<?php
require_once 'config.php';
requireLogin();
date_default_timezone_set('Asia/Kolkata');
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");

$page_title = 'Referral Audit';

$searchEmail   = trim($_GET['email'] ?? '');
$searchError   = '';
$user          = null;
$report        = null;

// ─── Look up the member by email ───
if ($searchEmail !== '') {
    try {
        $panelPdo = getPanelDBConnection();
        $stmt = $panelPdo->prepare("
            SELECT id, email, first_name, last_name, gender, date_of_birth, postcode,
                   status, created_at, email_verified, onboarding_completed
            FROM users WHERE email = ? LIMIT 1
        ");
        $stmt->execute([$searchEmail]);
        $user = $stmt->fetch(PDO::FETCH_ASSOC);
        if (!$user) $searchError = 'No member found with that email.';
    } catch (Exception $e) { $searchError = 'Database error: ' . $e->getMessage(); }
}

// ─── If member found, run the full audit ───
if ($user) {
    $userId  = (int)$user['id'];
    $report  = [];

    try {
        $panelPdo = getPanelDBConnection();

        // Tier configuration
        $report['tier_cfg'] = null;
        try {
            $st = $panelPdo->prepare("SELECT * FROM member_referral_tiers WHERE user_id = ?");
            $st->execute([$userId]);
            $report['tier_cfg'] = $st->fetch(PDO::FETCH_ASSOC) ?: null;
        } catch (Exception $e) { /* table may not exist */ }

        // Aggregate referral stats
        $st = $panelPdo->prepare("
            SELECT
                COUNT(*)                             AS total_clicks,
                COALESCE(SUM(signup_completed), 0)   AS signups,
                COALESCE(SUM(email_verified), 0)     AS verified,
                COUNT(DISTINCT ip_address)           AS unique_ips,
                COUNT(DISTINCT referee_user_id)      AS unique_referees,
                COUNT(DISTINCT user_agent)           AS unique_uas,
                MIN(clicked_at)                      AS first_click,
                MAX(clicked_at)                      AS last_click
            FROM member_referral_clicks WHERE referrer_user_id = ?
        ");
        $st->execute([$userId]);
        $report['aggregate'] = $st->fetch(PDO::FETCH_ASSOC) ?: [];

        // Engagement (mobile + profilers)
        $st = $panelPdo->prepare("
            SELECT
                COUNT(*) AS verified_referees,
                SUM(CASE WHEN EXISTS(SELECT 1 FROM mobile_verifications mv
                                     WHERE mv.user_id = u.id AND mv.is_verified = 1)
                         THEN 1 ELSE 0 END) AS mobile_verified,
                SUM(CASE WHEN (SELECT COUNT(*) FROM profiler_completion
                               WHERE user_id = u.id AND is_completed = 1) > 0
                         THEN 1 ELSE 0 END) AS profilers_started
            FROM users u
            JOIN member_referral_clicks mrc ON mrc.referee_user_id = u.id
            WHERE mrc.referrer_user_id = ? AND mrc.email_verified = 1
        ");
        $st->execute([$userId]);
        $report['engagement'] = $st->fetch(PDO::FETCH_ASSOC) ?: [];

        // Timing analysis
        $st = $panelPdo->prepare("
            SELECT
                COUNT(*) AS verified_count,
                MIN(TIMESTAMPDIFF(SECOND, clicked_at,  signed_up_at)) AS click_to_signup_min_s,
                ROUND(AVG(TIMESTAMPDIFF(SECOND, clicked_at, signed_up_at))) AS click_to_signup_avg_s,
                MAX(TIMESTAMPDIFF(SECOND, clicked_at,  signed_up_at)) AS click_to_signup_max_s,
                MIN(TIMESTAMPDIFF(SECOND, signed_up_at, verified_at))  AS signup_to_verify_min_s,
                ROUND(AVG(TIMESTAMPDIFF(SECOND, signed_up_at, verified_at))) AS signup_to_verify_avg_s,
                MAX(TIMESTAMPDIFF(SECOND, signed_up_at, verified_at))  AS signup_to_verify_max_s,
                SUM(CASE WHEN TIMESTAMPDIFF(SECOND, clicked_at,  signed_up_at) < 15 THEN 1 ELSE 0 END) AS fast_signups_under_15s,
                SUM(CASE WHEN TIMESTAMPDIFF(SECOND, signed_up_at, verified_at) < 30 THEN 1 ELSE 0 END) AS fast_verifies_under_30s
            FROM member_referral_clicks
            WHERE referrer_user_id = ? AND email_verified = 1
              AND clicked_at IS NOT NULL AND signed_up_at IS NOT NULL AND verified_at IS NOT NULL
        ");
        $st->execute([$userId]);
        $report['timing'] = $st->fetch(PDO::FETCH_ASSOC) ?: [];

        // Hour-of-day distribution (IST)
        $st = $panelPdo->prepare("
            SELECT
                HOUR(CONVERT_TZ(signed_up_at, '+00:00', '+05:30')) AS ist_hour,
                COUNT(*) AS signups
            FROM member_referral_clicks
            WHERE referrer_user_id = ? AND email_verified = 1
            GROUP BY ist_hour ORDER BY ist_hour
        ");
        $st->execute([$userId]);
        $report['hours'] = $st->fetchAll(PDO::FETCH_ASSOC) ?: [];

        // Burst detection (with IP diversity)
        $st = $panelPdo->prepare("
            SELECT
                DATE_FORMAT(CONVERT_TZ(signed_up_at, '+00:00', '+05:30'), '%Y-%m-%d %H:00') AS hour_window_ist,
                COUNT(*) AS signups,
                COUNT(DISTINCT ip_address) AS unique_ips,
                ROUND(COUNT(DISTINCT ip_address) / COUNT(*), 2) AS ip_diversity
            FROM member_referral_clicks
            WHERE referrer_user_id = ? AND email_verified = 1 AND signed_up_at IS NOT NULL
            GROUP BY hour_window_ist HAVING signups >= 3
            ORDER BY signups DESC LIMIT 20
        ");
        $st->execute([$userId]);
        $report['bursts'] = $st->fetchAll(PDO::FETCH_ASSOC) ?: [];

        // Top IPs (any IP feeding multiple signups)
        $st = $panelPdo->prepare("
            SELECT
                ip_address,
                COUNT(*) AS hits,
                SUM(signup_completed) AS signups,
                SUM(email_verified) AS verified
            FROM member_referral_clicks
            WHERE referrer_user_id = ?
            GROUP BY ip_address
            HAVING hits > 1
            ORDER BY hits DESC LIMIT 15
        ");
        $st->execute([$userId]);
        $report['top_ips'] = $st->fetchAll(PDO::FETCH_ASSOC) ?: [];

        // Email pattern duplicates (Gmail dot/plus tricks)
        $st = $panelPdo->prepare("
            SELECT
                REPLACE(SUBSTRING_INDEX(SUBSTRING_INDEX(u.email, '@', 1), '+', 1), '.', '') AS norm_local,
                SUBSTRING_INDEX(u.email, '@', -1) AS domain,
                COUNT(*) AS dupes,
                GROUP_CONCAT(u.email ORDER BY u.email SEPARATOR ' | ') AS emails
            FROM member_referral_clicks mrc
            JOIN users u ON u.id = mrc.referee_user_id
            WHERE mrc.referrer_user_id = ?
            GROUP BY norm_local, domain HAVING dupes > 1
            ORDER BY dupes DESC LIMIT 10
        ");
        $st->execute([$userId]);
        $report['email_dupes'] = $st->fetchAll(PDO::FETCH_ASSOC) ?: [];

        // Geographic — region (first digit)
        $st = $panelPdo->prepare("
            SELECT
                LEFT(u.postcode, 1) AS region_code,
                CASE LEFT(u.postcode, 1)
                    WHEN '1' THEN 'Delhi / Haryana / Punjab / HP / J&K'
                    WHEN '2' THEN 'UP / Uttarakhand'
                    WHEN '3' THEN 'Rajasthan / Gujarat'
                    WHEN '4' THEN 'Maharashtra / MP / Goa / Chhattisgarh'
                    WHEN '5' THEN 'Telangana / AP / Karnataka'
                    WHEN '6' THEN 'Tamil Nadu / Kerala / Puducherry'
                    WHEN '7' THEN 'West Bengal / Odisha / NE States'
                    WHEN '8' THEN 'Bihar / Jharkhand'
                    ELSE 'Other / Unknown'
                END AS region,
                COUNT(*) AS members
            FROM users u
            JOIN member_referral_clicks mrc ON mrc.referee_user_id = u.id
            WHERE mrc.referrer_user_id = ? AND mrc.email_verified = 1
              AND u.postcode IS NOT NULL AND u.postcode != ''
            GROUP BY region_code, region ORDER BY members DESC
        ");
        $st->execute([$userId]);
        $report['regions'] = $st->fetchAll(PDO::FETCH_ASSOC) ?: [];

        // Geographic — district (first 3 digits)
        $st = $panelPdo->prepare("
            SELECT
                LEFT(u.postcode, 3) AS prefix,
                COUNT(*) AS members,
                GROUP_CONCAT(DISTINCT LEFT(u.postcode, 6) ORDER BY u.postcode SEPARATOR ', ') AS sample_pins
            FROM users u
            JOIN member_referral_clicks mrc ON mrc.referee_user_id = u.id
            WHERE mrc.referrer_user_id = ? AND mrc.email_verified = 1
              AND u.postcode IS NOT NULL AND u.postcode != ''
            GROUP BY prefix ORDER BY members DESC LIMIT 25
        ");
        $st->execute([$userId]);
        $report['districts'] = $st->fetchAll(PDO::FETCH_ASSOC) ?: [];

        // Get referee user IDs for cross-DB survey lookup
        $st = $panelPdo->prepare("
            SELECT referee_user_id FROM member_referral_clicks
            WHERE referrer_user_id = ? AND referee_user_id IS NOT NULL AND email_verified = 1
        ");
        $st->execute([$userId]);
        $refIds = array_map('intval', array_column($st->fetchAll(PDO::FETCH_ASSOC), 'referee_user_id'));

        // Survey activity (cross-DB → rrshop)
        $report['surveys'] = ['referees_with_invites' => 0, 'total_invites' => 0,
                              'total_completes' => 0, 'unique_with_completes' => 0,
                              'bad_quality' => 0];
        if (!empty($refIds)) {
            try {
                $shopPdo = getDBConnection();
                $placeholders = implode(',', array_fill(0, count($refIds), '?'));
                $st = $shopPdo->prepare("
                    SELECT
                        COUNT(DISTINCT sent_to_user_id) AS referees_with_invites,
                        COUNT(*) AS total_invites,
                        SUM(CASE WHEN status = 'complete' THEN 1 ELSE 0 END) AS total_completes,
                        COUNT(DISTINCT CASE WHEN status = 'complete' THEN sent_to_user_id END) AS unique_with_completes,
                        SUM(CASE WHEN quality_flag IN ('speedster','ip_duplicate','client_flagged') THEN 1 ELSE 0 END) AS bad_quality
                    FROM survey_urls
                    WHERE sent_to_user_id IN ($placeholders)
                ");
                $st->execute($refIds);
                $report['surveys'] = $st->fetch(PDO::FETCH_ASSOC) ?: $report['surveys'];
            } catch (Exception $e) { error_log("Audit survey lookup error: " . $e->getMessage()); }
        }

        // Recent referees detail (top 30)
        $st = $panelPdo->prepare("
            SELECT
                mrc.id, mrc.ip_address, mrc.email AS masked_email, mrc.signup_completed, mrc.email_verified,
                mrc.signup_reward_paid, mrc.clicked_at, mrc.signed_up_at, mrc.verified_at,
                u.email AS full_email, u.gender, u.postcode, u.status,
                EXISTS(SELECT 1 FROM mobile_verifications mv WHERE mv.user_id = u.id AND mv.is_verified = 1) AS mob_v,
                (SELECT COUNT(*) FROM profiler_completion WHERE user_id = u.id AND is_completed = 1) AS prof_c
            FROM member_referral_clicks mrc
            LEFT JOIN users u ON u.id = mrc.referee_user_id
            WHERE mrc.referrer_user_id = ?
            ORDER BY mrc.clicked_at DESC LIMIT 30
        ");
        $st->execute([$userId]);
        $report['recent'] = $st->fetchAll(PDO::FETCH_ASSOC) ?: [];

    } catch (Exception $e) { error_log("Referral audit error: " . $e->getMessage()); }

    // ─── Compute fraud verdict score (0=clean, higher=worse) ───
    $score    = 0;
    $signals  = [];
    $agg      = $report['aggregate'] ?? [];
    $eng      = $report['engagement'] ?? [];
    $tim      = $report['timing'] ?? [];
    $bursts   = $report['bursts'] ?? [];
    $verifiedN = max((int)($agg['verified'] ?? 0), 1);

    // 1) Aggregate IP diversity
    $aggIpRatio = (int)($agg['total_clicks'] ?? 0) > 0
        ? (int)($agg['unique_ips'] ?? 0) / (int)$agg['total_clicks']
        : 0;
    if ($aggIpRatio >= 0.5)        { $signals[] = ['ok',   'IP diversity (overall): ' . round($aggIpRatio*100) . '% — healthy']; }
    elseif ($aggIpRatio >= 0.3)    { $score += 1; $signals[] = ['warn', 'IP diversity (overall): ' . round($aggIpRatio*100) . '% — borderline']; }
    else                            { $score += 2; $signals[] = ['bad',  'IP diversity (overall): ' . round($aggIpRatio*100) . '% — too low']; }

    // 2) Worst-burst IP diversity
    $worstBurst = 1.0;
    foreach ($bursts as $b) { if ((float)$b['ip_diversity'] < $worstBurst) $worstBurst = (float)$b['ip_diversity']; }
    if (!empty($bursts)) {
        if ($worstBurst >= 0.7)    { $signals[] = ['ok',   'Worst-burst IP diversity: ' . round($worstBurst*100) . '% — healthy']; }
        elseif ($worstBurst >= 0.3){ $score += 1; $signals[] = ['warn', 'Worst-burst IP diversity: ' . round($worstBurst*100) . '%']; }
        else                        { $score += 3; $signals[] = ['bad',  'Worst-burst IP diversity: ' . round($worstBurst*100) . '% — concentrated']; }
    }

    // 3) Mobile verified rate
    $mobRate = $verifiedN > 0 ? (int)($eng['mobile_verified'] ?? 0) / $verifiedN : 0;
    if ($mobRate >= 0.30)          { $signals[] = ['ok',   'Mobile-verified rate: ' . round($mobRate*100) . '%']; }
    elseif ($mobRate >= 0.10)      { $score += 1; $signals[] = ['warn', 'Mobile-verified rate: ' . round($mobRate*100) . '% — low']; }
    else                            { $score += 2; $signals[] = ['bad',  'Mobile-verified rate: ' . round($mobRate*100) . '% — almost no engagement']; }

    // 4) Profilers started rate
    $profRate = $verifiedN > 0 ? (int)($eng['profilers_started'] ?? 0) / $verifiedN : 0;
    if ($profRate >= 0.30)         { $signals[] = ['ok',   'Profiler-started rate: ' . round($profRate*100) . '%']; }
    elseif ($profRate >= 0.10)     { $score += 1; $signals[] = ['warn', 'Profiler-started rate: ' . round($profRate*100) . '% — low']; }
    else                            { $score += 2; $signals[] = ['bad',  'Profiler-started rate: ' . round($profRate*100) . '% — empty profiles']; }

    // 5) Fast verifies (<30s) rate
    $vCount = (int)($tim['verified_count'] ?? 0);
    $fast30 = (int)($tim['fast_verifies_under_30s'] ?? 0);
    $fastRate = $vCount > 0 ? $fast30 / $vCount : 0;
    if ($fastRate < 0.20)          { $signals[] = ['ok',   'Fast-verify rate (<30s): ' . round($fastRate*100) . '%']; }
    elseif ($fastRate < 0.50)      { $signals[] = ['info', 'Fast-verify rate (<30s): ' . round($fastRate*100) . '% — note']; }
    else                            { $score += 1; $signals[] = ['warn', 'Fast-verify rate (<30s): ' . round($fastRate*100) . '% — high (event style or automation)']; }

    // 6) Scripted-fast signups (<15s)
    $fast15 = (int)($tim['fast_signups_under_15s'] ?? 0);
    if ($fast15 == 0)              { $signals[] = ['ok',   'Scripted-fast signups (<15s): 0']; }
    elseif ($fast15 < 5)           { $score += 1; $signals[] = ['warn', "Scripted-fast signups (<15s): $fast15"]; }
    else                            { $score += 3; $signals[] = ['bad',  "Scripted-fast signups (<15s): $fast15 — likely automation"]; }

    // 7) Email pattern duplicates
    $emailDupCount = count($report['email_dupes'] ?? []);
    if ($emailDupCount == 0)       { $signals[] = ['ok',   'Email pattern duplicates: none']; }
    elseif ($emailDupCount <= 3)   { $score += 1; $signals[] = ['warn', "Email pattern duplicates: $emailDupCount (possible Gmail tricks)"]; }
    else                            { $score += 3; $signals[] = ['bad',  "Email pattern duplicates: $emailDupCount — same person, multiple aliases"]; }

    // 8) Surveys completed by referees
    $sv = $report['surveys'] ?? [];
    $totalRefs = max(count($refIds), 1);
    $surveyEngagement = (int)($sv['unique_with_completes'] ?? 0) / $totalRefs;
    if ($verifiedN >= 20) { // only meaningful at scale
        if ($surveyEngagement >= 0.10)     { $signals[] = ['ok',   'Survey engagement: ' . round($surveyEngagement*100) . '% of referees took surveys']; }
        elseif ($surveyEngagement >= 0.03) { $score += 1; $signals[] = ['warn', 'Survey engagement: ' . round($surveyEngagement*100) . '% — low']; }
        else                                { $score += 2; $signals[] = ['bad',  'Survey engagement: ' . round($surveyEngagement*100) . '% — referees never take surveys']; }
    }

    // Verdict from total score
    if ($score <= 3)         { $verdictLevel = 'clean';   $verdictText = 'CLEAN'; $verdictColor = '#059669'; $verdictBg = '#d1fae5'; $verdictIcon = '✓'; }
    elseif ($score <= 7)     { $verdictLevel = 'review';  $verdictText = 'REQUIRES REVIEW'; $verdictColor = '#d97706'; $verdictBg = '#fef3c7'; $verdictIcon = '⚠'; }
    else                      { $verdictLevel = 'risky';   $verdictText = 'HIGH FRAUD RISK'; $verdictColor = '#dc2626'; $verdictBg = '#fee2e2'; $verdictIcon = '✗'; }

    $report['verdict'] = [
        'score' => $score, 'level' => $verdictLevel, 'text' => $verdictText,
        'color' => $verdictColor, 'bg' => $verdictBg, 'icon' => $verdictIcon, 'signals' => $signals
    ];
}

// Helpers
if (!function_exists('fmtNum')) { function fmtNum($v) { return number_format((int)$v); } }
if (!function_exists('fmtIST')) {
    function fmtIST($dt, $fmt = 'd M Y h:i A') {
        if (!$dt || $dt === '0000-00-00 00:00:00') return '—';
        try { $d = new DateTime($dt, new DateTimeZone('Asia/Kolkata')); return $d->format($fmt); }
        catch (Exception $e) { return date($fmt, strtotime($dt)); }
    }
}
function fmtDuration($s) {
    if ($s === null || $s === '') return '—';
    $s = (int)$s;
    if ($s < 60)       return $s . 's';
    if ($s < 3600)     return floor($s/60) . 'm ' . ($s%60) . 's';
    if ($s < 86400)    return floor($s/3600) . 'h ' . floor(($s%3600)/60) . 'm';
    return floor($s/86400) . 'd ' . floor(($s%86400)/3600) . 'h';
}

include 'includes/header.php';
?>

<style>
:root {
    --g50:#f0fdf4; --g100:#dcfce7; --g200:#bbf7d0; --g500:#22c55e; --g600:#059669; --g700:#047857;
    --s50:#f8fafc; --s100:#f1f5f9; --s200:#e2e8f0; --s400:#94a3b8; --s500:#64748b; --s600:#475569; --s700:#334155; --s800:#1e293b; --s900:#0f172a;
    --r500:#ef4444; --r600:#dc2626; --b500:#3b82f6; --b600:#2563eb; --a500:#f59e0b; --a600:#d97706;
    --rad:10px; --rad-sm:7px;
    --aud-font:'Plus Jakarta Sans',-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;
}

.aud { padding:18px 22px 28px; max-width:1500px; margin:0 auto; font-family:var(--aud-font); font-size:13px; color:var(--s700); }
.aud h1 { font-size:22px; font-weight:800; color:var(--s900); margin:0 0 4px; letter-spacing:-.3px; }
.aud .sub { font-size:12px; color:var(--s500); margin-bottom:18px; }

.aud-form { background:#fff; border:1px solid var(--s200); border-radius:var(--rad); padding:18px 22px; margin-bottom:20px; box-shadow:0 1px 3px rgba(0,0,0,.04); }
.aud-form-row { display:flex; align-items:center; gap:10px; flex-wrap:wrap; }
.aud-form input[type="email"] { flex:1; min-width:280px; padding:9px 13px; border:1px solid var(--s200); border-radius:var(--rad-sm); font-size:13px; font-family:var(--aud-font); }
.aud-form input[type="email"]:focus { outline:none; border-color:var(--g600); }
.aud-form button { padding:9px 18px; border:none; border-radius:var(--rad-sm); font-size:13px; font-weight:700; background:var(--s800); color:#fff; cursor:pointer; font-family:var(--aud-font); }
.aud-form button:hover { background:var(--s900); }
.aud-form .helper { font-size:11.5px; color:var(--s400); margin-top:6px; }
.aud-error { background:#fee2e2; border:1px solid #fecaca; color:#991b1b; padding:10px 14px; border-radius:var(--rad-sm); font-size:13px; margin-top:10px; }

/* Member header card */
.aud-member { background:linear-gradient(135deg,#064e3b,#065f46); color:#fff; border-radius:var(--rad); padding:18px 22px; margin-bottom:14px; box-shadow:0 4px 14px rgba(5,95,70,.18); }
.aud-member-row { display:flex; justify-content:space-between; align-items:flex-start; gap:14px; flex-wrap:wrap; }
.aud-member-l { font-size:11px; font-weight:700; text-transform:uppercase; letter-spacing:.4px; opacity:.7; }
.aud-member h2 { font-size:18px; font-weight:800; color:#fff; margin:2px 0 0; }
.aud-member .email { font-size:13px; opacity:.85; margin-top:2px; }
.aud-member-meta { display:flex; gap:18px; flex-wrap:wrap; font-size:12px; }
.aud-member-meta div b { display:block; font-size:10.5px; font-weight:700; opacity:.7; text-transform:uppercase; letter-spacing:.3px; }

/* Verdict card */
.aud-verdict { border-radius:var(--rad); padding:18px 22px; margin-bottom:14px; border:2px solid; }
.aud-verdict-head { display:flex; align-items:center; justify-content:space-between; gap:14px; flex-wrap:wrap; margin-bottom:12px; }
.aud-verdict-icon { font-size:32px; line-height:1; }
.aud-verdict-text { font-size:22px; font-weight:800; letter-spacing:-.3px; }
.aud-verdict-score { background:rgba(0,0,0,.07); padding:5px 12px; border-radius:14px; font-size:12px; font-weight:700; }
.aud-signals { display:grid; grid-template-columns:repeat(auto-fit,minmax(280px,1fr)); gap:6px; }
.aud-signal { font-size:12.5px; padding:7px 11px; border-radius:6px; line-height:1.35; background:rgba(255,255,255,.55); }
.aud-signal.ok   { color:#065f46; }
.aud-signal.ok::before   { content:"✓ "; font-weight:800; }
.aud-signal.warn { color:#92400e; }
.aud-signal.warn::before { content:"⚠ "; font-weight:800; }
.aud-signal.bad  { color:#991b1b; }
.aud-signal.bad::before  { content:"✗ "; font-weight:800; }
.aud-signal.info { color:#1e3a8a; }
.aud-signal.info::before { content:"ℹ "; font-weight:800; }

/* Sections */
.aud-section { background:#fff; border:1px solid var(--s200); border-radius:var(--rad); padding:14px 18px; margin-bottom:12px; }
.aud-section h3 { font-size:11.5px; font-weight:800; color:var(--s800); text-transform:uppercase; letter-spacing:.4px; margin:0 0 10px; }
.aud-section h3 small { font-size:11px; font-weight:500; color:var(--s400); text-transform:none; letter-spacing:0; margin-left:6px; }

/* KPI grid */
.kg { display:grid; gap:8px; }
.kg.k4 { grid-template-columns:repeat(4,1fr); }
.kg.k5 { grid-template-columns:repeat(5,1fr); }
.kg.k6 { grid-template-columns:repeat(6,1fr); }
.kpi { background:var(--s50); border:1px solid var(--s200); border-radius:var(--rad-sm); padding:9px 11px; min-width:0; }
.kpi-l { font-size:10px; font-weight:700; color:var(--s500); text-transform:uppercase; letter-spacing:.3px; }
.kpi-v { font-size:19px; font-weight:800; color:var(--s900); margin-top:4px; }
.kpi-s { font-size:10.5px; color:var(--s500); margin-top:2px; }
.kpi.green { background:var(--g50); border-color:var(--g200); }
.kpi.green .kpi-l, .kpi.green .kpi-v { color:var(--g700); }
.kpi.amber { background:#fffbeb; border-color:#fde68a; }
.kpi.amber .kpi-l, .kpi.amber .kpi-v { color:var(--a600); }
.kpi.red { background:#fef2f2; border-color:#fecaca; }
.kpi.red .kpi-l, .kpi.red .kpi-v { color:var(--r600); }

/* Tables */
.tbl { width:100%; border-collapse:collapse; font-size:12px; }
.tbl th { text-align:left; font-size:10px; font-weight:700; color:var(--s500); text-transform:uppercase; letter-spacing:.3px; padding:8px 10px; border-bottom:1.5px solid var(--s100); background:var(--s50); }
.tbl td { padding:7px 10px; border-bottom:1px solid var(--s100); color:var(--s700); }
.tbl tr:last-child td { border-bottom:none; }
.tbl .num { text-align:right; font-variant-numeric:tabular-nums; }
.tbl .dim { color:var(--s400); }

/* Bar chart for hour distribution */
.hourbars { display:grid; grid-template-columns:repeat(24,1fr); gap:2px; align-items:end; height:80px; padding-top:6px; }
.hourbar { background:var(--g500); border-radius:2px 2px 0 0; min-height:2px; position:relative; }
.hourbar.zero { background:var(--s100); }
.hourbar:hover::after { content:attr(data-tooltip); position:absolute; bottom:100%; left:50%; transform:translateX(-50%); background:var(--s900); color:#fff; font-size:10px; padding:3px 6px; border-radius:3px; white-space:nowrap; }
.hourlabels { display:grid; grid-template-columns:repeat(24,1fr); gap:2px; font-size:9px; color:var(--s400); margin-top:4px; text-align:center; }

/* Region bars */
.regionrow { display:flex; align-items:center; gap:10px; padding:6px 0; border-bottom:1px solid var(--s100); }
.regionrow:last-child { border-bottom:none; }
.regionrow .name { flex:0 0 280px; font-size:12px; color:var(--s700); font-weight:600; }
.regionrow .bar  { flex:1; height:8px; background:var(--s100); border-radius:4px; overflow:hidden; }
.regionrow .fill { height:100%; background:var(--g500); border-radius:4px; }
.regionrow .pct  { flex:0 0 60px; text-align:right; font-size:12px; font-weight:700; color:var(--s800); }

.notice { background:#fffbeb; border:1px solid #fde68a; padding:14px; border-radius:var(--rad-sm); color:#92400e; font-size:13px; margin-bottom:12px; }
.empty { text-align:center; padding:30px 14px; color:var(--s400); }

/* Buttons */
.btn-group { display:flex; gap:8px; flex-wrap:wrap; margin-bottom:14px; }
.btn { padding:9px 14px; border:none; border-radius:var(--rad-sm); font-size:12.5px; font-weight:700; cursor:pointer; font-family:var(--aud-font); text-decoration:none; display:inline-flex; align-items:center; gap:6px; }
.btn-primary { background:var(--g600); color:#fff; }
.btn-primary:hover { background:var(--g700); }
.btn-ghost { background:#fff; border:1px solid var(--s200); color:var(--s700); }
.btn-ghost:hover { background:var(--s50); }

/* Print styles — clean, professional PDF output */
.print-header { display:none; }
@media print {
    @page { margin:14mm 12mm; size:A4; }
    body { background:#fff !important; }
    .pnav, .top-header, .footer, .nav-mobile-toggle, .audit-form,
    .no-print, .btn-group, header, nav, footer { display:none !important; }
    .aud { padding:0; max-width:100%; }
    .aud-section { box-shadow:none !important; page-break-inside:avoid; border-color:#cbd5e1 !important; margin-bottom:8px !important; padding:10px 12px !important; }
    .aud-member { box-shadow:none !important; -webkit-print-color-adjust:exact !important; print-color-adjust:exact !important; page-break-inside:avoid; }
    .aud-verdict { -webkit-print-color-adjust:exact !important; print-color-adjust:exact !important; page-break-inside:avoid; }
    .kpi, .kpi.green, .kpi.amber, .kpi.red,
    .aud-signal, .hourbar { -webkit-print-color-adjust:exact !important; print-color-adjust:exact !important; }
    .print-header { display:block !important; padding:0 0 8px; border-bottom:2px solid var(--g600); margin-bottom:10px; }
    .print-header h1 { font-size:18px; margin:0; color:var(--s900); }
    .print-header p  { font-size:11px; color:var(--s500); margin:3px 0 0; }
    .aud-form, .aud-error { display:none !important; }
}

@media (max-width:980px) {
    .kg.k4, .kg.k5, .kg.k6 { grid-template-columns:repeat(2,1fr); }
}
</style>

<div class="aud">

<!-- ── Print-only header ── -->
<div class="print-header">
    <h1>Referral Audit Report</h1>
    <p>Generated <?php echo date('d M Y, h:i A'); ?> IST · Relevant Reflex Admin · By <?php echo htmlspecialchars($_SESSION['admin_name'] ?? 'admin'); ?></p>
</div>

<!-- ── Page header ── -->
<h1>Referral Audit</h1>
<p class="sub">Comprehensive fraud/legitimacy assessment for any referring panel member. Enter their email to run a full multi-signal check across IPs, timing, engagement, geographic spread, and survey activity.</p>

<!-- ── Search form ── -->
<div class="aud-form">
    <form method="GET" action="">
        <div class="aud-form-row">
            <input type="email" name="email" placeholder="Enter member email (e.g. ramakrishnakamishetti367@gmail.com)" value="<?php echo htmlspecialchars($searchEmail); ?>" required autofocus>
            <button type="submit">Run Audit</button>
        </div>
        <div class="helper">Tip: Use the exact email registered to the panel-member account. The lookup is case-sensitive.</div>
    </form>
    <?php if ($searchError): ?>
        <div class="aud-error"><?php echo htmlspecialchars($searchError); ?></div>
    <?php endif; ?>
</div>

<?php if ($user && $report): ?>

<!-- ── Action buttons (hidden in print) ── -->
<div class="btn-group no-print">
    <button class="btn btn-primary" onclick="window.print()">📥 Save as PDF / Print</button>
    <a href="referral-audit.php" class="btn btn-ghost">↻ New Audit</a>
    <a href="member_view.php?id=<?php echo (int)$user['id']; ?>" class="btn btn-ghost" target="_blank">👤 View Member</a>
    <a href="member_edit.php?id=<?php echo (int)$user['id']; ?>" class="btn btn-ghost" target="_blank">✏️ Edit Member</a>
</div>

<!-- ── Member header ── -->
<div class="aud-member">
    <div class="aud-member-row">
        <div>
            <div class="aud-member-l">Member Audited</div>
            <h2><?php echo htmlspecialchars(trim(($user['first_name']??'') . ' ' . ($user['last_name']??''))) ?: 'Member'; ?></h2>
            <div class="email"><?php echo htmlspecialchars($user['email']); ?></div>
        </div>
        <div class="aud-member-meta">
            <div><b>Member ID</b>RR<?php echo str_pad((int)$user['id'], 7, '0', STR_PAD_LEFT); ?></div>
            <div><b>Status</b><?php echo htmlspecialchars(ucfirst($user['status'] ?? 'unknown')); ?></div>
            <div><b>Joined</b><?php echo fmtIST($user['created_at'], 'd M Y'); ?></div>
            <div><b>Email Verified</b><?php echo $user['email_verified'] ? 'Yes' : 'No'; ?></div>
            <div><b>Postcode</b><?php echo htmlspecialchars($user['postcode'] ?? '—'); ?></div>
            <?php if ($report['tier_cfg'] && (int)$report['tier_cfg']['enabled'] === 1): ?>
            <div><b>Referral Tier</b>Enabled · T2:₹<?php echo number_format($report['tier_cfg']['tier_2_amount'],0); ?> T3:₹<?php echo number_format($report['tier_cfg']['tier_3_amount'],0); ?> T4:₹<?php echo number_format($report['tier_cfg']['tier_4_amount'],0); ?> T5:₹<?php echo number_format($report['tier_cfg']['tier_5_amount'],0); ?></div>
            <?php else: ?>
            <div><b>Referral Tier</b>Default flat ₹5</div>
            <?php endif; ?>
        </div>
    </div>
</div>

<!-- ── Verdict card ── -->
<?php $v = $report['verdict']; ?>
<div class="aud-verdict" style="background:<?php echo $v['bg']; ?>;border-color:<?php echo $v['color']; ?>;color:<?php echo $v['color']; ?>;">
    <div class="aud-verdict-head">
        <div style="display:flex;align-items:center;gap:14px;">
            <span class="aud-verdict-icon"><?php echo $v['icon']; ?></span>
            <span class="aud-verdict-text"><?php echo $v['text']; ?></span>
        </div>
        <div class="aud-verdict-score">Risk score: <?php echo $v['score']; ?> / 16</div>
    </div>
    <div class="aud-signals">
        <?php foreach ($v['signals'] as $sig): ?>
            <div class="aud-signal <?php echo htmlspecialchars($sig[0]); ?>"><?php echo htmlspecialchars($sig[1]); ?></div>
        <?php endforeach; ?>
    </div>
</div>

<!-- ── Headline numbers ── -->
<div class="aud-section">
    <h3>Headline Numbers</h3>
    <div class="kg k6">
        <div class="kpi"><div class="kpi-l">Total Clicks</div><div class="kpi-v"><?php echo fmtNum($report['aggregate']['total_clicks']); ?></div></div>
        <div class="kpi"><div class="kpi-l">Signups</div><div class="kpi-v"><?php echo fmtNum($report['aggregate']['signups']); ?></div><div class="kpi-s"><?php echo (int)$report['aggregate']['total_clicks'] > 0 ? round((int)$report['aggregate']['signups']/(int)$report['aggregate']['total_clicks']*100) : 0; ?>% conv.</div></div>
        <div class="kpi green"><div class="kpi-l">Verified</div><div class="kpi-v"><?php echo fmtNum($report['aggregate']['verified']); ?></div><div class="kpi-s"><?php echo (int)$report['aggregate']['signups'] > 0 ? round((int)$report['aggregate']['verified']/(int)$report['aggregate']['signups']*100) : 0; ?>% of signups</div></div>
        <div class="kpi"><div class="kpi-l">Unique IPs</div><div class="kpi-v"><?php echo fmtNum($report['aggregate']['unique_ips']); ?></div><div class="kpi-s"><?php echo (int)$report['aggregate']['total_clicks'] > 0 ? round((int)$report['aggregate']['unique_ips']/(int)$report['aggregate']['total_clicks']*100) : 0; ?>% diversity</div></div>
        <div class="kpi"><div class="kpi-l">Unique Referees</div><div class="kpi-v"><?php echo fmtNum($report['aggregate']['unique_referees']); ?></div></div>
        <div class="kpi"><div class="kpi-l">Unique User-Agents</div><div class="kpi-v"><?php echo fmtNum($report['aggregate']['unique_uas']); ?></div></div>
    </div>
    <div style="margin-top:8px;font-size:11.5px;color:var(--s500);">
        First click: <?php echo fmtIST($report['aggregate']['first_click']); ?> · Last click: <?php echo fmtIST($report['aggregate']['last_click']); ?>
    </div>
</div>

<!-- ── Engagement (post-signup) ── -->
<div class="aud-section">
    <h3>Post-Signup Engagement <small>— do referees actually use the platform?</small></h3>
    <div class="kg k5">
        <div class="kpi green"><div class="kpi-l">Verified Referees</div><div class="kpi-v"><?php echo fmtNum($report['engagement']['verified_referees']); ?></div></div>
        <div class="kpi"><div class="kpi-l">Mobile Verified</div><div class="kpi-v"><?php echo fmtNum($report['engagement']['mobile_verified']); ?></div><div class="kpi-s"><?php echo $verifiedN > 0 ? round((int)$report['engagement']['mobile_verified']/$verifiedN*100) : 0; ?>%</div></div>
        <div class="kpi"><div class="kpi-l">Started Profilers</div><div class="kpi-v"><?php echo fmtNum($report['engagement']['profilers_started']); ?></div><div class="kpi-s"><?php echo $verifiedN > 0 ? round((int)$report['engagement']['profilers_started']/$verifiedN*100) : 0; ?>%</div></div>
        <div class="kpi"><div class="kpi-l">Survey Invites</div><div class="kpi-v"><?php echo fmtNum($report['surveys']['total_invites']); ?></div><div class="kpi-s"><?php echo fmtNum($report['surveys']['referees_with_invites']); ?> referees got invites</div></div>
        <div class="kpi"><div class="kpi-l">Surveys Done</div><div class="kpi-v"><?php echo fmtNum($report['surveys']['total_completes']); ?></div><div class="kpi-s"><?php echo fmtNum($report['surveys']['unique_with_completes']); ?> took at least 1<?php if ((int)$report['surveys']['bad_quality'] > 0): ?> · <span style="color:var(--r600);"><?php echo (int)$report['surveys']['bad_quality']; ?> bad-quality</span><?php endif; ?></div></div>
    </div>
</div>

<!-- ── Timing analysis ── -->
<div class="aud-section">
    <h3>Timing Patterns <small>— scripted vs human</small></h3>
    <div class="kg k6">
        <div class="kpi"><div class="kpi-l">Click → Signup (avg)</div><div class="kpi-v" style="font-size:16px;"><?php echo fmtDuration($report['timing']['click_to_signup_avg_s']); ?></div><div class="kpi-s">min <?php echo fmtDuration($report['timing']['click_to_signup_min_s']); ?> · max <?php echo fmtDuration($report['timing']['click_to_signup_max_s']); ?></div></div>
        <div class="kpi"><div class="kpi-l">Signup → Verify (avg)</div><div class="kpi-v" style="font-size:16px;"><?php echo fmtDuration($report['timing']['signup_to_verify_avg_s']); ?></div><div class="kpi-s">min <?php echo fmtDuration($report['timing']['signup_to_verify_min_s']); ?> · max <?php echo fmtDuration($report['timing']['signup_to_verify_max_s']); ?></div></div>
        <div class="kpi <?php echo (int)$report['timing']['fast_signups_under_15s'] > 0 ? 'red' : 'green'; ?>"><div class="kpi-l">Signups &lt;15s</div><div class="kpi-v"><?php echo fmtNum($report['timing']['fast_signups_under_15s']); ?></div><div class="kpi-s">scripted threshold</div></div>
        <div class="kpi <?php $rate30 = $vCount > 0 ? $fast30 / $vCount : 0; echo $rate30 >= 0.5 ? 'amber' : ''; ?>"><div class="kpi-l">Verifies &lt;30s</div><div class="kpi-v"><?php echo fmtNum($report['timing']['fast_verifies_under_30s']); ?></div><div class="kpi-s"><?php echo round($rate30*100); ?>% of verified</div></div>
    </div>

    <h3 style="margin-top:14px;">Hour Distribution (IST)</h3>
    <?php
        $hourMap = array_fill(0, 24, 0);
        foreach ($report['hours'] as $h) { $hourMap[(int)$h['ist_hour']] = (int)$h['signups']; }
        $maxHr = max($hourMap) ?: 1;
    ?>
    <div class="hourbars">
        <?php for ($h = 0; $h < 24; $h++): $cnt = $hourMap[$h]; $pct = $cnt / $maxHr * 100; ?>
            <div class="hourbar <?php echo $cnt === 0 ? 'zero' : ''; ?>" data-tooltip="<?php echo $h; ?>:00 — <?php echo $cnt; ?> signups" style="height:<?php echo max(2, $pct); ?>%;"></div>
        <?php endfor; ?>
    </div>
    <div class="hourlabels">
        <?php for ($h = 0; $h < 24; $h++): ?><div><?php echo $h; ?></div><?php endfor; ?>
    </div>
</div>

<!-- ── Bursts ── -->
<?php if (!empty($report['bursts'])): ?>
<div class="aud-section">
    <h3>Burst Windows <small>— concentrated signup activity (&ge;3 in same hour, IST)</small></h3>
    <table class="tbl">
        <thead><tr><th>Hour Window (IST)</th><th class="num">Signups</th><th class="num">Unique IPs</th><th class="num">IP Diversity</th><th>Read</th></tr></thead>
        <tbody>
        <?php foreach ($report['bursts'] as $b):
            $div = (float)$b['ip_diversity'];
            $cls = $div >= 0.7 ? 'ok' : ($div >= 0.3 ? 'warn' : 'bad');
            $read = $div >= 0.7 ? 'Healthy — distinct devices'
                  : ($div >= 0.3 ? 'Mixed — possibly shared WiFi'
                  : 'Concentrated — same network, suspicious');
        ?>
            <tr>
                <td><?php echo htmlspecialchars($b['hour_window_ist']); ?></td>
                <td class="num"><strong><?php echo fmtNum($b['signups']); ?></strong></td>
                <td class="num"><?php echo fmtNum($b['unique_ips']); ?></td>
                <td class="num"><strong><?php echo round($div * 100); ?>%</strong></td>
                <td class="aud-signal <?php echo $cls; ?>" style="background:transparent;padding:0;"><?php echo $read; ?></td>
            </tr>
        <?php endforeach; ?>
        </tbody>
    </table>
</div>
<?php endif; ?>

<!-- ── IP repeats ── -->
<?php if (!empty($report['top_ips'])): ?>
<div class="aud-section">
    <h3>IP Repeats <small>— addresses appearing in multiple referrals</small></h3>
    <table class="tbl">
        <thead><tr><th>IP Address</th><th class="num">Total Hits</th><th class="num">Signups</th><th class="num">Verified</th></tr></thead>
        <tbody>
        <?php foreach ($report['top_ips'] as $ip): ?>
            <tr>
                <td><code><?php echo htmlspecialchars($ip['ip_address']); ?></code></td>
                <td class="num"><?php echo fmtNum($ip['hits']); ?></td>
                <td class="num"><?php echo fmtNum($ip['signups']); ?></td>
                <td class="num"><?php echo fmtNum($ip['verified']); ?></td>
            </tr>
        <?php endforeach; ?>
        </tbody>
    </table>
    <div style="margin-top:6px;font-size:11.5px;color:var(--s500);">A small number of repeats with 2-3 hits each is normal (people use multiple devices). Many IPs each producing 5+ verified signups is a fraud signal.</div>
</div>
<?php else: ?>
<div class="aud-section">
    <h3>IP Repeats</h3>
    <div class="empty">No IP appears in multiple referrals — every signup came from a distinct IP. ✓</div>
</div>
<?php endif; ?>

<!-- ── Email duplicates ── -->
<?php if (!empty($report['email_dupes'])): ?>
<div class="aud-section">
    <h3>Email Pattern Duplicates <small>— Gmail dot/plus aliases pointing to same inbox</small></h3>
    <table class="tbl">
        <thead><tr><th>Normalized Local</th><th>Domain</th><th class="num">Variants</th><th>Emails</th></tr></thead>
        <tbody>
        <?php foreach ($report['email_dupes'] as $e): ?>
            <tr>
                <td><code><?php echo htmlspecialchars($e['norm_local']); ?></code></td>
                <td><?php echo htmlspecialchars($e['domain']); ?></td>
                <td class="num"><strong><?php echo fmtNum($e['dupes']); ?></strong></td>
                <td><?php echo htmlspecialchars($e['emails']); ?></td>
            </tr>
        <?php endforeach; ?>
        </tbody>
    </table>
</div>
<?php endif; ?>

<!-- ── Geographic spread ── -->
<?php if (!empty($report['regions'])): ?>
<div class="aud-section">
    <h3>Geographic Spread <small>— by pincode region</small></h3>
    <?php
        $totalGeo = array_sum(array_column($report['regions'], 'members'));
        if ($totalGeo == 0) $totalGeo = 1;
    ?>
    <?php foreach ($report['regions'] as $r):
        $pct = (int)$r['members'] / $totalGeo * 100;
    ?>
        <div class="regionrow">
            <div class="name"><?php echo htmlspecialchars($r['region_code']); ?>xxxxx — <?php echo htmlspecialchars($r['region']); ?></div>
            <div class="bar"><div class="fill" style="width:<?php echo $pct; ?>%;"></div></div>
            <div class="pct"><?php echo fmtNum($r['members']); ?> · <?php echo round($pct, 1); ?>%</div>
        </div>
    <?php endforeach; ?>

    <h3 style="margin-top:14px;">Top Districts</h3>
    <table class="tbl">
        <thead><tr><th>Pincode Prefix</th><th class="num">Members</th><th>Sample Pincodes</th></tr></thead>
        <tbody>
        <?php foreach ($report['districts'] as $d): ?>
            <tr>
                <td><code><?php echo htmlspecialchars($d['prefix']); ?></code></td>
                <td class="num"><strong><?php echo fmtNum($d['members']); ?></strong></td>
                <td class="dim"><?php echo htmlspecialchars(mb_strimwidth($d['sample_pins'], 0, 80, '…')); ?></td>
            </tr>
        <?php endforeach; ?>
        </tbody>
    </table>
</div>
<?php endif; ?>

<!-- ── Recent referees detail ── -->
<?php if (!empty($report['recent'])): ?>
<div class="aud-section">
    <h3>Recent Referees <small>— most recent 30 click events</small></h3>
    <div style="overflow-x:auto;">
        <table class="tbl">
            <thead><tr>
                <th>Email</th><th>IP</th><th class="num">C→S</th><th class="num">S→V</th>
                <th>Verified</th><th>Mob</th><th>Prof</th><th>Postcode</th><th class="num">Clicked (IST)</th>
            </tr></thead>
            <tbody>
            <?php foreach ($report['recent'] as $r):
                $cs = ($r['clicked_at'] && $r['signed_up_at']) ? strtotime($r['signed_up_at']) - strtotime($r['clicked_at']) : null;
                $sv = ($r['signed_up_at'] && $r['verified_at']) ? strtotime($r['verified_at']) - strtotime($r['signed_up_at']) : null;
            ?>
                <tr>
                    <td><?php echo htmlspecialchars(mb_strimwidth($r['full_email'] ?? $r['masked_email'] ?? '—', 0, 30, '…')); ?></td>
                    <td style="font-family:ui-monospace,monospace;font-size:11px;color:var(--s500);"><?php echo htmlspecialchars($r['ip_address']); ?></td>
                    <td class="num"><?php echo $cs !== null ? fmtDuration($cs) : '—'; ?></td>
                    <td class="num"><?php echo $sv !== null ? fmtDuration($sv) : '—'; ?></td>
                    <td><?php echo $r['email_verified'] ? '<span style="color:var(--g600);">✓</span>' : '<span class="dim">—</span>'; ?></td>
                    <td><?php echo $r['mob_v'] ? '<span style="color:var(--g600);">✓</span>' : '<span class="dim">—</span>'; ?></td>
                    <td><?php echo (int)$r['prof_c'] > 0 ? '<span style="color:var(--g600);">' . (int)$r['prof_c'] . '</span>' : '<span class="dim">—</span>'; ?></td>
                    <td class="dim"><?php echo htmlspecialchars($r['postcode'] ?? '—'); ?></td>
                    <td class="num dim"><?php echo fmtIST($r['clicked_at'], 'd M h:i A'); ?></td>
                </tr>
            <?php endforeach; ?>
            </tbody>
        </table>
    </div>
</div>
<?php endif; ?>

<!-- ── Footer note ── -->
<div style="font-size:11px;color:var(--s400);margin-top:10px;text-align:center;">
    Report generated <?php echo date('d M Y, h:i:s A'); ?> IST · Relevant Reflex Admin Audit · For internal review only
</div>

<?php elseif (!$searchEmail): ?>

<!-- Initial state — no search yet -->
<div class="notice" style="background:#eff6ff;border-color:#bfdbfe;color:#1e40af;">
    <strong>How this audit works:</strong> Enter the email of any panel member who has been referring others. The tool runs <strong>8 independent checks</strong> across IP diversity, signup/verify timing patterns, post-signup engagement, geographic concentration, email-pattern tricks, burst-window analysis, and survey activity in real projects — then scores each signal and gives a verdict (CLEAN / REQUIRES REVIEW / HIGH FRAUD RISK). Click "Save as PDF" once results are shown to keep a record for fraud-related disputes or member suspensions.
</div>

<?php endif; ?>

</div><!-- /.aud -->

<?php include 'includes/footer.php'; ?>