<?php

// get the posted data
$MovieID = 0; //0 means new thingy
    $MovieTitle= "";
    $MovieReleaseDate ="";
     $DirectorID ="";
      $GenreID ="";
       $RatingID ="";
       $MovieSynopsis ="";
        $MoviePoster ="";
         $MovieTrailer ="";


if(isset($_POST['MovieID']))
    $MovieID = $_POST['MovieID'];

if(isset($_POST['MovieT']))
    $MovieTitle = $_POST['MovieT'];

if(isset($_POST['DirectID']))
    $DirectorID = $_POST['DirectID'];

    if(isset($_POST['GenID']))
    $GenreID = $_POST['GenID'];

    if(isset($_POST['RateID']))
    $RatingID = $_POST['RateID'];

    if(isset($_POST['MSynopsis']))
    $MovieSynopsis = $_POST['MSynopsis'];

    if(isset($_POST['MPoster']))
    $MoviePoster = $_POST['MPoster'];

    if(isset($_POST['MTrailerD']))
    $MovieTrailer = $_POST['MTrailerD'];





// return to list or give error ???
if ($MovieID == 0 && empty($MovieTitle) && empty($MovieReleaseDate) && empty ($DirectorID) && empty ($GenreIDD) && empty ($RatingID) && empty ($MovieSynopsis) && empty ($MoviePoster) && empty ($MovieTrailerD))
{
    $redirect = "location: index.php";
    header($redirect);
    exit();
    
}

// attempt to connect to the DB
$dbconn = mysqli_connect("localhost", "root", "", "moviedatabase");
if ($dbconn->connect_error > 0) {
    die('Could not connect: ' . $dbconn->connect_error);
    exit(); // you should redirect to some form of error page !!!!
}

// lets determine if this is a new movie or existing
if ($MovieID == 0)
{
    // new movie- create the query (prepared statement
    $sql = $dbconn->prepare("INSERT INTO movie (MovieTitle,MovieReleaseDate,DirectorID,GenreID,RatingID,MovieSynopsis,MoviePoster,MovieTrailer) values (?,?,?,?,?,?,?,?)");
    $sql->bind_param('ssssssss', $MovieTitle, $MovieReleaseDate, $DirectorID, $GenreID, $RatingID, $MovieSynopsis, $MoviePoster, $MovieTrailer);	
    // execute the query 
    $sql->execute();    
}
else
{
   // existing movie
    $sql = $dbconn->prepare("update movie 
                                    set MovieTitle = ?, MovieReleaseDate = ?, DirectorID = ?, GenreID = ?, RatingID = ?, MovieSynopsis = ?, MoviePoster = ?, MovieTrailer = ?
                                    where MovieID = ?");
    $sql->bind_param('ssssssssi', $MovieTitle, $MovieReleaseDate, $DirectorID, $GenreID, $RatingID, $MovieSynopsis, $MoviePoster, $MovieTrailer, $MovieID);	
    // execute the query 
    $sql->execute();      
}


// close the DB and connection
$sql->close();
$dbconn->close(); 

header('Location: index.php');
 ?>