<?php
session_start();
if (!isset($_SESSION['admin'])) {
    http_response_code(403);
    echo 'Unauthorized';
    exit;
}
require 'config.php';
$key = $_POST['key'] ?? '';
$value = $_POST['value'] ?? '';
if ($key === '' || $value === '') {
    http_response_code(400);
    echo 'Missing key or value';
    exit;
}
$stmt = $conn->prepare("REPLACE INTO settings (setting_key, setting_value) VALUES (?, ?)");
$stmt->bind_param("ss", $key, $value);
$stmt->execute();
echo 'ok';