<?php

session_start();
include("includes/config.php");

if(isset($_POST['add_testimonial'])){

    $name = $_POST['name'];
    $position = $_POST['position'];
    $description = $_POST['description'];

    $photo = $_FILES['photo']['name'];
    $allowed_image_extensions = array('gif','png','jpg','jpeg','webp','WEBP');


    $photo_filename = $_FILES['photo']['name'];
    $photo_file_extension = pathinfo($photo_filename, PATHINFO_EXTENSION);


    if(!in_array($photo_file_extension, $allowed_image_extensions)){
        $_SESSION['status'] = "The image file is not allowed. Please upload an image.";
        header('Location: testimonial.php');
        exit;

    } else {
   
        $query = "INSERT INTO testimonials (name, position, description, photo) VALUES ('$name', '$position', '$description','$photo')";
        $query_run = mysqli_query($conn, $query);

        if($query_run){
            move_uploaded_file($_FILES["photo"]["tmp_name"], "testimonial/".$_FILES["photo"]["name"]);
            $_SESSION['status'] = "Uploaded Successfully";
            header('Location: view-testimonial.php');
            exit;
        } else {
            $_SESSION['status'] = "Not Uploaded ";
            header('Location: testimonial.php');
            exit;
        }
    }
}


// update 
if(isset($_POST['update_testimonial'])){
    $id = $_POST['id'];
    $name = $_POST['name'];
    $position = $_POST['position'];
    $description = $_POST['description'];
   
    $old_photo = $_POST['image_old'];
    $update_photo_filename = $_FILES["photo"]["name"] ? $_FILES["photo"]["name"] : $old_photo;



    $allowed_image_extensions = array('gif','png','jpg','jpeg','webp','WEBP');
 

    $photo_file_extension = pathinfo($update_photo_filename, PATHINFO_EXTENSION);
   
    if(!in_array($photo_file_extension, $allowed_image_extensions)){
        $_SESSION['status'] = "The image file is not allowed. Please upload an image.";
        header("Location: edit-testimonial.php?id=$id"); 
        exit;
   
    }

    // Update the department information in the database
    $query = "UPDATE testimonials SET name='$name', position='$position', description='$description', photo='$update_photo_filename' WHERE id ='$id' ";

    $query_run = mysqli_query($conn, $query);

    if($query_run){
      
        if($_FILES["photo"]["name"] !='' && $_FILES["photo"]["name"] != $old_photo){
            move_uploaded_file($_FILES["photo"]["tmp_name"], "testimonial/".$_FILES["photo"]["name"]);
            unlink("testimonial/". $old_photo);    
        }

     

        $_SESSION['status'] = "Updated Successfully";
        header('Location: view-testimonial.php');
    } else {
        $_SESSION['status'] = " Not Updated";
        header('Location: view-testimonial.php');
    }
}

// delete

if(isset($_POST['delete_testimonial'])){
    $id = $_POST['delete_id'];
    $photo = $_POST['del_testimonial'];
   

    $query = "DELETE FROM testimonials WHERE id = '$id'";
    $query_run = mysqli_query($conn, $query);

    if($query_run){
        if(unlink("testimonial/".$photo)) {
            $_SESSION['status'] = "Deleted Successfully";
            header('Location: view-testimonial.php');
        } else {
            $_SESSION['status'] = "Error deleting files";
            header('Location: view-testimonial.php');
        }
    } else {
        $_SESSION['status'] = "Not Deleted";
        header('Location: view-testimonial.php');
    }
}
?>