<?php

require '../../../session.php';
define('UNAUTHENTICATED_ROUTE', true);
require '../../../assets/utils/db_auth.php';

if (empty($_SESSION['reset_user_id'])) {
    http_response_code(400);
    exit(json_encode(['success' => 0, 'message' => 'No active reset request. Please request a new OTP.']));
}

$user_id = (int)$_SESSION['reset_user_id'];

require_once $include_url . 'assets/utils/classes/PasswordResetManager.php';

$manager = new PasswordResetManager($pdo1, $pdo2, $include_url, $SMTP, $pinkey);
$manager->handleConfirmReset($user_id, $data);