<?php
require_once "database.php";

if (isset($_POST['update'])) {
    foreach ($_POST as $k => $v) {
        $$k = htmlspecialchars(stripslashes(trim($v)));
    }
//print_r($_POST);exit;
    $updater = substr($_COOKIE["token"], 0, strpos($_COOKIE["token"],"."));
    $price_total = str_replace(",", "", $price_total);
    $price_lowest = str_replace(",", "", $price_lowest);

    $db_query  = "update pricereview_main set contractno = '$contractno', person = '$person', company = '$company', case_name = '$case_name', ";
    $db_query .= "address = '$address', compete = '$compete', price_lowest = '$price_lowest', price_total = '$price_total', ";
    $db_query .= "inquire_no = '$inquire_no', predeal_date = '$predeal_date', facilitok_date = '$facilitok_date', penalty = '$penalty', ";
    $db_query .= "deposit_rate = '$deposit_rate', keep_rate = '$keep_rate', warranty_rate = '$warranty_rate', memo = '$memo', ";
    $db_query .= "updater = '$updater', update_dt = NOW() ";
    $db_query .= "where id = '$id'";
    if ($rs = mysqli_query($link, $db_query)) {
        $fp_id_arr = explode(",", $fp_id_all);
        $item_spec_arr = explode(",", $item_spec_all);
        $item_group_arr = explode(",", $item_group_all);
        $item_qty_arr = explode(",", $item_qty_all);
        $item_price_bp_arr = explode(",", $item_price_bp_all);
        $item_price_arr = explode(",", $item_price_all);
        $pv_rate_arr = explode(",", $pv_rate_all);
        $note_arr = explode(",", $note_all);
        $item_id_arr = explode(",", $item_id_all);
        for ($i=0; $i<count($item_id_arr); $i++) {
            $item_qty_arr[$i] = str_replace(",", "", $item_qty_arr[$i]);
            $item_price_bp_arr[$i] = str_replace(",", "", $item_price_bp_arr[$i]);
            $item_price_arr[$i] = str_replace(",", "", $item_price_arr[$i]);
            if ($item_group_arr[$i] == "B") $b_item_no = $item_id_arr[$i];  // 記下option項次
            if ($item_id_arr[$i] != "-") {
                $db_query  = "update pricereview_item set fp_id = '$fp_id_arr[$i]', item_spec = '$item_spec_arr[$i]', ";
                $db_query .= "item_qty = '$item_qty_arr[$i]', item_price_bp = '$item_price_bp_arr[$i]', item_price = '$item_price_arr[$i]', ";
                $db_query .= "pv_rate = '$pv_rate_arr[$i]', note = '$note_arr[$i]' ";
                $db_query .= "where mid = '$id' and item_no = '$item_id_arr[$i]' and item_group = '$item_group_arr[$i]'";
                $result = mysqli_query($link, $db_query);
            } else {
                $db_query = "select max(item_no) from pricereview_item where mid = '$id' and item_group = 'A'";
                $result = mysqli_query($link, $db_query);
                $row = mysqli_fetch_row($result);
                $new_item_no = $row[0]+1;
                $db_query  = "insert into pricereview_item (mid, fp_id, item_no, item_spec, item_group, item_qty, item_price_bp, ";
                $db_query .= "item_price, pv_rate, note) values (";
                $db_query .= "'$id', '$fp_id_arr[$i]', '$new_item_no', '$item_spec_arr[$i]', '$item_group_arr[$i]', '$item_qty_arr[$i]', '$item_price_bp_arr[$i]', ";
                $db_query .= "'$item_price_arr[$i]', '$pv_rate_arr[$i]', '$note_arr[$i]')";
                $result = mysqli_query($link, $db_query);
            }
        }
        if ($b_item_no) {
            $db_query = "update pricereview_item set item_no = ($new_item_no+1) where mid = '$id' and item_no = '$b_item_no' and item_group ='B'";
            $result = mysqli_query($link, $db_query);
        }
    }
    mysqli_close($link);
    header("Location: pricereview-index.php");
}
?>