<?php
	require_once ("check_login.php");

	//checking data
	$message = "";

	if (empty($_POST["code"])) {
		$message .= "請輸入產品編號。\\n\\n";
	}

	foreach ($arraylangcode as $langcode => $langname) {
		if (empty($_POST["name_".$langcode])) {
			$message .= "請輸入產品名稱[".$langname."]。\\n\\n";
		}
	}


	if (empty($_POST["price"])) {
		$message .= "請輸入價格。\\n\\n";
	} else {
		if (!is_numeric($_POST["price"]) || $_POST["price"] < 0) {
			$message .= "價格應是正數數字。\\n\\n";
		}
	}

	if (!empty($message)) {
		//echo "<script>alert('" . $message . "'); history.back();</script>";
		echo "<script>alert('" . $message . "');</script>";
		exit;
	}

	if(isset($_POST["show_frontend"]) && $_POST["show_frontend"] == 1){
		$show_frontend = 1;
	}else{
		$show_frontend = 0;
	}

	$sql        = "update product set show_frontend=?, price=?, code=?, lastupdate=?, lastupby=?, ";
	$parameters = array($show_frontend, $_POST["price"], $_POST["code"], $nowdate, $_SESSION['cmsloginid']);

	foreach ($arraylangcode as $langcode => $langname) {
		$sql .= "name_" . $langcode . "=?, desc_" . $langcode . "=?, ";
		$parameters[] = $_POST["name_" . $langcode];
		$parameters[] = $_POST["desc_" . $langcode];
	}
	$sql = substr_replace($sql, "", -2);

	$sql .= "where id = ?";
	$parameters[] = $_POST["id"];

	bind_pdo($sql, $parameters);

	header("Location: product_detail_index.php");