<?php
/**
 * cron/cleanup_unconfirmed.php
 * Deletes accounts that have sat unconfirmed for more than $days days.
 *
 * CLI-only — refuses to run if reached over HTTP, since this performs a
 * real, irreversible deletion and has no business being web-accessible.
 *
 * Schedule this via your host's cron job feature, e.g. once daily:
 *   php /path/to/Rosary/cron/cleanup_unconfirmed.php
 *
 * Safe by construction: login.php refuses login to any account with
 * email_confirmed = 0, so an unconfirmed account can never have created a
 * session/novena_group/custom_prayer row — nothing here can orphan data.
 */
if (PHP_SAPI !== 'cli') {
    http_response_code(403);
    exit('This script may only be run from the command line.');
}

require_once __DIR__ . '/../config/db.php';

$days = 3;
$pdo  = get_pdo();

$st = $pdo->prepare("
    SELECT id, username, email, created_at
    FROM   users
    WHERE  email_confirmed = 0
      AND  created_at < (NOW() - INTERVAL ? DAY)
");
$st->execute([$days]);
$stale = $st->fetchAll();

$del = $pdo->prepare('DELETE FROM users WHERE id = ?');
foreach ($stale as $u) {
    $del->execute([$u['id']]);
    echo date('c') . " deleted unconfirmed user #{$u['id']} ({$u['username']}, {$u['email']}, registered {$u['created_at']})\n";
}

echo date('c') . ' — ' . count($stale) . " account(s) removed.\n";