<?php

// get the posted data
$charmid = "";
$crystalid = "";
$colourid = "";
$designid = "";
$jewelleryid = "";
$price = "";
$description = "";
$productname = "";
$productid = 0;

// check for product data
if(isset($_POST['productid']))
    $productid = $_POST['productid'];
if(isset($_POST['productname']))
    $productname = $_POST['productname'];
if(isset($_POST['description']))
    $description = $_POST['description'];
if(isset($_POST['price']))
    $price = $_POST['price'];
if(isset($_POST['jewelleryid']))
    $jewelleryid = $_POST['jewelleryid'];
if(isset($_POST['designid']))
    $designid = $_POST['designid'];
if(isset($_POST['colourid']))
    $colourid = $_POST['colourid'];
if(isset($_POST['crystalname']))
    $crystalname = $_POST['crystalname'];
if(isset($_POST['charmid']))
    $charmid = $_POST['charmid'];

// check and see if this is a new product with no description - if so return to list
if ($productid == 0 && empty($productname) && empty($description) && empty($price) && empty($jewelleryid) && empty($designid) && empty($colourid) && empty($crystalid) && empty($charmid))
{
    $redirect = "location: index.php";
    header($redirect);
    exit();    
}

// attempt to connect to the DB
$dbconn = mysqli_connect("localhost", "root", "", "PannotinaCoDB");
if ($dbconn->connect_error > 0) {
    die('Could not connect: ' . $dbconn->connect_error);
    exit();
}

// lets determine if this is a new product or existing
if ($productid == 0)
{
    // new product - create the query (prepared statement)
    $sql = $dbconn->prepare("INSERT INTO product (productname, description, price, jewelleryid, designid, colourid, crystalid, charmid) values (?, ?, ?, ?, ?, ?, ?, ?)");
    $sql->bind_param('ss', $productname, $description, $price, $jewelleryid, $designid, $colourid, $crystalid, $charmid);	
    // execute the query 
    $sql->execute();    
}
else
{
   // existing product
    $sql = $dbconn->prepare("update product
                                    set productname = ?,
										description = ?,
										price = ?,
										jewelleryid = ?,
										designid = ?,
										colourid = ?,
										crystalid = ?,
										charmid = ?
                                    where productid = ?");
    $sql->bind_param('ssi', $productname, $description, $price, $jewelleryid, $designid, $colourid, $crystalid, $charmid);	
    // execute the query 
    $sql->execute();      
}


// close the DB and connection
$sql->close();
$dbconn->close(); 

header('Location: index.php');
?>