<?php
include 'db.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $customer_id = intval($_POST['customer_id']);
    $quantities = $_POST['quantity'] ?? [];
    $items = $_POST['item_name'] ?? [];
    $prices = $_POST['price'] ?? [];
    $taxable_flags = $_POST['taxable'] ?? [];
    $notes = $_POST['notes'] ?? [];

    $stmt = $conn->prepare("INSERT INTO transactions (customer_id, item_name, price, quantity, taxable, notes, date) VALUES (?, ?, ?, ?, ?, ?, CURDATE())");

    for ($i = 0; $i < count($items); $i++) {
        $item_name = trim($items[$i]);
        if ($item_name === '') continue;

        $quantity = intval($quantities[$i] ?? 1);
        $price = floatval($prices[$i] ?? 0);
        $taxable = isset($taxable_flags[$i]) ? 1 : 0;
        $note = trim($notes[$i] ?? '');

        $stmt->bind_param("isdiis", $customer_id, $item_name, $price, $quantity, $taxable, $note);
        $stmt->execute();
    }

    header("Location: view_account.php?customer_id=" . $customer_id);
    exit;
}

echo "Invalid request.";
?>