<?php
	require_once ("check_login.php");

	//checking data
	$message = "";

	if (empty($_POST["code"])) {
		$message .= "請輸入產品編號。\\n\\n";
	}

	foreach ($arraylangcode as $langcode => $langname) {
		if (empty($_POST["name_".$langcode])) {
			$message .= "請輸入產品名稱[".$langname."]。\\n\\n";
		}
	}


	if (empty($_POST["price"])) {
		$message .= "請輸入價格。\\n\\n";
	} else {
		if (!is_numeric($_POST["price"]) || $_POST["price"] < 0) {
			$message .= "價格應是正數數字。\\n\\n";
		}
	}

	if (!empty($message)) {
		//echo "<script>alert('" . $message . "'); history.back();</script>";
		echo "<script>alert('" . $message . "');</script>";
		exit;
	}

	if(isset($_POST["show_frontend"]) && $_POST["show_frontend"] == 1){
		$show_frontend = 1;
	}else{
		$show_frontend = 0;
	}

	/*$sql = "select max(sort) as maxsort from product";
	$row  = bind_pdo($sql, NULL, "selectone");
	$sort = $row{"maxsort"} + 1;*/

	//update all product sort
	$sql        = "update product set sort = sort + 1 where deleted = ?";
	$parameters = array("0");
	bind_pdo($sql, $parameters);

	$sql        = "insert into product set show_frontend=?, price=?, code=?, sort=?, createdate=?, createby=?, lastupdate=?, lastupby=?, ";
	$parameters = array($show_frontend, $_POST["price"], $_POST["code"], 1, $nowdate, $_SESSION['cmsloginid'], $nowdate, $_SESSION['cmsloginid']);

	foreach ($arraylangcode as $langcode => $langname) {
		$sql .= "name_" . $langcode . "=?, desc_" . $langcode . "=?, ";
		$parameters[] = $_POST["name_" . $langcode];
		$parameters[] = $_POST["desc_" . $langcode];
	}

	$sql = substr_replace($sql, "", -2);
	bind_pdo($sql, $parameters);

	$id = $dbh->lastInsertId();

	header("Location: product_image_addform.php?productid=$id");