FSCash/html/new_entry.php

<?php
require 'config.php';
if (!isset($_SESSION['user_id'])) {
    header('Location: index.php');
    exit;
}
?>
<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=0.8">
<title>FSCash - Neuer Eintrag</title>
<link rel="stylesheet" href="assets/css/style.css">
</head>
<body>
<?php
$data_saved = "nix";
$loggedInUserId = "nix";
$debug = "";
$users = [];
$categories = [];
$pay_methods = [];

// save-Logik
if (!empty($_POST)) {
    echo "<p class=\"debug_hidden\">Empfangene POST-Daten:</p>";
    echo "<ul class=\"debug_hidden\">";
    foreach ($_POST as $key => $value) {
        if (is_array($value)) {
            $escapedValues = array_map(function($v) {
                return htmlspecialchars($v, ENT_QUOTES, 'UTF-8');
            }, $value);
            echo "<li><strong>$key:</strong> " . implode(', ', $escapedValues) . "</li>";
        } else {
            $escapedValue = htmlspecialchars($value, ENT_QUOTES, 'UTF-8');
            echo "<li><strong>$key:</strong> $escapedValue</li>";
        }
    }
    echo "</ul>";

    $date = isset($_POST['date']) ? trim($_POST['date']) : '';
    $user_id = isset($_POST['user_id']) ? trim($_POST['user_id']) : '';
    $person = isset($_POST['person']) ? $_POST['person'] : '';
    $category = isset($_POST['category']) ? trim($_POST['category']) : '';
    $subject = isset($_POST['subject']) ? trim($_POST['subject']) : '';
    $note = isset($_POST['note']) ? trim($_POST['note']) : '';
    $amount = isset($_POST['amount']) ? (float)$_POST['amount'] : 0.0;
    $payment_method = isset($_POST['payment_method']) ? trim($_POST['payment_method']) : '';
    $jsonPersonen = json_encode($person);

    try {
        $stmt = $pdo->prepare("
        INSERT INTO entries (date, user_id, person, category, subject, amount, payment_method, note)
        VALUES (:date, :user_id, :person, :category, :subject, :amount, :payment_method, :note)
        ");
        $stmt->bindParam(':date', $date);
        $stmt->bindParam(':user_id', $user_id);
        $stmt->bindParam(':person', $jsonPersonen);
        $stmt->bindParam(':category', $category);
        $stmt->bindParam(':subject', $subject);
        $stmt->bindParam(':amount', $amount);
        $stmt->bindParam(':payment_method', $payment_method);
        $stmt->bindParam(':note', $note);

        ob_start();
        $stmt->debugDumpParams();
        $output = ob_get_clean();
        echo "<p class=\"debug_hidden\">SQL: " . $output . "</p>";

        $stmt->execute();
        $data_saved = "true";
    } catch (PDOException $e) {
        $data_saved = "Fehler: ";
    }
    echo "<p class=\"debug_hidden\">SQL: " . $data_saved . "</p>";
}

try {
    // Alle Benutzer aus der Tabelle 'users' laden
    $stmtUsers = $pdo->prepare("SELECT * FROM users order by id;");
    $stmtUsers->execute();
    $users = $stmtUsers->fetchAll(PDO::FETCH_ASSOC);

    foreach ($users as $user) {
        if ($user['id'] == $_SESSION['user_id']) {
            $loggedInUserId = $user['id'];
            break;
        }
    }

    // Alle Kategorien aus der Tabelle 'categories' laden
    $stmtCategories = $pdo->prepare("select * from categories order by category_id;");
    $debug = $stmtCategories->queryString;
    $stmtCategories->execute();
    $categories = $stmtCategories->fetchAll(PDO::FETCH_ASSOC);

    // Alle Zahlweisen aus der Tabelle 'pay_method' laden
    $stmtPayMethods = $pdo->prepare("SELECT payment_method_id, name FROM payment_methods ORDER BY name;");
    $stmtPayMethods->execute();
    $pay_methods = $stmtPayMethods->fetchAll(PDO::FETCH_ASSOC);

} catch (PDOException $e) {
    $data_saved = "Fehler: ";
}

// Aktuelles Datum im Format YYYY-MM-DD erzeugen
$currentDate = date('Y-m-d');
?>

<?php echo "<!-- data_saved:" . $data_saved . " Datum2: " . $currentDate . " -->"; ?>
<?php if ($data_saved == "true"): ?>
<div id="data-notice" class="data-notice">
Daten gespeichert !
<?php elseif ($data_saved != "nix"): ?>
<div id="data-notice" class="data-notice error">
<?php echo $data_saved; ?>
<?php endif; ?>
</div>
<div class="container">

<!-- Navigation -->
<nav class="nav">
<button class="hamburger">☰</button>
<ul class="nav-list">
<li><a href="dashboard.php">Start</a></li>
<?php if ($is_admin === "true") echo '<li><a href="register.php">Neue User</a></li>'; ?>
<li><a href="rep-month.php">Report Monat</a></li>
<li><a href="rep-person.php">Report Personen</a></li>
<li><a href="menu5.php" style="display: none;">Menüpunkt 5</a></li>
</ul>
<a href="logout.php" class="logout">Logout</a>
</nav>

<form action="new_entry.php" method="post" class="form-container">
<div class="form-group">
<input type="date" name="date" value="<?php echo $currentDate; ?>" required>
</div>
<div class="form-group">
<select name="user_id" id="user_id">
<?php foreach ($users as $user): ?>
<option value="<?php echo htmlspecialchars($user['id']); ?>"
<?php if ($user['id'] == $loggedInUserId): ?> selected <?php endif; ?>
>
<?php echo htmlspecialchars($user['username']); ?>
</option>
<?php endforeach; ?>
</select>
</div>
<!-- Person (Multiselect, alle vorselektiert) -->
<div class="form-group">
<label for="person">für wen</label>
<select name="person[]" id="person" multiple required size="4">
<?php foreach ($users as $user): ?>
<option value="<?php echo htmlspecialchars($user['id']); ?>" selected>
<?php echo htmlspecialchars($user['username']); ?>
</option>
<?php endforeach; ?>
</select>
</div>
<!-- Category (Einkaufen vorselektiert) -->
<div class="form-group">
<select name="category" id="category" required>
<?php foreach ($categories as $category): ?>
<option value="<?php echo htmlspecialchars($category['category_id']); ?>"
<?php echo ($category['name'] === 'Einkaufen' ? 'selected' : ''); ?>>
<?php echo htmlspecialchars($category['name']); ?>
</option>
<?php endforeach; ?>
</select>
</div>
<div class="form-group">
<input type="text" name="subject" placeholder="Betreff" required>
</div>
<div class="form-group">
<input type="number" name="amount" step="0.01" placeholder="Betrag" required>
</div>
<!-- Zahlweise (Dropdown) -->
<div class="form-group">
<select name="payment_method" id="payment_method" required>
<?php foreach ($pay_methods as $method): ?>
<option value="<?php echo htmlspecialchars($method['payment_method_id']); ?>">
<?php echo htmlspecialchars($method['name']); ?>
</option>
<?php endforeach; ?>
</select>
</div>
<!-- Hinweis -->
<div class="form-group">
<input type="text" name="note" placeholder="Hinweis">
</div>
<button type="submit" class="btn-xr">Speichern</button>
</form>

</div>
<script src="assets/js/script.js"></script>
</body>
</html>