Review adder made limit 1 review per user

productpage.php

@@ -400,8 +400,79 @@ $productId = isset($_GET['id']) ? (int)$_GET['id'] : 0;
             }
             ?>
 
+            <div class="review-add">
+                <h2 class="reviews-title">Füge deine Bewertung hinzu!</h2>
+
+                <?php
+                $userHasReviewed = false;
+
+                // 1. Prüfen, ob der eingeloggte Nutzer schon bewertet hat
+                if (isset($_SESSION['user_id'])) {
+                    $stmtCheckRev = mysqli_prepare($conn, "SELECT 1 FROM reviews WHERE userID = ? AND productID = ? LIMIT 1");
+                    mysqli_stmt_bind_param($stmtCheckRev, "ii", $_SESSION['user_id'], $productId);
+                    mysqli_stmt_execute($stmtCheckRev);
+                    mysqli_stmt_store_result($stmtCheckRev);
+
+                    if (mysqli_stmt_num_rows($stmtCheckRev) > 0) {
+                        $userHasReviewed = true;
+                    }
+                    mysqli_stmt_close($stmtCheckRev);
+                }
+
+                // 2. Bewertung speichern (NUR wenn noch keine existiert!)
+                if (
+                        $_SERVER['REQUEST_METHOD'] === 'POST' &&
+                        isset($_POST['submit_review']) &&
+                        isset($_SESSION['user_id']) &&
+                        !$userHasReviewed
+                ) {
+                    $rating = (int)$_POST['rating'];
+                    $comment = trim($_POST['comment']);
+                    $userID = $_SESSION['user_id'];
+
+                    if ($rating >= 1 && $rating <= 5 && !empty($comment)) {
+
+                        $stmtInsertRev = mysqli_prepare(
+                                $conn,
+                                "INSERT INTO reviews (userID, productID, rating, comment) VALUES (?, ?, ?, ?)"
+                        );
+
+                        if ($stmtInsertRev) {
+                            mysqli_stmt_bind_param(
+                                    $stmtInsertRev,
+                                    "iiis",
+                                    $userID,
+                                    $productId,
+                                    $rating,
+                                    $comment
+                            );
+
+                            mysqli_stmt_execute($stmtInsertRev);
+                            mysqli_stmt_close($stmtInsertRev);
+
+                            // JS Weiterleitung
+                            echo "<script>window.location.href = 'productpage.php?id=" . $productId . "';</script>";
+                            exit;
+                        }
+                    }
+                }
+                ?>
+
                 <div class="review-card">
-                <?php if (isset($_SESSION['user_id'])): ?>
+                    <?php if (!isset($_SESSION['user_id'])): ?>
+                        <div class="review-login-prompt">
+                            <p class="review-login-msg">Du musst eingeloggt sein, um eine Bewertung abzugeben.</p>
+                            <a href="login.php">
+                                <input class="auth__submit" type="button" value="Zum Einloggen">
+                            </a>
+                        </div>
+
+                    <?php elseif ($userHasReviewed): ?>
+                        <div class="review-login-prompt">
+                            <p class="review-login-msg">Du hast dieses Produkt bereits bewertet. Vielen Dank!</p>
+                        </div>
+
+                    <?php else: ?>
                         <form class="review-input-form" method="post" autocomplete="off">
                             <input type="hidden" name="submit_review" value="1">
 
@@ -427,13 +498,6 @@ $productId = isset($_GET['id']) ? (int)$_GET['id'] : 0;
 
                             <input class="auth__submit" type="submit" value="Senden">
                         </form>
-                <?php else: ?>
-                    <div class="review-login-prompt">
-                        <p class="review-login-msg">Du musst eingeloggt sein, um eine Bewertung abzugeben.</p>
-                        <a href="login.php">
-                            <input class="auth__submit" type="button" value="Zum Einloggen">
-                        </a>
-                    </div>
                     <?php endif; ?>
                 </div>
             </div>