<?php
require '../config.php';
require '../functions.php';
checkLogin();

if (!isset($_GET['id'])) die("No car ID provided.");

$stmt = $pdo->prepare("SELECT * FROM cars WHERE id = :id");
$stmt->execute(['id' => $_GET['id']]);
$car = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$car) die("Car not found.");

$manufacturers = $pdo->query("SELECT * FROM manufacturers")->fetchAll(PDO::FETCH_ASSOC);

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $stmt = $pdo->prepare("UPDATE cars SET manufacturer_id=:manufacturer_id, model=:model, year=:year, horsepower=:horsepower, description=:description WHERE id=:id");
    $stmt->execute([
        'manufacturer_id' => $_POST['manufacturer_id'],
        'model' => $_POST['model'],
        'year' => $_POST['year'],
        'horsepower' => $_POST['horsepower'],
        'description' => $_POST['description'],
        'id' => $_GET['id']
    ]);
    header("Location: dashboard.php");
    exit();
}
?>

<!DOCTYPE html>
<html>
<head><title>Edit Car</title></head>
<body>
<h1>Edit Car</h1>
<form method="post">
    Manufacturer:
    <select name="manufacturer_id" required>
        <?php foreach ($manufacturers as $m): ?>
            <option value="<?php echo $m['id']; ?>" <?php if ($m['id']==$car['manufacturer_id']) echo 'selected'; ?>>
                <?php echo e($m['name']); ?>
            </option>
        <?php endforeach; ?>
    </select><br><br>
    Model: <input type="text" name="model" value="<?php echo e($car['model']); ?>" required><br><br>
    Year: <input type="number" name="year" value="<?php echo e($car['year']); ?>" required><br><br>
    Horsepower: <input type="number" name="horsepower" value="<?php echo e($car['horsepower']); ?>"><br><br>
    Description:<br>
    <textarea name="description"><?php echo e($car['description']); ?></textarea><br><br>
    <button type="submit">Update Car</button>
</form>
<a href="dashboard.php">Back to Dashboard</a>
</body>
</html>
