Geizkragen/productAdder.php

<?php
// product_add.php

ini_set('display_errors', 1);
error_reporting(E_ALL);

session_start();

/* =======================
   1) Kategorie aus GET
   ======================= */
$categoryID = 0;
if (isset($_GET['categoryID']) && ctype_digit($_GET['categoryID'])) {
    $categoryID = (int)$_GET['categoryID'];
}

/* =======================
   2) DB-Verbindung
   ======================= */
$conn = new mysqli("localhost", "FSST", "L9wUNZZ9Qkbt", "FSST", 3306);
if ($conn->connect_error) {
    die("Datenbankfehler");
}

/* =======================
   3) Kategorien laden
   ======================= */
$categories = [];
$result = $conn->query("
    SELECT categoryID, name
    FROM categories
    ORDER BY name
");
while ($row = $result->fetch_assoc()) {
    $categories[] = $row;
}

/* =======================
   4) Attribute zur Kategorie
   ======================= */
$attributes = [];
if ($categoryID > 0) {
    $stmt = $conn->prepare("
        SELECT a.attributeID, a.name, a.unit, a.dataType
        FROM categoryAttributes ca
        JOIN attributes a ON a.attributeID = ca.attributeID
        WHERE ca.categoryID = ?
        ORDER BY a.name
    ");
    $stmt->bind_param("i", $categoryID);
    $stmt->execute();
    $res = $stmt->get_result();
    while ($row = $res->fetch_assoc()) {
        $attributes[] = $row;
    }
}

/* =======================
   5) Produkt speichern
   ======================= */
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['saveProduct'])) {

    $model       = trim($_POST['model']);
    $description = $_POST['description'] ?? null;
    $categoryID  = (int)$_POST['categoryID'];

    // --- Produkt anlegen ---
    $stmt = $conn->prepare("
        INSERT INTO products (categoryID, model, description)
        VALUES (?, ?, ?)
    ");
    $stmt->bind_param("iss", $categoryID, $model, $description);
    $stmt->execute();

    $productID = $stmt->insert_id;

    // --- Attribute speichern ---
    if (!empty($_POST['attributes'])) {

        $stmtAttr = $conn->prepare("
            INSERT INTO productAttributes
            (productID, attributeID, valueString, valueNumber, valueBool)
            VALUES (?, ?, ?, ?, ?)
        ");

        foreach ($_POST['attributes'] as $attributeID => $value) {

            if ($value === '' || $value === null) {
                continue;
            }

            $valueString = null;
            $valueNumber = null;
            $valueBool   = null;

            if (is_numeric($value)) {
                $valueNumber = $value;
            } elseif ($value === '0' || $value === '1') {
                $valueBool = (int)$value;
            } else {
                $valueString = trim($value);
            }

            $stmtAttr->bind_param(
                "iisdi",
                $productID,
                $attributeID,
                $valueString,
                $valueNumber,
                $valueBool
            );
            $stmtAttr->execute();
        }
    }

    header("Location: product_add.php?categoryID=" . $categoryID);
    exit;
}

include 'header.php';
?>

<link rel="stylesheet" href="assets/css/login.css">
<link rel="stylesheet" href="assets/css/productAdder.css">

<main class="auth">
    <section class="auth__grid">

        <!-- Kategorie waehlen -->
        <div class="auth__card">
            <header class="auth__header">
                <h2 class="auth__title">Kategorie waehlen</h2>
            </header>
            <form method="get" class="auth__form">
                <div class="auth__select__wrap">
                    <label class="auth__select__label" for="categoryID">Kategorie</label>
                    <select id="categoryID" name="categoryID" class="auth__select" onchange="this.form.submit()" required>
                        <option value="">Kategorie waehlen</option>
                        <?php foreach ($categories as $cat): ?>
                            <option value="<?= $cat['categoryID'] ?>"
                                <?= $cat['categoryID'] === $categoryID ? 'selected' : '' ?>>
                                <?= htmlspecialchars($cat['name']) ?>
                            </option>
                        <?php endforeach; ?>
                    </select>
                </div>
            </form>
        </div>

        <!-- Produkt anlegen -->
        <?php if ($categoryID > 0): ?>
            <div class="auth__card">
                <header class="auth__header">
                    <h2 class="auth__title">Produkt hinzufuegen</h2>
                </header>

                <form method="post" class="auth__form">
                    <input type="hidden" name="categoryID" value="<?= $categoryID ?>">

                    <label for="model">Modell</label>
                    <input id="model" type="text" name="model" class="auth__input" required>

                    <label for="description">Beschreibung</label>
                    <textarea id="description" name="description" class="auth__input"></textarea>

                    <h3 class="auth__title">Attribute</h3>

                    <?php foreach ($attributes as $attr): ?>
                        <label>
                            <?= htmlspecialchars($attr['name']) ?>
                            <?php if ($attr['unit']): ?>
                                (<?= htmlspecialchars($attr['unit']) ?>)
                            <?php endif; ?>
                        </label>

                        <input
                            type="<?= $attr['dataType'] === 'number' ? 'number' : 'text' ?>"
                            name="attributes[<?= $attr['attributeID'] ?>]"
                            class="auth__input"
                        >
                    <?php endforeach; ?>

                    <button type="submit" name="saveProduct" class="auth__input">
                        Produkt speichern
                    </button>
                </form>
            </div>
        <?php endif; ?>

    </section>
</main>

<?php
$conn->close();
include 'footer.php';
?>