) if present
$html = preg_replace('/^<\?php\s*\?>/i', '', $html);

// ═══════════════════════════════════════
// INJECT CLOUD BRIDGE SCRIPT
// This overrides save()/load()/auth functions
// to use MySQL instead of localStorage
// ═══════════════════════════════════════
$cloudBridge = <<<'JSBRIDGE'
<script>
// ═══════════════════════════════════════════
// ☁️ CLOUD BRIDGE — MySQL replaces localStorage
// Injected automatically by index.php
// ═══════════════════════════════════════════

(function(){

// ── Override save() — POST to MySQL ──
var _origSave = window.save;
window.save = async function() {
    window.saveDB && window.saveDB();
    var token = localStorage.getItem('mp_admin_token');
    if (!token) return;
    try {
        // Clone DB but remove sensitive data
        var data = JSON.parse(JSON.stringify(DB));
        delete data.creds;
        await fetch('?action=save_db', {
            method: 'POST',
            headers: {'Content-Type':'application/json', 'Authorization':'Bearer '+token},
            body: JSON.stringify(data)
        });
    } catch(e) { console.warn('Cloud save failed:', e); }
};
window.saveDB = window.save;

// ── Override load() — GET from MySQL ──
var _origLoad = window.load;
window.load = async function() {
    try {
        var resp = await fetch('?action=load_db');
        if (resp.ok) {
            var data = await resp.json();
            if (data && typeof data === 'object' && Object.keys(data).length > 0) {
                // Merge cloud data into DB, keeping defaults for missing fields
                Object.keys(data).forEach(function(k) {
                    if (data[k] !== null && data[k] !== undefined) DB[k] = data[k];
                });
                console.log('☁️ Data loaded from cloud');
                return;
            }
        }
    } catch(e) { console.warn('Cloud load failed, using defaults:', e); }
    // Fallback: try original localStorage load
    if (typeof _origLoad === 'function') _origLoad();
};

// ── Override doLogin() — use PHP auth with bcrypt ──
var _origDoLogin = window.doLogin;
window.doLogin = async function() {
    var u = document.getElementById('lgU').value.trim();
    var p = document.getElementById('lgP').value;
    if (!u || !p) { showAl('lgAl','err','❌ Enter username and password'); return; }
    try {
        var resp = await fetch('?action=admin_login', {
            method:'POST',
            headers:{'Content-Type':'application/json'},
            body:JSON.stringify({username:u, password:p})
        });
        var data = await resp.json();
        if (data.error) throw new Error(data.error);
        localStorage.setItem('mp_admin_token', data.token);
        document.getElementById('loginView').style.display = 'none';
        document.getElementById('dashView').style.display = 'block';
        await load(); // Refresh data from cloud
        renderAll();
    } catch(e) {
        showAl('lgAl','err','❌ ' + e.message);
    }
};

// ── Override doLogout() ──
var _origDoLogout = window.doLogout;
window.doLogout = function() {
    var token = localStorage.getItem('mp_admin_token');
    if (token) {
        fetch('?action=admin_logout', {
            method:'POST',
            headers:{'Authorization':'Bearer '+token}
        }).catch(function(){});
    }
    localStorage.removeItem('mp_admin_token');
    document.getElementById('dashView').style.display = 'none';
    document.getElementById('loginView').style.display = '';
    document.getElementById('lgU').value = '';
    document.getElementById('lgP').value = '';
};

// ── Override changeCreds() — use PHP bcrypt ──
var _origChangeCreds = window.changeCreds;
window.changeCreds = async function() {
    var u = document.getElementById('newU').value.trim();
    var p = document.getElementById('newP').value.trim();
    if (!u && !p) { showAl('settAl','err','Enter new username or password.'); return; }
    if (u && u.length < 4) { showAl('settAl','err','Username min 4 chars.'); return; }
    if (p && p.length < 8) { showAl('settAl','err','Password min 8 chars.'); return; }
    try {
        var token = localStorage.getItem('mp_admin_token');
        var resp = await fetch('?action=change_creds', {
            method:'POST',
            headers:{'Content-Type':'application/json','Authorization':'Bearer '+token},
            body:JSON.stringify({username:u||undefined, password:p||undefined})
        });
        var data = await resp.json();
        if (data.error) throw new Error(data.error);
        document.getElementById('newU').value = '';
        document.getElementById('newP').value = '';
        showAl('settAl','ok','🔑 Credentials updated! Use new login next time.');
    } catch(e) { showAl('settAl','err','❌ '+e.message); }
};

// ── Override subLogin() — use PHP bcrypt ──
var _origSubLogin = window.subLogin;
window.subLogin = async function() {
    var email = document.getElementById('subEmail').value.trim().toLowerCase();
    var pass = document.getElementById('subPass').value;
    if (!email || !pass) { showAl('subLoginAl','err','❌ Enter email and password.'); return; }
    try {
        var resp = await fetch('?action=sub_login', {
            method:'POST',
            headers:{'Content-Type':'application/json'},
            body:JSON.stringify({email:email, password:pass})
        });
        var data = await resp.json();
        if (data.error) throw new Error(data.error);
        localStorage.setItem('mp_sub_token', data.token);
        currentSub = data.subscriber;
        localStorage.setItem('mp_sub_session', JSON.stringify(data.subscriber));
        updateSubUI();
        showSubMenu();
    } catch(e) { showAl('subLoginAl','err','❌ '+e.message); }
};

// ── Override subSignup() — use PHP bcrypt ──
var _origSubSignup = window.subSignup;
window.subSignup = async function() {
    var name = document.getElementById('suName').value.trim();
    var email = document.getElementById('suEmail').value.trim().toLowerCase();
    var phone = document.getElementById('suPhone').value.trim();
    var pass = document.getElementById('suPass').value;
    var pass2 = document.getElementById('suPass2').value;
    if (!name||!email||!pass) { showAl('subSignupAl','err','❌ Name, email, password required'); return; }
    if (pass.length<6) { showAl('subSignupAl','err','❌ Password min 6 chars'); return; }
    if (pass!==pass2) { showAl('subSignupAl','err','❌ Passwords don\'t match'); return; }
    try {
        var resp = await fetch('?action=sub_signup', {
            method:'POST',
            headers:{'Content-Type':'application/json'},
            body:JSON.stringify({name:name,email:email,phone:phone,password:pass})
        });
        var data = await resp.json();
        if (data.error) throw new Error(data.error);
        localStorage.setItem('mp_sub_token', data.token);
        currentSub = data.subscriber;
        localStorage.setItem('mp_sub_session', JSON.stringify(data.subscriber));
        updateSubUI();
        showAl('subSignupAl','ok','🎉 Account created!');
        setTimeout(function(){ showSubMenu(); }, 1500);
    } catch(e) { showAl('subSignupAl','err','❌ '+e.message); }
};

// ── Override subLogout() ──
var _origSubLogout = window.subLogout;
window.subLogout = function() {
    localStorage.removeItem('mp_sub_token');
    localStorage.removeItem('mp_sub_session');
    currentSub = null;
    updateSubUI();
    closeSubModal();
};

// ── Override submitUPIRequest() — save to MySQL ──
var _origSubmitUPI = window.submitUPIRequest;
window.submitUPIRequest = async function() {
    var name = document.getElementById('upiName').value.trim();
    var email = document.getElementById('upiEmail').value.trim();
    var phone = document.getElementById('upiPhone').value.trim();
    var txn = document.getElementById('upiTxn').value.trim();
    if (!name||!email||!txn) { showAl('upiPayAl','err','❌ Name, email, txn required'); return; }
    try {
        var isAnn = (window._billingCycle||'monthly')==='annual';
        var prices = isAnn ? (window._planPricesAnnual||{}) : (window._planPrices||{basic:199,pro:499,premium:999});
        var resp = await fetch('?action=submit_payment', {
            method:'POST',
            headers:{'Content-Type':'application/json'},
            body:JSON.stringify({
                name:name, email:email, phone:phone, txn_id:txn,
                plan:window._selectedPlan||'pro',
                billing:window._billingCycle||'monthly',
                amount:prices[window._selectedPlan||'pro']||499
            })
        });
        var data = await resp.json();
        if (data.error) throw new Error(data.error);
        showAl('upiPayAl','ok','✅ Payment submitted! Account activation in 2-4 hrs.');
        setTimeout(function(){
            document.getElementById('subUPIView').style.display='none';
            document.getElementById('subLoginView').style.display='block';
        },4000);
    } catch(e) { showAl('upiPayAl','err','❌ '+e.message); }
};

// ── Override renderPendingPayments() — load from MySQL ──
var _origRenderPP = window.renderPendingPayments;
window.renderPendingPayments = async function() {
    var el = document.getElementById('pendingPayList');
    if (!el) return;
    try {
        var token = localStorage.getItem('mp_admin_token');
        if (!token) return;
        var resp = await fetch('?action=get_payments', {
            headers:{'Authorization':'Bearer '+token}
        });
        var payments = await resp.json();
        if (!payments.length) { el.innerHTML='<div style="padding:14px;font-size:.8rem;color:var(--t3);">No pending payments.</div>'; return; }
        // Update DB.pendingPayments for compatibility
        DB.pendingPayments = payments;
        // Use original renderer if it references DB.pendingPayments
        if (_origRenderPP) _origRenderPP();
    } catch(e) { console.warn('Load payments failed:', e); }
};

// ── Override approvePayment/rejectPayment ──
window.approvePayment = async function(i) {
    var p = (DB.pendingPayments||[])[i];
    if (!p) return;
    try {
        var token = localStorage.getItem('mp_admin_token');
        var resp = await fetch('?action=approve_payment', {
            method:'POST',
            headers:{'Content-Type':'application/json','Authorization':'Bearer '+token},
            body:JSON.stringify({id:p.id})
        });
        var data = await resp.json();
        if (data.error) throw new Error(data.error);
        if (data.temp_password) alert('New subscriber created!\\nTemp Password: '+data.temp_password+'\\n\\nSend this to the user.');
        await renderPendingPayments();
        showAl('upiSettAl','ok','✅ Payment approved!');
    } catch(e) { showAl('upiSettAl','err','❌ '+e.message); }
};

window.rejectPayment = async function(i) {
    if (!confirm('Reject this payment?')) return;
    var p = (DB.pendingPayments||[])[i];
    if (!p) return;
    try {
        var token = localStorage.getItem('mp_admin_token');
        await fetch('?action=reject_payment', {
            method:'POST',
            headers:{'Content-Type':'application/json','Authorization':'Bearer '+token},
            body:JSON.stringify({id:p.id})
        });
        await renderPendingPayments();
    } catch(e) { console.warn(e); }
};

// ── Override nlSub() — save to MySQL ──
var _origNlSub = window.nlSub;
window.nlSub = async function() {
    var e = document.getElementById('nlEmail').value.trim();
    if (!e || !e.includes('@')) return;
    try {
        await fetch('?action=nl_subscribe', {
            method:'POST',
            headers:{'Content-Type':'application/json'},
            body:JSON.stringify({email:e})
        });
    } catch(ex) {}
    document.getElementById('nlOk').style.display = 'block';
    document.getElementById('nlEmail').value = '';
};

// ── Auto-load from cloud on page start ──
var _origWindowLoad = window.onload;
window.addEventListener('load', async function() {
    // Wait for original scripts to define DB etc
    setTimeout(async function() {
        await load(); // Loads from cloud MySQL
        try { renderAll(); } catch(e) {}
        console.log('☁️ MarketPuls running on cloud database');
    }, 200);
});

console.log('☁️ Cloud bridge injected — MySQL mode active');
})();
</script>
JSBRIDGE;

// Inject bridge script BEFORE the closing </body> tag
$html = str_replace('</body>', $cloudBridge . "\n</body>", $html);

// Output the modified HTML
echo $html;