<?php
require_once 'config.php';
require_once 'email.php';

// ===== AFFILIATE TRACKING CODE =====
session_start(); // Ensure session is started

$affiliate_code = isset($_GET['ref']) ? sanitize($_GET['ref']) : '';
$affiliate = null;
$affiliate_signup_id = null;
$adminPdo = null;

if (!empty($affiliate_code)) {
    try {
        // Connect to admin database
        $adminPdo = new PDO(
            "mysql:host=localhost;dbname=u752449863_rrshop;charset=utf8mb4",
            'u752449863_rradmin',
            'S@n@h2016',
            [
                PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
                PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
            ]
        );
        
        // Check if affiliate exists and is active
        $stmt = $adminPdo->prepare("SELECT * FROM affiliates WHERE affiliate_code = ? AND status = 'active'");
        $stmt->execute([$affiliate_code]);
        $affiliate = $stmt->fetch();
        
        if ($affiliate) {
            // Track the click (only if not already tracked in this session)
            if (!isset($_SESSION['affiliate_tracked_' . $affiliate['id']])) {
                $trackStmt = $adminPdo->prepare("
                    INSERT INTO affiliate_signups (affiliate_id, ip_address, user_agent, clicked_at)
                    VALUES (?, ?, ?, NOW())
                ");
                $trackStmt->execute([
                    $affiliate['id'],
                    $_SERVER['REMOTE_ADDR'] ?? null,
                    $_SERVER['HTTP_USER_AGENT'] ?? null
                ]);
                
                $_SESSION['affiliate_tracked_' . $affiliate['id']] = true;
                $_SESSION['affiliate_signup_id'] = $adminPdo->lastInsertId();
            }
            
            $affiliate_signup_id = $_SESSION['affiliate_signup_id'] ?? null;
        }
    } catch (Exception $e) {
        logError('Affiliate tracking error: ' . $e->getMessage());
    }
}
// ===== END AFFILIATE TRACKING CODE =====

// ===== MEMBER REFERRAL TRACKING CODE =====
$mref_code    = isset($_GET['mref']) ? strtoupper(sanitize($_GET['mref'])) : '';
$mref_user    = null;
$mref_click_id = null;

if (!empty($mref_code) && preg_match('/^RR\d{7}$/', $mref_code)) {
    try {
        $mrefPdo = new PDO(
            "mysql:host=localhost;dbname=u752449863_rrpanel;charset=utf8mb4",
            'u752449863_rrpaneladmin',
            'S@n@h2016',
            [PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC]
        );

        // Resolve member ID to numeric user id
        $mrefNumericId = intval(ltrim(substr($mref_code, 2), '0') ?: '0');
        $stmt = $mrefPdo->prepare("SELECT id, email, status FROM users WHERE id = ? AND status = 'active' AND email_verified = 1");
        $stmt->execute([$mrefNumericId]);
        $mref_user = $stmt->fetch();

        if ($mref_user) {
            $clientIP = $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';

            // Block if visitor IP matches the referrer's own signup IP
            $ipCheck = $mrefPdo->prepare("SELECT signup_ip FROM users WHERE id = ?");
            $ipCheck->execute([$mref_user['id']]);
            $referrerIpRow = $ipCheck->fetch();
            $isSameIPAsReferrer = ($referrerIpRow && !empty($referrerIpRow['signup_ip']) && $referrerIpRow['signup_ip'] === $clientIP);

            // SPAM: max 5 hits per IP per referrer link
            $spamCheck = $mrefPdo->prepare("SELECT COUNT(*) as cnt FROM member_referral_clicks WHERE referrer_user_id = ? AND ip_address = ?");
            $spamCheck->execute([$mref_user['id'], $clientIP]);
            $spamRow = $spamCheck->fetch();

            // Also block Facebook/crawler IPs (2a03:2880:: prefix)
            $isCrawler = (strpos($clientIP, '2a03:2880:') === 0);

            if (!$isCrawler && !$isSameIPAsReferrer && $spamRow['cnt'] < 5 && !isset($_SESSION['mref_tracked_' . $mref_user['id']])) {
                $ins = $mrefPdo->prepare("INSERT INTO member_referral_clicks (referrer_user_id, ip_address, user_agent, clicked_at) VALUES (?, ?, ?, NOW())");
                $ins->execute([$mref_user['id'], $clientIP, $_SERVER['HTTP_USER_AGENT'] ?? null]);
                $_SESSION['mref_click_id'] = $mrefPdo->lastInsertId();
                $_SESSION['mref_tracked_' . $mref_user['id']] = true;
            }
            $mref_click_id = $_SESSION['mref_click_id'] ?? null;
        }
    } catch (Exception $e) {
        logError('Member referral tracking error: ' . $e->getMessage());
    }
}
// ===== END MEMBER REFERRAL TRACKING CODE =====

$errors = [];
$success_message = '';
$form_data = [];
$fire_conversion = false; // Google Ads conversion flag

// ===== ANTI-BOT: Generate CSRF token =====
if (!isset($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
// Reset form timing on page load (GET), not POST
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    $_SESSION['form_loaded_at'] = time();
}

// ===== ANTI-BOT: reCAPTCHA v3 config =====
$recaptcha_site_key = defined('RECAPTCHA_SITE_KEY') ? RECAPTCHA_SITE_KEY : '';
$recaptcha_secret_key = defined('RECAPTCHA_SECRET_KEY') ? RECAPTCHA_SECRET_KEY : '';

// Handle form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Initialize database
    try {
        $db = new Database();
        $pdo = $db->getConnection();
    } catch (Exception $e) {
        logError('Database connection failed in signup.php: ' . $e->getMessage());
        $errors[] = 'System error. Please try again later.';
    }

    if (empty($errors)) {
        $clientIP = $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';
        $userAgent = $_SERVER['HTTP_USER_AGENT'] ?? '';
        $honeypotTriggered = false;

        // ===== ANTI-BOT CHECK 1: Honeypot field =====
        if (!empty($_POST['website_url'])) {
            // Bots fill hidden fields - silently reject
            $honeypotTriggered = true;
            logError('Honeypot triggered on signup', ['ip' => $clientIP, 'ua' => $userAgent]);
            // Log the attempt
            try {
                $pdo->prepare("INSERT INTO registration_attempts (ip_address, email, attempt_type, success, user_agent, honeypot_triggered) VALUES (?, ?, 'registration', 0, ?, 1)")
                    ->execute([$clientIP, $_POST['email'] ?? '', $userAgent]);
            } catch (Exception $e) {}
            // Show fake success to not alert the bot
            $success_message = 'Registration successful! We\'ve sent a verification link to your email address. Please check your inbox and click the link to activate your account.';
            $form_data = [];
        }

        // ===== ANTI-BOT CHECK 2: CSRF token =====
        if (!$honeypotTriggered) {
            $submittedToken = $_POST['csrf_token'] ?? '';
            if (empty($submittedToken) || !hash_equals($_SESSION['csrf_token'], $submittedToken)) {
                $errors[] = 'Security validation failed. Please refresh the page and try again.';
                logError('CSRF token mismatch on signup', ['ip' => $clientIP]);
            }
        }

        // ===== ANTI-BOT CHECK 3: Time-based detection (form filled too fast) =====
        if (!$honeypotTriggered && empty($errors)) {
            $formLoadedAt = $_SESSION['form_loaded_at'] ?? time();
            $timeTaken = time() - $formLoadedAt;
            if ($timeTaken < 3) {
                $errors[] = 'Please take your time filling out the form.';
                logError('Form submitted too quickly', ['ip' => $clientIP, 'seconds' => $timeTaken]);
                try {
                    $pdo->prepare("INSERT INTO registration_attempts (ip_address, attempt_type, success, user_agent) VALUES (?, 'registration', 0, ?)")
                        ->execute([$clientIP, $userAgent]);
                } catch (Exception $e) {}
            }
        }

        // ===== ANTI-BOT CHECK 4: IP blocklist =====
        if (!$honeypotTriggered && empty($errors)) {
            try {
                $stmt = $pdo->prepare("SELECT id FROM ip_blocklist WHERE ip_address = ? AND (expires_at IS NULL OR expires_at > NOW())");
                $stmt->execute([$clientIP]);
                if ($stmt->fetch()) {
                    $errors[] = 'Registration is temporarily unavailable from your network. Please contact support.';
                    logError('Blocked IP attempted signup', ['ip' => $clientIP]);
                }
            } catch (Exception $e) {}
        }

        // ===== ANTI-BOT CHECK 5: Rate limiting =====
        if (!$honeypotTriggered && empty($errors)) {
            try {
                $stmt = $pdo->prepare("SELECT COUNT(*) as cnt FROM registration_attempts WHERE ip_address = ? AND attempt_type = 'registration' AND created_at > DATE_SUB(NOW(), INTERVAL 1 HOUR)");
                $stmt->execute([$clientIP]);
                $attempts = $stmt->fetch();
                if ($attempts && $attempts['cnt'] >= MAX_ATTEMPTS_PER_IP_HOUR) {
                    $errors[] = 'Too many registration attempts. Please try again later.';
                    logError('Rate limit exceeded on signup', ['ip' => $clientIP, 'attempts' => $attempts['cnt']]);
                    if ($attempts['cnt'] >= MAX_ATTEMPTS_PER_IP_HOUR * 3) {
                        try {
                            $pdo->prepare("INSERT IGNORE INTO ip_blocklist (ip_address, reason, blocked_by, expires_at) VALUES (?, 'Excessive registration attempts', 'system', DATE_ADD(NOW(), INTERVAL 2 HOUR))")
                                ->execute([$clientIP]);
                        } catch (Exception $e) {}
                    }
                }
            } catch (Exception $e) {}
        }

       // ===== ANTI-BOT CHECK 6: IP duplicate registration (permanent - no time window) =====
        if (!$honeypotTriggered && empty($errors)) {
            try {
                $stmt = $pdo->prepare("SELECT COUNT(*) as cnt FROM users WHERE signup_ip = ?");
                $stmt->execute([$clientIP]);
                $ipSignups = $stmt->fetch();
                if ($ipSignups && $ipSignups['cnt'] >= 1) {
                    $errors[] = 'An account has already been registered from your network. If you believe this is an error, please contact support@relevantreflex.com.';
                    logError('Duplicate IP registration blocked (permanent)', ['ip' => $clientIP, 'existing_count' => $ipSignups['cnt']]);
                    try {
                        $pdo->prepare("INSERT INTO registration_attempts (ip_address, email, attempt_type, success, user_agent) VALUES (?, ?, 'registration', 0, ?)")
                            ->execute([$clientIP, $_POST['email'] ?? '', $userAgent]);
                    } catch (Exception $e) {}
                }
            } catch (Exception $e) {}
        }

        // ===== ANTI-BOT CHECK 7: reCAPTCHA v3 verification =====
        if (!$honeypotTriggered && empty($errors) && !empty($recaptcha_secret_key)) {
            $recaptchaResponse = $_POST['g-recaptcha-response'] ?? '';
            if (empty($recaptchaResponse)) {
                $errors[] = 'Security verification failed. Please try again.';
            } else {
                $verifyUrl = 'https://www.google.com/recaptcha/api/siteverify';
                $response = file_get_contents($verifyUrl . '?' . http_build_query([
                    'secret' => $recaptcha_secret_key,
                    'response' => $recaptchaResponse,
                    'remoteip' => $clientIP
                ]));
                $recaptchaResult = json_decode($response, true);
                $captchaScore = $recaptchaResult['score'] ?? 0;
                
                if (!($recaptchaResult['success'] ?? false) || $captchaScore < 0.3) {
                    $errors[] = 'Security verification failed. If you are not a robot, please try again.';
                    logError('reCAPTCHA failed', ['ip' => $clientIP, 'score' => $captchaScore]);
                    try {
                        $pdo->prepare("INSERT INTO registration_attempts (ip_address, attempt_type, success, user_agent, captcha_score) VALUES (?, 'registration', 0, ?, ?)")
                            ->execute([$clientIP, $userAgent, $captchaScore]);
                    } catch (Exception $e) {}
                }
            }
        }

        // Get and sanitize form data
        $email = isset($_POST['email']) ? sanitize($_POST['email']) : '';
        $email_confirm = isset($_POST['email_confirm']) ? sanitize($_POST['email_confirm']) : '';
        $password = isset($_POST['password']) ? $_POST['password'] : '';
        $gender = isset($_POST['gender']) ? sanitize($_POST['gender']) : '';
        $dateOfBirth = isset($_POST['date_of_birth']) ? sanitize($_POST['date_of_birth']) : '';
        $postcode = isset($_POST['postcode']) ? sanitize($_POST['postcode']) : '';
        $privacyAccepted = isset($_POST['privacy_policy']) ? true : false;
        // FIX #4: Age confirmation checkbox validation
        $ageConfirmed = isset($_POST['age_confirm']) ? true : false;

        // Store form data for repopulating form on error
        $form_data = [
            'email'            => $email,
            'gender'           => $gender,
            'date_of_birth'    => $dateOfBirth,
            'postcode'         => $postcode,
            'whatsapp_number'  => isset($_POST['whatsapp_number']) ? sanitize($_POST['whatsapp_number']) : '',
        ];

        // Validation
        if (empty($email)) {
            $errors[] = 'Email is required.';
        }

        if (!empty($email) && !empty($email_confirm) && $email !== $email_confirm) {
            $errors[] = 'Email addresses do not match. Please check and try again.';
        }

        if (empty($email_confirm)) {
            $errors[] = 'Please confirm your email address.';
        }

        if (empty($password)) {
            $errors[] = 'Password is required.';
        }

        if (empty($gender)) {
            $errors[] = 'Gender is required.';
        }

        if (empty($dateOfBirth)) {
            $errors[] = 'Date of birth is required.';
        }

        if (empty($postcode)) {
            $errors[] = 'Postcode is required.';
        }

        if (!$privacyAccepted) {
            $errors[] = 'You must agree to the Privacy Policy and Terms & Conditions.';
        }

        // FIX #4: Validate age confirmation
        if (!$ageConfirmed) {
            $errors[] = 'You must confirm that you are 18 years of age or older.';
        }

        // Validate email format
        if (!empty($email) && !validateEmail($email)) {
            $errors[] = 'Please provide a valid email address.';
        }

        // Validate password strength
        if (!empty($password) && !validatePassword($password)) {
            $errors[] = 'Password must be at least 8 characters long.';
        }

        // Validate gender
        if (!empty($gender) && !in_array($gender, ['Male', 'Female'])) {
            $errors[] = 'Please select a valid gender.';
        }

        // Validate date of birth
        if (!empty($dateOfBirth) && !validateDateOfBirth($dateOfBirth)) {
            $errors[] = 'You must be at least 18 years old to register.';
        }

        // Validate postcode
        if (!empty($postcode) && !validatePostcode($postcode)) {
            $errors[] = 'Please provide a valid 6-digit postal code.';
        }

        // ===== WHATSAPP / MOBILE NUMBER =====
        $whatsapp_number         = isset($_POST['whatsapp_number'])         ? preg_replace('/\D/', '', sanitize($_POST['whatsapp_number']))         : '';
        $whatsapp_number_confirm = isset($_POST['whatsapp_number_confirm']) ? preg_replace('/\D/', '', sanitize($_POST['whatsapp_number_confirm'])) : '';
        $is_whatsapp             = isset($_POST['is_whatsapp']) ? 1 : 0;
        $form_data['whatsapp_number'] = $whatsapp_number;

        if (empty($whatsapp_number)) {
            $errors[] = 'Mobile/WhatsApp number is required.';
        } elseif (!preg_match('/^[6-9][0-9]{9}$/', $whatsapp_number)) {
            $errors[] = 'Please enter a valid 10-digit Indian mobile number (starting with 6–9).';
        } elseif ($whatsapp_number !== $whatsapp_number_confirm) {
            $errors[] = 'Mobile numbers do not match. Please check and try again.';
        }
        // ===== END WHATSAPP / MOBILE NUMBER =====

        // If no validation errors, proceed with registration
        if (empty($errors)) {
            try {
                // Check if email already exists
                $stmt = $pdo->prepare("SELECT id FROM users WHERE email = ?");
                $stmt->execute([$email]);
                
                if ($stmt->rowCount() > 0) {
                    $errors[] = 'An account with this email address already exists. Please try logging in or use a different email.';
                } else {
                    // Hash the password
                    $hashedPassword = hashPassword($password);
                    
                    // Start transaction
                    $pdo->beginTransaction();
                    
                    // Insert new user (with signup IP and WhatsApp number)
                    $stmt = $pdo->prepare("
                        INSERT INTO users (email, password, gender, date_of_birth, postcode, whatsapp_number, whatsapp_is_whatsapp, signup_ip, email_verified, status, created_at) 
                        VALUES (?, ?, ?, ?, ?, ?, ?, ?, 0, 'inactive', NOW())
                    ");
                    
                    $stmt->execute([$email, $hashedPassword, $gender, $dateOfBirth, $postcode, $whatsapp_number, $is_whatsapp, $clientIP]);
                    $userId = $pdo->lastInsertId();
                    
                    // Auto-map state & city from PIN code
                    try {
                        $pinStmt = $pdo->prepare("SELECT state, city FROM pin_lookup WHERE pincode = ? LIMIT 1");
                        $pinStmt->execute([$postcode]);
                        $pinRow = $pinStmt->fetch(PDO::FETCH_ASSOC);
                        if ($pinRow) {
                            $pdo->prepare("UPDATE users SET state = ?, city = ? WHERE id = ?")->execute([$pinRow['state'], $pinRow['city'], $userId]);
                        }
                    } catch (Exception $e) {}
                    
                    // Generate verification token
                    $verificationToken = generateSecureToken();
                    $expiresAt = date('Y-m-d H:i:s', strtotime('+' . TOKEN_EXPIRY_HOURS . ' hours'));
                    
                    // Insert verification token
                    $stmt = $pdo->prepare("
                        INSERT INTO email_verifications (user_id, token, expires_at, created_at) 
                        VALUES (?, ?, ?, NOW())
                    ");
                    
                    $stmt->execute([$userId, $verificationToken, $expiresAt]);

                    // Save WhatsApp number to mobile_verifications (unverified) so it shows in admin immediately
                    if (!empty($whatsapp_number)) {
                        $pdo->prepare("
                            INSERT INTO mobile_verifications (user_id, mobile_number, is_verified, verification_attempts, created_at)
                            VALUES (?, ?, 0, 0, NOW())
                            ON DUPLICATE KEY UPDATE mobile_number = ?, updated_at = NOW()
                        ")->execute([$userId, $whatsapp_number, $whatsapp_number]);
                    }
                    
                    // Commit transaction
                    $pdo->commit();
                    
                    // Log successful registration attempt
                    try {
                        $pdo->prepare("INSERT INTO registration_attempts (ip_address, email, attempt_type, success, user_agent) VALUES (?, ?, 'registration', 1, ?)")
                            ->execute([$clientIP, $email, $userAgent]);
                    } catch (Exception $e) {}
                    
                    // Regenerate CSRF token
                    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
                    
                    // ===== UPDATE MEMBER REFERRAL TRACKING =====
                    if ($mref_user && $mref_click_id && isset($mrefPdo)) {
                        try {
                            $refIpCheck = $mrefPdo->prepare("SELECT signup_ip FROM users WHERE id = ?");
                            $refIpCheck->execute([$mref_user['id']]);
                            $refIpRow = $refIpCheck->fetch();
                            $isSameIP = ($refIpRow && !empty($refIpRow['signup_ip']) && $refIpRow['signup_ip'] === $clientIP);

                            if ($mref_user['id'] != $userId && !$isSameIP) {
                                $mrefPdo->prepare("
                                    UPDATE member_referral_clicks
                                    SET referee_user_id = ?, email = ?, signup_completed = 1, signed_up_at = NOW()
                                    WHERE id = ?
                                ")->execute([$userId, $email, $mref_click_id]);
                            }
                        } catch (Exception $e) {
                            logError('Member referral signup update error: ' . $e->getMessage());
                        }
                    }
                    // ===== END UPDATE MEMBER REFERRAL TRACKING =====

                    // ===== UPDATE AFFILIATE TRACKING =====
                    if ($affiliate && $affiliate_signup_id && $adminPdo) {
                        try {
                            $updateStmt = $adminPdo->prepare("
                                UPDATE affiliate_signups 
                                SET panel_user_id = ?, 
                                    email = ?, 
                                    signup_completed = 1, 
                                    signed_up_at = NOW(),
                                    reward_amount = ?
                                WHERE id = ?
                            ");
                            $updateStmt->execute([
                                $userId,
                                $email,
                                $affiliate['signup_reward'],
                                $affiliate_signup_id
                            ]);
                            
                            $adminPdo->exec("UPDATE affiliates SET total_signups = total_signups + 1 WHERE id = " . intval($affiliate['id']));
                            
                            logError('Affiliate signup tracked', [
                                'user_id' => $userId,
                                'affiliate_code' => $affiliate_code,
                                'email' => $email
                            ]);
                        } catch (Exception $e) {
                            logError('Failed to update affiliate tracking: ' . $e->getMessage());
                        }
                    }
                    // ===== END UPDATE AFFILIATE TRACKING =====
                    
                    // Send verification email
                    $emailHandler = new EmailHandler();
                    $emailSent = $emailHandler->sendVerificationEmail($email, $verificationToken);
                    
                    if ($emailSent) {
                        logError('User registered successfully', [
                            'user_id' => $userId,
                            'email' => $email,
                            'verification_token_sent' => true,
                            'affiliate_code' => $affiliate_code ?? null
                        ]);
                        
                        $success_message = 'Registration successful! We\'ve sent a verification link to your email address. Please check your inbox and click the link to activate your account.';
                        $form_data = [];
                        $fire_conversion = true; // Real signup - fire Google Ads conversion
                    } else {
                        logError('User registered but email verification failed', [
                            'user_id' => $userId,
                            'email' => $email
                        ]);
                        
                        $success_message = 'Registration successful! However, we encountered an issue sending the verification email. Please contact support at support@relevantreflex.com to activate your account.';
                        $form_data = [];
                        $fire_conversion = true; // Real signup - fire Google Ads conversion
                    }
                }
            } catch (PDOException $e) {
                if ($pdo->inTransaction()) {
                    $pdo->rollback();
                }
                logError('Database error during registration', ['error' => $e->getMessage(), 'email' => $email]);
                $errors[] = 'Registration failed due to a system error. Please try again later.';
            } catch (Exception $e) {
                if ($pdo->inTransaction()) {
                    $pdo->rollback();
                }
                logError('General error during registration', ['error' => $e->getMessage(), 'email' => $email]);
                $errors[] = 'An unexpected error occurred. Please try again later.';
            }
        }
    }
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
     <?php require_once 'gtag.php'; ?>
    <title>Sign Up - Relevant Reflex Paid Online Surveys India</title>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="robots" content="noindex, nofollow">

    <link rel="apple-touch-icon" href="assets/img/apple-icon.png">
    <link rel="shortcut icon" type="image/x-icon" href="assets/img/favicon.png">

    <!-- Preconnect to speed up Google Fonts -->
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>

    <link rel="stylesheet" href="assets/css/bootstrap.min.css">
    <link rel="stylesheet" href="assets/css/templatemo.css">
    <link rel="stylesheet" href="assets/css/custom.css">
    <!-- Fix: Added display=swap to prevent font render blocking -->
    <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap">
    <link rel="stylesheet" href="assets/css/fontawesome.min.css">

    <style>
        .registration-form {
            background: white;
            border-radius: 8px;
            padding: 2rem;
            box-shadow: 0 2px 10px rgba(0,0,0,0.1);
            max-width: 500px;
            margin: 0 auto;
        }
        .form-tabs {
            border-bottom: 1px solid #e5e5e5;
            margin-bottom: 1.5rem;
        }
        .form-tabs .nav-link {
            border: none;
            border-bottom: 2px solid transparent;
            color: #666;
            padding: 0.5rem 1rem;
        }
        .form-tabs .nav-link.active {
            border-bottom: 2px solid #59ab6e;
            color: #59ab6e;
            background: none;
        }
        .form-group {
            margin-bottom: 1rem;
        }
        .form-label {
            font-weight: 500;
            color: #333;
            display: block;
            margin-bottom: 0.5rem;
        }
        .required {
            color: #dc3545;
        }
        .form-control {
            width: 100%;
            padding: 0.75rem;
            border: 1px solid #ddd;
            border-radius: 4px;
            font-size: 1rem;
        }
        .form-control:focus {
            outline: none;
            border-color: #59ab6e;
            box-shadow: 0 0 0 0.2rem rgba(89, 171, 110, 0.25);
        }
        .gender-options {
            display: flex;
            gap: 2rem;
        }
        .gender-options label {
            display: flex;
            align-items: center;
            cursor: pointer;
        }
        .gender-options input[type="radio"] {
            margin-right: 0.5rem;
        }
        .password-toggle {
            position: relative;
        }
        .toggle-password {
            position: absolute;
            right: 10px;
            top: 50%;
            transform: translateY(-50%);
            background: none;
            border: none;
            cursor: pointer;
            color: #666;
        }
        .privacy-text {
            background: #f8f9fa;
            padding: 1rem;
            border-radius: 4px;
            font-size: 0.9rem;
            color: #666;
            margin-bottom: 1rem;
        }
        .checkbox-container {
            display: flex;
            align-items: flex-start;
            margin-bottom: 1rem;
        }
        .checkbox-container input[type="checkbox"] {
            margin-right: 0.5rem;
            margin-top: 0.25rem;
            flex-shrink: 0;
        }
        .register-btn {
            width: 100%;
            padding: 0.75rem;
            background: #59ab6e;
            color: white;
            border: none;
            border-radius: 4px;
            font-size: 1rem;
            font-weight: 500;
            cursor: pointer;
            transition: background 0.3s;
        }
        .register-btn:hover {
            background: #4a9a5e;
        }
        .login-link {
            text-align: center;
            margin-top: 1rem;
        }
        .login-link a {
            color: #59ab6e;
            text-decoration: none;
        }
        .login-link a:hover {
            text-decoration: underline;
        }
        .alert {
            padding: 1rem;
            border-radius: 4px;
            margin-bottom: 1rem;
        }
        .alert-success {
            background: #d4edda;
            border: 1px solid #c3e6cb;
            color: #155724;
        }
        .alert-danger {
            background: #f8d7da;
            border: 1px solid #f5c6cb;
            color: #721c24;
        }
        .affiliate-banner {
            background: linear-gradient(135deg, #59ab6e 0%, #4a9a5e 100%);
            color: white;
            padding: 1rem;
            border-radius: 8px;
            margin-bottom: 1.5rem;
            text-align: center;
        }
        .affiliate-banner strong {
            font-size: 1.1rem;
        }
        .reward-badge {
            display: inline-block;
            background: rgba(255, 255, 255, 0.2);
            padding: 0.5rem 1rem;
            border-radius: 20px;
            margin-top: 0.5rem;
        }
    </style>
</head>

<body>
    <!-- Start Top Nav -->
    <nav class="navbar navbar-expand-lg bg-dark navbar-light d-none d-lg-block" id="templatemo_nav_top">
        <div class="container text-light">
            <div class="w-100 d-flex justify-content-between">
                <div>
                    <i class="fa fa-envelope mx-2"></i>
                    <a class="navbar-sm-brand text-light text-decoration-none" href="mailto:support@relevantreflex.com">support@relevantreflex.com</a>
                    <i class="fa fa-phone mx-2"></i>
                    <span class="navbar-sm-brand text-light">A Trusted Survey Platform in India</span>
                </div>
                <div>
                    <a class="text-light" href="login.php"><u>Already have an account? Log In</u></a>
                </div>
            </div>
        </div>
    </nav>
    <!-- Close Top Nav -->

    <!-- Header -->
    <nav class="navbar navbar-expand-lg navbar-light shadow">
        <div class="container d-flex justify-content-between align-items-center">
            <a class="navbar-brand text-success logo h1 align-self-center" href="index.php">
                Relevant Reflex
            </a>

            <button class="navbar-toggler border-0" type="button" data-bs-toggle="collapse" data-bs-target="#templatemo_main_nav" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
                <span class="navbar-toggler-icon"></span>
            </button>

            <div class="align-self-center collapse navbar-collapse flex-fill d-lg-flex justify-content-lg-between" id="templatemo_main_nav">
                <div class="flex-fill">
                    <ul class="nav navbar-nav d-flex justify-content-between mx-lg-auto">
                        <li class="nav-item">
                            <a class="nav-link" href="index.php">Home</a>
                        </li>
                        <li class="nav-item">
                            <a class="nav-link" href="about.php">About</a>
                        </li>
                        <li class="nav-item">
                            <a class="nav-link" href="doubts.php">How It Works</a>
                        </li>
                        <li class="nav-item">
                            <a class="nav-link" href="articles.php">Articles</a>
                        </li>
                        <li class="nav-item">
                            <a class="nav-link" href="contact.php">Contact</a>
                        </li>
                    </ul>
                </div>
                <div class="navbar align-self-center d-flex">
                    <a class="btn btn-outline-success me-2" href="login.php">
                        <i class="fa fa-sign-in-alt"></i> Login
                    </a>
                    <a class="btn btn-success" href="signup.php">
                        <i class="fa fa-user-plus"></i> Sign Up
                    </a>
                </div>
            </div>
        </div>
    </nav>
    <!-- Close Header -->

    <!-- Start Section -->
    <section class="container py-5">
        <div class="row text-center pt-3 pb-3">
            <div class="col-lg-6 m-auto">
                <h1 class="h1">Register as a Survey Taker for FREE!</h1>
                <p>Furnish some of your basic information below and start participating in paid surveys to earn rewards.</p>
                
                <?php if ($affiliate): ?>
                <div class="affiliate-banner">
                    <div><strong>🎉 Partner Signup</strong></div>
                    <div>Referred by: <?php echo htmlspecialchars($affiliate['company_name']); ?></div>
                    <?php if ($affiliate['signup_reward'] > 0): ?>
                    <div class="reward-badge">
                        🎁 Earn ₹<?php echo number_format($affiliate['signup_reward'], 2); ?> bonus on email & Mobile phone verification!
                    </div>
                    <?php endif; ?>
                </div>
                <?php endif; ?>
            </div>
        </div>
        
        <div class="row justify-content-center">
            <div class="col-lg-6">
                <div class="registration-form">
                    <!-- Tab Navigation -->
                    <ul class="nav nav-tabs form-tabs" id="registrationTabs">
                        <li class="nav-item">
                            <a class="nav-link" href="login.php">Log in</a>
                        </li>
                        <li class="nav-item">
                            <a class="nav-link active" href="#signup">Sign up</a>
                        </li>
                    </ul>

                    <!-- Success/Error Messages -->
                    <?php if (!empty($success_message)): ?>
                        <div class="alert alert-success">
                            <i class="fa fa-check-circle"></i> <?php echo htmlspecialchars($success_message); ?>
                        </div>
                    <?php endif; ?>

                    <?php if (!empty($errors)): ?>
                        <div class="alert alert-danger">
                            <i class="fa fa-exclamation-triangle"></i>
                            <?php foreach ($errors as $error): ?>
                                <div><?php echo htmlspecialchars($error); ?></div>
                            <?php endforeach; ?>
                        </div>
                    <?php endif; ?>

                    <!-- Registration Form -->
                    <?php if (empty($success_message)): ?>
                    <form method="POST" action="signup.php<?php
    $qs = [];
    if (!empty($affiliate_code)) $qs[] = 'ref=' . htmlspecialchars($affiliate_code);
    if (!empty($mref_code)) $qs[] = 'mref=' . htmlspecialchars($mref_code);
    echo $qs ? '?' . implode('&', $qs) : '';
?>" id="signupForm">
                        <!-- CSRF Token -->
                        <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($_SESSION['csrf_token']); ?>">
                        
                        <!-- FIX #1c: Honeypot field — completely hidden, no visible label -->
                        <div style="position:absolute;left:-9999px;top:-9999px;opacity:0;height:0;width:0;overflow:hidden;" aria-hidden="true" tabindex="-1">
                            <input type="text" name="website_url" id="rr_hp_field" tabindex="-1" autocomplete="off" value="" aria-hidden="true">
                        </div>

                        <!-- Gender -->
                        <div class="form-group">
                            <label class="form-label">Gender<span class="required">*</span></label>
                            <div class="gender-options">
                                <label>
                                    <input type="radio" name="gender" value="Male" <?php echo (isset($form_data['gender']) && $form_data['gender'] === 'Male') ? 'checked' : ''; ?> required>
                                    Male
                                </label>
                                <label>
                                    <input type="radio" name="gender" value="Female" <?php echo (isset($form_data['gender']) && $form_data['gender'] === 'Female') ? 'checked' : ''; ?> required>
                                    Female
                                </label>
                            </div>
                        </div>

                        <!-- Email -->
                        <div class="form-group">
                            <label class="form-label" for="email">Email<span class="required">*</span></label>
                            <input type="email" 
                                   class="form-control" 
                                   id="email" 
                                   name="email" 
                                   value="<?php echo isset($form_data['email']) ? htmlspecialchars($form_data['email']) : ''; ?>"
                                   required>
                        </div>

                        <!-- Confirm Email -->
                        <div class="form-group">
                            <label class="form-label" for="email_confirm">Confirm Email<span class="required">*</span></label>
                            <input type="email" 
                                   class="form-control" 
                                   id="email_confirm" 
                                   name="email_confirm"
                                   autocomplete="off"
                                   onpaste="return false;"
                                   placeholder="Re-enter your email address"
                                   required>
                            <small class="text-muted">Type your email again — no copy/paste</small>
                        </div>

                        <!-- Password -->
                        <div class="form-group">
                            <label class="form-label" for="password">Password<span class="required">*</span></label>
                            <div class="password-toggle">
                                <input type="password" class="form-control" id="password" name="password" required minlength="8">
                                <button type="button" class="toggle-password" onclick="togglePassword('password')" aria-label="Toggle password visibility">
                                    <i class="fa fa-eye" id="password-eye"></i>
                                </button>
                            </div>
                            <small class="text-muted">Minimum 8 characters</small>
                        </div>

                        <!-- Date of Birth -->
                        <div class="form-group">
                            <label class="form-label" for="dob">Date of birth<span class="required">*</span></label>
                            <input type="date" 
                                   class="form-control" 
                                   id="dob" 
                                   name="date_of_birth" 
                                   value="<?php echo isset($form_data['date_of_birth']) ? htmlspecialchars($form_data['date_of_birth']) : ''; ?>"
                                   required 
                                   max="<?php echo date('Y-m-d', strtotime('-18 years')); ?>">
                        </div>

                        <!-- Postcode -->
                        <div class="form-group">
                            <label class="form-label" for="postcode">Postcode<span class="required">*</span></label>
                            <input type="text" 
                                   class="form-control" 
                                   id="postcode" 
                                   name="postcode" 
                                   value="<?php echo isset($form_data['postcode']) ? htmlspecialchars($form_data['postcode']) : ''; ?>"
                                   required 
                                   pattern="[0-9]{6}" 
                                   maxlength="6" 
                                   title="Please enter a valid 6-digit postal code">
                        </div>

                        <!-- Mobile / WhatsApp Number -->
                        <div class="form-group">
                            <label class="form-label" for="whatsapp_number">Mobile / WhatsApp Number<span class="required">*</span></label>
                            <div style="position:relative;">
                                <span style="position:absolute;left:12px;top:50%;transform:translateY(-50%);color:#374151;font-weight:600;font-size:14px;pointer-events:none;">+91</span>
                                <input type="tel"
                                       class="form-control"
                                       id="whatsapp_number"
                                       name="whatsapp_number"
                                       style="padding-left:48px;"
                                       maxlength="10"
                                       pattern="[6-9][0-9]{9}"
                                       placeholder="10-digit mobile number"
                                       value="<?php echo isset($form_data['whatsapp_number']) ? htmlspecialchars($form_data['whatsapp_number']) : ''; ?>"
                                       required>
                            </div>
                        </div>

                        <!-- Confirm Mobile Number -->
                        <div class="form-group">
                            <label class="form-label" for="whatsapp_number_confirm">Confirm Mobile Number<span class="required">*</span></label>
                            <div style="position:relative;">
                                <span style="position:absolute;left:12px;top:50%;transform:translateY(-50%);color:#374151;font-weight:600;font-size:14px;pointer-events:none;">+91</span>
                                <input type="tel"
                                       class="form-control"
                                       id="whatsapp_number_confirm"
                                       name="whatsapp_number_confirm"
                                       style="padding-left:48px;"
                                       maxlength="10"
                                       pattern="[6-9][0-9]{9}"
                                       placeholder="Re-enter mobile number"
                                       onpaste="return false;"
                                       required>
                            </div>
                            <small class="text-muted">Type again — no copy/paste</small>
                        </div>

                        <!-- WhatsApp checkbox -->
                        <div class="checkbox-container" style="background:#f0fdf4;border:1px solid #bbf7d0;border-radius:4px;padding:0.75rem 1rem;margin-bottom:1rem;">
                            <input type="checkbox" id="is_whatsapp" name="is_whatsapp" checked>
                            <label for="is_whatsapp" style="margin-left:0.5rem;font-size:13px;color:#166534;">
                                <strong>This number is on WhatsApp</strong> — We'll send your verification link and survey notifications via WhatsApp for guaranteed delivery
                            </label>
                        </div>

                        <!-- FIX #4: Age Confirmation Checkbox -->
                        <div class="checkbox-container" style="background:#fff8e1;border:1px solid #ffe082;border-radius:4px;padding:0.75rem 1rem;margin-bottom:1rem;">
                            <input type="checkbox" id="age_confirm" name="age_confirm" required>
                            <label for="age_confirm" style="margin-left:0.5rem;">
                                I confirm that I am <strong>18 years of age or older</strong>. I understand this platform is for adults only.
                            </label>
                        </div>

                        <!-- Privacy Notice -->
                        <div class="privacy-text">
                            We care about your privacy. By sharing your personal data you will be able to get research opportunities targeted to your interests, help to improve products and services and earn rewards for participation
                        </div>

                        <!-- FIX #1a: Privacy Policy Checkbox with correct .php links -->
                        <div class="checkbox-container">
                            <input type="checkbox" id="privacy" name="privacy_policy" required>
                            <label for="privacy">
                                I agree to the <a href="privacy.php" target="_blank">Privacy Notice</a> and <a href="terms.php" target="_blank">Terms and Conditions</a>
                            </label>
                        </div>

                        <!-- reCAPTCHA v3 hidden token -->
                        <?php if (!empty($recaptcha_site_key)): ?>
                        <input type="hidden" name="g-recaptcha-response" id="recaptchaResponse">
                        <?php endif; ?>

                        <!-- Submit Button -->
                        <button type="submit" class="register-btn" id="submitBtn">
                            <i class="fa fa-user-plus"></i> Register
                        </button>

                        <!-- Login Link -->
                        <div class="login-link">
                            <p>Already have an account? <a href="login.php">Log in here</a></p>
                        </div>
                    </form>
                    <?php else: ?>
                        <?php if ($fire_conversion): ?>
                        <!-- ===== GOOGLE ADS CONVERSION TAG - DO NOT REMOVE ===== -->
                        <script>
                            gtag('event', 'conversion', {
                                'send_to': 'AW-18046472960/ocHbCMT_qpUcEICmnZ1D'
                            });
                        </script>
                        <!-- ===== END GOOGLE ADS CONVERSION TAG ===== -->
                        <?php endif; ?>
                        <!-- Show success actions -->
<div class="text-center">
    <div style="background:#f0fdf4;border:2px solid #22c55e;border-radius:12px;padding:24px;margin-bottom:20px;">
        <div style="font-size:3rem;margin-bottom:12px;">📧</div>
        <h4 style="color:#15803d;margin-bottom:8px;">One Step Left!</h4>
        <p style="color:#166534;font-size:15px;margin-bottom:4px;">
            We've sent a verification link to:
        </p>
        <p style="color:#15803d;font-weight:700;font-size:16px;margin-bottom:16px;">
            <?php echo htmlspecialchars($email ?? ''); ?>
        </p>
        <p style="color:#374151;font-size:14px;margin-bottom:20px;">
            Click the link in the email to activate your account and start earning.
        </p>

        <!-- Email provider buttons -->
        <p style="font-size:13px;color:#6b7280;margin-bottom:10px;font-weight:600;">OPEN YOUR EMAIL NOW:</p>
        <div style="display:flex;flex-wrap:wrap;gap:8px;justify-content:center;margin-bottom:20px;">
            <a href="https://mail.google.com" target="_blank" 
               style="display:inline-flex;align-items:center;gap:6px;background:#fff;border:1px solid #e5e7eb;border-radius:8px;padding:10px 16px;text-decoration:none;color:#374151;font-size:13px;font-weight:600;box-shadow:0 1px 3px rgba(0,0,0,0.08);">
                <img src="https://www.google.com/favicon.ico" width="16" height="16" alt="Gmail">
                Open Gmail
            </a>
            <a href="https://outlook.live.com" target="_blank"
               style="display:inline-flex;align-items:center;gap:6px;background:#fff;border:1px solid #e5e7eb;border-radius:8px;padding:10px 16px;text-decoration:none;color:#374151;font-size:13px;font-weight:600;box-shadow:0 1px 3px rgba(0,0,0,0.08);">
                <img src="https://outlook.live.com/favicon.ico" width="16" height="16" alt="Outlook">
                Open Outlook
            </a>
            <a href="https://mail.yahoo.com" target="_blank"
               style="display:inline-flex;align-items:center;gap:6px;background:#fff;border:1px solid #e5e7eb;border-radius:8px;padding:10px 16px;text-decoration:none;color:#374151;font-size:13px;font-weight:600;box-shadow:0 1px 3px rgba(0,0,0,0.08);">
                <img src="https://www.yahoo.com/favicon.ico" width="16" height="16" alt="Yahoo">
                Open Yahoo
            </a>
        </div>

        <!-- Spam reminder -->
        <div style="background:#fefce8;border:1px solid #fde047;border-radius:8px;padding:12px;margin-bottom:20px;text-align:left;">
            <p style="font-size:13px;color:#854d0e;margin:0;">
                <i class="fa fa-exclamation-triangle" style="color:#ca8a04;"></i>
                <strong>Can't find it?</strong> Check your <strong>Spam</strong> or <strong>Junk</strong> folder. 
                The email is from <strong>registration@relevantreflex.com</strong>
            </p>
        </div>

        <!-- Resend form -->
        <form method="POST" action="login.php" id="resendForm">
            <input type="hidden" name="action" value="resend_verification">
            <input type="hidden" name="email" value="<?php echo htmlspecialchars($email ?? ''); ?>">
            <button type="submit" style="background:#fff;color:#059669;border:2px solid #059669;padding:10px 18px;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer;font-family:inherit;width:100%;">
                <i class="fa fa-paper-plane"></i> Resend Verification Email
            </button>
        </form>
    </div>

    <a href="login.php" class="btn btn-success" style="width:100%;">
        <i class="fa fa-sign-in-alt"></i> Already verified? Go to Login
    </a>
</div>
                    <?php endif; ?>
                </div>
            </div>
        </div>
    </section>
    <!-- End Section -->

    <!-- Start Footer -->
    <footer class="bg-dark" id="tempaltemo_footer">
        <div class="container">
            <div class="row">
                <div class="col-md-4 pt-5">
                    <h2 class="h2 text-success border-bottom pb-3 border-light logo">Relevant Reflex</h2>
                    <ul class="list-unstyled text-light footer-link-list">
                        <li>
                            <i class="fas fa-map-marker-alt fa-fw"></i>
                            Ethirmedu, NH 544, Tamilnadu - 638183, India
                        </li>
                        <li>
                            <i class="fa fa-envelope fa-fw"></i>
                            <a class="text-decoration-none" href="mailto:support@relevantreflex.com">support@relevantreflex.com</a>
                        </li>
                    </ul>
                </div>

                <div class="col-md-4 pt-5">
                    <h2 class="h2 text-light border-bottom pb-3 border-light">Quick Links</h2>
                    <ul class="list-unstyled text-light footer-link-list">
                        <li><a class="text-decoration-none" href="index.php">Home</a></li>
                        <li><a class="text-decoration-none" href="signup.php">Sign Up</a></li>
                        <li><a class="text-decoration-none" href="login.php">Log In</a></li>
                        <li><a class="text-decoration-none" href="doubts.php">How It Works</a></li>
                        <li><a class="text-decoration-none" href="contact.php">Contact</a></li>
                    </ul>
                </div>

                <div class="col-md-4 pt-5">
                    <h2 class="h2 text-light border-bottom pb-3 border-light">Further Info</h2>
                    <ul class="list-unstyled text-light footer-link-list">
                        <li><a class="text-decoration-none" href="about.php">About</a></li>
                        <!-- FIX #1a/1b: Corrected .php links -->
                        <li><a class="text-decoration-none" href="privacy.php">Privacy Policy</a></li>
                        <li><a class="text-decoration-none" href="terms.php">Terms</a></li>
                        <!-- FIX #24: Earnings Disclaimer link -->
                        <li><a class="text-decoration-none" href="disclaimer.php">Earnings Disclaimer</a></li>
                        <li><a class="text-decoration-none" href="articles.php">Articles</a></li>
                        <li><a class="text-decoration-none" href="contact.php">Support</a></li>
                    </ul>
                </div>
            </div>
        </div>

        <div class="w-100 bg-black py-3">
            <div class="container">
                <div class="row pt-2">
                    <div class="col-12">
                        <p class="text-center text-light">
                            Copyright &copy; <?php echo date('Y'); ?> Relevant Reflex | All Rights Reserved
                        </p>
                    </div>
                </div>
            </div>
        </div>
    </footer>
    <!-- End Footer -->

    <!-- Start Script -->
    <!-- Fix: Added defer to all scripts to prevent render blocking (saves ~1530ms) -->
    <script src="assets/js/jquery-1.11.0.min.js" defer></script>
    <script src="assets/js/jquery-migrate-1.2.1.min.js" defer></script>
    <script src="assets/js/bootstrap.bundle.min.js" defer></script>
    <script src="assets/js/templatemo.js" defer></script>
    <script src="assets/js/custom.js" defer></script>
    
    <script>
        function togglePassword(inputId) {
            const passwordInput = document.getElementById(inputId);
            const eyeIcon = document.getElementById(inputId + '-eye');
            
            if (passwordInput.type === 'password') {
                passwordInput.type = 'text';
                eyeIcon.classList.remove('fa-eye');
                eyeIcon.classList.add('fa-eye-slash');
            } else {
                passwordInput.type = 'password';
                eyeIcon.classList.remove('fa-eye-slash');
                eyeIcon.classList.add('fa-eye');
            }
        }
    </script>

    <?php if (!empty($recaptcha_site_key)): ?>
    <!-- reCAPTCHA v3 -->
    <script src="https://www.google.com/recaptcha/api.js?render=<?php echo htmlspecialchars($recaptcha_site_key); ?>"></script>
    <script>
        document.getElementById('signupForm')?.addEventListener('submit', function(e) {
            e.preventDefault();
            var form = this;
            var btn = document.getElementById('submitBtn');
            btn.disabled = true;
            btn.innerHTML = '<i class="fa fa-spinner fa-spin"></i> Verifying...';
            grecaptcha.ready(function() {
                grecaptcha.execute('<?php echo htmlspecialchars($recaptcha_site_key); ?>', {action: 'signup'}).then(function(token) {
                    document.getElementById('recaptchaResponse').value = token;
                    form.submit();
                }).catch(function() {
                    btn.disabled = false;
                    btn.innerHTML = '<i class="fa fa-user-plus"></i> Register';
                    form.submit();
                });
            });
        });
    </script>
    <?php endif; ?>
    <!-- End Script -->

    <!-- FIX #19: Cookie Consent Banner -->
    <div id="cookieConsent" style="display:none;position:fixed;bottom:0;left:0;right:0;background:#1a1a1a;color:#fff;padding:1rem 1.5rem;z-index:9999;box-shadow:0 -2px 10px rgba(0,0,0,0.3);">
        <div class="container">
            <div class="row align-items-center">
                <div class="col-md-8 col-12 mb-2 mb-md-0">
                    <p class="mb-0" style="font-size:0.9rem;">
                        <i class="fa fa-shield-alt text-success me-2"></i>
                        We use cookies to improve your experience and for advertising purposes (including Google Ads). By clicking "Accept All", you consent to our use of cookies as described in our <a href="privacy.php" style="color:#28a745;">Privacy Policy</a>. You may decline non-essential cookies.
                    </p>
                </div>
                <div class="col-md-4 col-12 text-md-end text-center">
                    <button onclick="rrAcceptCookies()" class="btn btn-success btn-sm me-2">Accept All</button>
                    <button onclick="rrDeclineCookies()" class="btn btn-outline-light btn-sm">Decline Non-Essential</button>
                </div>
            </div>
        </div>
    </div>
    <script>
    (function(){
        function getCookie(n){return document.cookie.split(';').some(function(c){return c.trim().startsWith(n+'=');})}
        if(!getCookie('rr_cookie_consent')){document.getElementById('cookieConsent').style.display='block';}
    })();
    function rrAcceptCookies(){
        document.cookie='rr_cookie_consent=accepted;max-age=31536000;path=/;SameSite=Lax';
        document.getElementById('cookieConsent').style.display='none';
    }
    function rrDeclineCookies(){
        document.cookie='rr_cookie_consent=declined;max-age=31536000;path=/;SameSite=Lax';
        document.getElementById('cookieConsent').style.display='none';
    }
    </script>
    <!-- End Cookie Consent Banner -->
</body>
</html>