<?php # Script banking customers
// This script retrieves all the records from the customers table.
include (CHAPTER_PATH.'/'.$chapter.'/'.$path.'/includes/header.php');

// connect to db
require(CONNECT);

// check if form has been submitted
if($_SERVER['REQUEST_METHOD'] == 'POST') {

	// create error array 
	$errors = array();

	// check each field for validity, assign error message if fails
	// first_name
	if (empty($_POST['first_name'])) {
		$errors['fn'] = 'Enter customer\'s first name.';
	} else {
		$fn = mysqli_real_escape_string($link,trim($_POST['first_name']));
	}

	// last_name
	if (empty($_POST['last_name'])) {
		$errors['ln'] = 'Enter customer\'s last name.';
	} else {
		$ln = mysqli_real_escape_string($link,trim($_POST['last_name']));
	}

	// prevent customer with duplicate first & last names
	if( isset($fn) && isset($ln) ) {
		$q = "SELECT customer_id FROM customers WHERE first_name='$fn' AND last_name='$ln'";
		if ($r = @mysqli_query($link, $q)) {
			if(mysqli_num_rows($r) != 0) {
				$errors['ln'] = 'Sorry, a customer with that first and last name already exists. Please enter a different name.';
			}
			// free result set 
			mysqli_free_result($r);
		}	
	}

	if(empty($errors)) { // if no errors
		// build transaction query
		$transaction = array(
			"START TRANSACTION",
			"INSERT INTO customers (first_name,last_name) VALUES ('$fn','$ln')"
		);
		// if(!empty($t) && !empty($b)) {
		// 	$transaction[] = "INSERT INTO accounts (customer_id,type,balance) VALUES (LAST_INSERT_ID(),'$t',$b)";
		// }
		$transaction[] ="COMMIT";
		// var_dump($transaction);

		// submit data
		$count = 0;
		foreach ($transaction as $q) {
			$r = mysqli_query($link,$q);
			$count += mysqli_affected_rows($link);
		}
		if($count>0) {
			if($count == 1) {
				// data successfully inserted
				$message = "<h2>Thank you!</h2><p>Your customer profile has been completed!<br />Would you like to <a href='index.php?path=pursue&amp;chapter=9&amp;script=accounts'>add an account</a> for this customer?</p>";
			} else {
				// error - data not inserted
				$message = "<h2>System Error</h2><p class='error'>Your information could not be added to our database.<br />We apologize for any inconvenience, please <a href='javascript:history.back()'>try again</a>.</p>";
				$message .= '<p><span class="content-caption">Debugging information</span>Error message: <br />'.mysqli_error($link).'<br /><br />Query: <br />'. $q .'</p>';
			}
		} else {
			//query unsuccessful
			$message = '<h2>Error</h2><p class="error-message error">There was an error accessing the database. Please try again later.</p>';	
		}
		
		// provide feedback from submission
		echo '<div id="content" class="message">'.$message.'</div>';

		// include footer
		// include (CHAPTER_PATH.'/'.$chapter.'/'.$path.'/includes/footer.php');
		
		// exit script - do not redisplay form
		//exit(); 

	} else {
		$errors['flag'] = "<div class='error-message error'><h2>Error</h2><p>Customer creation is not complete.<br />Please double check your information and resubmit after correcting the highlighted errors.</p></div>";
	}
}
// begin form output. if submitted with errors - include original submission values with error messages
echo "<div id='content'>";
?>
<h1>Current Customers</h1>
<?php 
//get all current customers
$q= "SELECT CONCAT_WS(', ', last_name, first_name) AS Customer FROM customers ORDER BY last_name ASC";
if($r = mysqli_query($link, $q)) {
	$num = mysqli_num_rows($r);
	echo "There are currently $num customers.";
	results_to_table($r);
} 
?>
<h1>Add New Customer</h1>
<?php echo (isset($errors['flag']))? $errors['flag'] : ''; ?>
<form action="" method="post">
	<p>
		<label for='fn'>First Name: </label>
		<input type="text" id='fn' name="first_name" size="15" maxlength="20" value="<?php if (isset($_POST['first_name'])) echo $_POST['first_name']; ?>" />
		<?php echo (isset($errors['fn']))?'<span class="error">'.$errors['fn'].'</span>' : ''; ?>
	</p>
	<p>
		<label for='ln'>Last Name: </label>
		<input type="text" id='ln' name="last_name" size="15" maxlength="40" value="<?php if (isset($_POST['last_name'])) echo $_POST['last_name']; ?>" />
		<?php echo (isset($errors['ln']))?'<span class="error">'.$errors['ln'].'</span>' : ''; ?>
	</p>
	<p>
		<input type="submit" name="submit" value="Add Customer" />
	</p>
</form>
<?php
echo "</div>";

//disconnect from db
require(DISCONNECT);

include (CHAPTER_PATH.'/'.$chapter.'/'.$path.'/includes/footer.php');
?>