<?php include 'protect.php'; ?>
<?php
include 'db.php';

$customer_id = isset($_POST['customer_id']) ? intval($_POST['customer_id']) : 0;
$quantities = $_POST['quantity'] ?? [];
$items = $_POST['item_name'] ?? [];
$prices = $_POST['price'] ?? [];
$taxable_flags = $_POST['taxable'] ?? []; // associative: [index => 'on']
$notes = $_POST['notes'] ?? [];

if ($customer_id > 0 && !empty($items)) {
    for ($i = 0; $i < count($items); $i++) {
        $item = trim($items[$i]);
        $quantity = isset($quantities[$i]) ? floatval($quantities[$i]) : 1;
        $price = isset($prices[$i]) ? floatval($prices[$i]) : 0;
        $taxable = array_key_exists($i, $taxable_flags) ? 1 : 0; // ensure mapping
        $note = trim($notes[$i]);

        if ($item !== '' && $quantity > 0) {
            $stmt = $conn->prepare("INSERT INTO transactions (customer_id, item_name, quantity, price, taxable, notes, date) VALUES (?, ?, ?, ?, ?, ?, NOW())");
            $stmt->bind_param("isddis", $customer_id, $item, $quantity, $price, $taxable, $note);
            $stmt->execute();
        }
    }
}

header("Location: view_account.php?customer_id=" . $customer_id);
exit;
?>