[ Th3_Err0r Bypassed ]

<?php 
ob_start();
session_start();
?>
<?php
if(isset($_SESSION['user_liwwan_admin_2023930']) AND ($_SESSION['type'] == "manager_session_alliwan") ){
    
    $pageTitle  = 'city Controll';
    include 'init.php';
?>
<?php
/* ACTIVE citycalc */
if (($_SERVER['REQUEST_METHOD'] == 'POST') && isset($_POST['activecitycalc'])) {

    $adid   = $_POST["citycalc_id"];
        
    $stmt = $conn->prepare("UPDATE 
                                citycostscalc 
                                SET
                                citcalc_active   = 1
                                WHERE
                                citcalc_id  = $adid
                                ");
    $stmt->execute(array());    

        header('location:citycalc.php');
        exit();
}?>
<?php
/* PEND citycalc */
if (($_SERVER['REQUEST_METHOD'] == 'POST') && isset($_POST['pendcitycalc'])) {

    $adid   = $_POST["citycalc_id"];
        
    $stmt = $conn->prepare("UPDATE 
                                citycostscalc 
                                SET
                                citcalc_active   = 0
                                WHERE
                                citcalc_id  = $adid
                                ");
    $stmt->execute(array());    

        header('location:citycalc.php');
        exit();
}?>
<?php 
// Delete citycalc
if (isset($_POST['delcitycalc'])){
    $id   = $_POST["citycalc_id"];

    $stmt = $conn->prepare("DELETE FROM  citycostscalc WHERE citcalc_id  = :zid");
    
    $stmt->bindparam(":zid", $id);
    
    $stmt->execute();
        
    
    header('location:citycalc.php');
    exit();
    }
?>
<?php
if (($_SERVER['REQUEST_METHOD'] == 'POST') && isset($_POST['do_addcitycalc'])) {

    $cityname      = filter_var($_POST['city_name'], FILTER_SANITIZE_STRING);
    $cityarname    = filter_var($_POST['city_arname'], FILTER_SANITIZE_STRING);
    $cityordnum    = filter_var($_POST['city_ordnum'], FILTER_SANITIZE_NUMBER_INT);
    $cityacctype   = filter_var($_POST['city_acctype'], FILTER_SANITIZE_NUMBER_INT);
    $plusnumber    = filter_var($_POST['city_plusnumber'], FILTER_SANITIZE_STRING);

    $formErrors = array();
  
                if (empty($cityname)){

                    $formErrors[] = ' city name amount Cant Be <strong>Empty</strong> ';
                }
                //loop into errors array and echo it
                foreach($formErrors as $error){

                    echo '<div class= "alert alert-danger text-center">' .  $error .  '</div>' ;
                }
                if (empty($formErrors)){

                  $stmt = $conn->prepare("INSERT INTO
                  citycostscalc(citcalc_name, citcalc_arname, citcalc_ordernum, citcalc_type, citcalc_plusnumber, citcalc_active)
                  VALUES (:zname, :zarname, :zordnum,:ztype,:zplusnum, 1 ) ");
  
               $stmt->execute(array(
                   'zname'          => $cityname,
                   'zarname'        => $cityarname,
                   'zordnum'        => $cityordnum,
                   'ztype'          => $cityacctype,
                   'zplusnum'       => $plusnumber
      
               )); 
               
               header('location:citycalc.php');
               exit();
          } else{
            $msg=urlencode("البيانات المدخلة تحتوي على مشكلة" . "، أعد المحاولة");
            header('location:ac_workshops.php?Message='. $msg);

         exit();
          }
}
?>
<?php
// EDIT CITY Calc
if (($_SERVER['REQUEST_METHOD'] == 'POST') && isset($_POST['do_editcitycalc'])) {
         
    $cityid        = $_POST['city_idis'];
    $cityname      = filter_var($_POST['city_name'], FILTER_SANITIZE_STRING);
    $cityarname    = filter_var($_POST['city_arname'], FILTER_SANITIZE_STRING);
    $cityordnum    = filter_var($_POST['city_ordnum'], FILTER_SANITIZE_NUMBER_INT);
    $cityacctype   = filter_var($_POST['city_acctype'], FILTER_SANITIZE_NUMBER_INT);
    $plusnumber    = filter_var($_POST['city_plusnumber'], FILTER_SANITIZE_STRING);

    $formErrors = array();
  
                if (empty($cityname)){

                    $formErrors[] = ' city name name Cant Be <strong>Empty</strong> ';
                }
                //loop into errors array and echo it
                foreach($formErrors as $error){

                    echo '<div class= "alert alert-danger text-center">' .  $error .  '</div>' ;
                }
                if (empty($formErrors)){

               $editwsh = $conn->prepare("UPDATE 
                             citycostscalc 
                             SET
                             citcalc_name        =?,
                             citcalc_arname      =?,
                             citcalc_ordernum    =?,
                             citcalc_type        =?,
                             citcalc_plusnumber  =?

                             WHERE
                             citcalc_id   = $cityid ");
                $editwsh->execute(array($cityname ,$cityarname,$cityordnum,$cityacctype,$plusnumber));     
                    
                    header('location:citycalc.php');
                    exit();

          } else{
            $msg=urlencode("البيانات المدخلة تحتوي على مشكلة" . "، أعد المحاولة");
            header('location:ac_workshops.php?Message='. $msg);

         exit();
          }
}
?>
<?php 
if(isset($_POST['addcitycalc'])){
?>
<section class="add_my">
    <form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="POST" class="form mt-5">
        <p class="text-center h3 fw-bold text-center m-auto add_my_p"> إضافة مدينة جديدة </p>
        <div class="row">
            <div class="input-group">
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="text" class="w-100 fw-bold py-2" name="city_name" id="city_name" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> إسم المدينة باللغة الإنكليزية <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="text" class="w-100 fw-bold py-2"  name="city_arname" id="city_arname" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> إسم المدينة باللغة العربية <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="text" class="w-100 fw-bold py-2" name="city_ordnum" id="city_ordnum" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> ترتيب الظهور (رقم للترتيب وفقه) <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <hr>
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="double" class="w-100 fw-bold py-2" name="city_plusnumber" id="city_plusnumber" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> المبلغ الإضافي للمدينة <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <hr>
                <div class="col-12">
                    <div class="type mt-4 w-50 m-auto">
                        <label for="type" class="text-muted fw-bold text-center"> نوع العملية الحسابية <span class="text-danger fs-5">◈</span></label>
                        <select class="form-select" aria-label="Default select example bg-white" name="city_acctype" required="required">
                        <option selected disabled class="fw-bold text-primary"> إختر نوع العملية الحسابية </option>
                        <option value="1"> جمع الرقم للناتج الإجمالي </option>
                        <option value="2"> ضرب الناتج الإجمالي بالرقم (زيادة نسبة مئوية) </option>
                        </select>
                    </div>
                </div>
            </div>          
            <hr>
            <div class="col-8"></div>
            <div class="col-4">
            <button class="btn btn-primary px-4" name="do_addcitycalc" type="submit"> تأكيد </button>
            </div>
        </div>
    </form>
</section>
<?php }?>

<?php 
if(isset($_POST['editcitycalc'])){
$cityid  =   $_POST['citcalc_id'];
?>
<?php 
// select All Data Depend on this ID
$stmacc = $conn->prepare("SELECT * FROM citycostscalc WHERE citcalc_id  = $cityid");
// execute Query
$stmacc->execute();
// fetch the data
$cityinfo = $stmacc->fetch();
?>
<section class="add_my">
    <form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="POST" class="form mt-5">
        <p class="text-center h3 fw-bold text-center m-auto add_my_p"> تعديل مدينة </p>
        <div class="row">
            <div class="input-group">
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="text" value="<?php echo $cityinfo['citcalc_id']; ?>" name="city_idis">
                                <input type="text" value="<?php echo $cityinfo['citcalc_name']; ?>" class="w-100 fw-bold py-2" name="city_name" id="city_name" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> إسم المدينة باللغة الإنكليزية <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="text" value="<?php echo $cityinfo['citcalc_arname']; ?>" class="w-100 fw-bold py-2"  name="city_arname" id="city_arname" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> إسم المدينة باللغة العربية <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="text" value="<?php echo $cityinfo['citcalc_ordernum']; ?>" class="w-100 fw-bold py-2" name="city_ordnum" id="city_ordnum" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> ترتيب الظهور (رقم للترتيب وفقه) <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <hr>
                <div class="col-12">
                    <div class="w-100">
                        <hr class="my-3">
                        <div class="input-group">
                            <div class="col-6">
                                <input type="double" value="<?php echo $cityinfo['citcalc_plusnumber']; ?>" class="w-100 fw-bold py-2" name="city_plusnumber" id="city_plusnumber" />
                            </div>
                            <di class="col-6">
                                <label for="subject_name" class="text-muted fw-bold text-center"> المبلغ الإضافي للمدينة <span class="text-danger fs-5">◈</span></label>
                            </di>
                            </div>
                        </div>
                    </div>
                </div>
                <hr>
                <div class="col-12">
                    <div class="type mt-4 w-50 m-auto">
                        <label for="type" class="text-muted fw-bold text-center"> نوع العملية الحسابية <span class="text-danger fs-5">◈</span></label>
                        <select class="form-select" aria-label="Default select example bg-white" name="city_acctype" required="required">
                        <option value="1" <?php if($cityinfo['citcalc_type'] == 1){echo "selected";} ?> > جمع الرقم للناتج الإجمالي </option>
                        <option value="2" <?php if($cityinfo['citcalc_type'] == 2){echo "selected";} ?> > ضرب الناتج الإجمالي بالرقم (زيادة نسبة مئوية) </option>
                        </select>
                    </div>
                </div>
            </div>          
            <hr>
            <div class="col-8"></div>
            <div class="col-4">
            <button class="btn btn-primary px-4" name="do_editcitycalc" type="submit"> تأكيد </button>
            </div>
        </div>
    </form>
</section>
<?php }?>



<?php
ob_end_flush();
include 'assets/includes/template/footer.php';
?>
<?php
}else{
header('Location:index.php');
exit;
}
?>