">Rp <?= number_format((int)($b['harga_jual'] ?? 0)) ?></span>
                            <a href="detail_buku.php?id=<?= (int)($b['id'] ?? 0) ?>" class="btn btn-sm btn-light rounded-circle float-end"><i class="bi bi-arrow-right"></i></a>
                        </div>
                    </div>
                </div>
                <?php endwhile; ?>
            </div>
        </div>
    </section>

    <section id="kontak" class="py-5 bg-dark text-white">
        <div class="container py-5">
            <div class="row g-5">
                <div class="col-md-6" data-aos="fade-right">
                    <h3 class="fw-bold mb-4"><?= htmlspecialchars($tit['kontak_judul'] ?? '', ENT_QUOTES, 'UTF-8') ?></h3>
                    <ul class="list-unstyled mt-4">
                        <li class="mb-3"><i class="bi bi-whatsapp me-3 text-warning"></i> +<?= htmlspecialchars($set['wa_number'] ?? '', ENT_QUOTES, 'UTF-8') ?></li>
                        <li class="mb-3"><i class="bi bi-envelope me-3 text-warning"></i> <?= htmlspecialchars($set['email_contact'] ?? '', ENT_QUOTES, 'UTF-8') ?></li>
                        <li class="mb-3"><i class="bi bi-geo-alt me-3 text-warning"></i> <?= htmlspecialchars($set['alamat'] ?? '', ENT_QUOTES, 'UTF-8') ?></li>
                    </ul>
                </div>
                <div class="col-md-6" data-aos="fade-left">
                    <form method="POST" class="bg-white p-4 rounded text-dark shadow-lg">
                        <h5 class="fw-bold mb-3">Kirim Pesan</h5>
                        <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
                        <div class="mb-3"><input name="nama" class="form-control" placeholder="Nama" required></div>
                        <div class="mb-3"><input name="wa" class="form-control" placeholder="WhatsApp" required></div>
                        <div class="mb-3"><textarea name="pesan" class="form-control" rows="3" placeholder="Pesan..." required></textarea></div>
                        <button name="kirim" class="btn btn-primary w-100">Kirim</button>
                    </form>
                </div>
            </div>
        </div>
    </section>

    <footer class="bg-secondary text-white text-center py-3"><small>&copy; <?= date('Y') ?> <?= htmlspecialchars($set['nama_website'] ?? '', ENT_QUOTES, 'UTF-8') ?>. All Rights Reserved.</small></footer>
    <a href="https://wa.me/<?= htmlspecialchars($set['wa_number'] ?? '', ENT_QUOTES, 'UTF-8') ?>" class="wa-float shadow-lg" target="_blank"><i class="bi bi-whatsapp"></i></a>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://unpkg.com/aos@2.3.1/dist/aos.js"></script>
    <script>AOS.init({duration:800, once:true});</script>
</body>
</html>