<?php
header("Access-Control-Allow-Origin: *");
header("Content-Type: application/json; charset=utf-8");

if (!isset($_GET['url'])) {
    echo json_encode(["error" => "No URL provided"]);
    exit;
}

$url = $_GET['url'];

// حماية: السماح فقط بروابط FPL API
if (strpos($url, "fantasy.premierleague.com/api/") === false) {
    echo json_encode(["error" => "Invalid URL"]);
    exit;
}

echo file_get_contents($url);
?>