<?php
session_start();
include "../../settings/connection.php";
include "../../settings/auth-admin.php";

if(isset($_GET["action"])){
  if($_GET["action"]=="delete"&&isset($_GET["id"])){
    $act="DELETE from `barang` WHERE `KodeBarang` = ".$_GET["id"];
    $ambil=mysql_query($act,$server_connect);
    header("Location:../index.php?what=barang&delete_success=true");
  }else if($_GET["action"]=="save"){
    if(!empty($_POST["NmBarang"])&&!empty($_POST["SatuanBarang"])&&!empty($_POST["KetBarang"])){
      $perintah="INSERT INTO `barang` (`KodeBarang`, `NmBarang`, `SatuanBarang`, `KetBarang`) VALUES (NULL, '".$_POST["NmBarang"]."', '".$_POST["SatuanBarang"]."', '".$_POST["KetBarang"]."')";
      $ambil=mysql_query($perintah,$server_connect);
      header("Location:../index.php?what=barang&tab=input&input_success=true");
    }else{
      header("Location:../index.php?what=barang&tab=input&empty_fields=true");
    }
  }else if($_GET["action"]=="edit"&&isset($_GET["id"])){
    header("Location:../index.php?what=barang&tab=input&action=edit&id=".$_GET["id"]);
  }else if($_GET["action"]=="update"){
    if(!empty($_GET["id"])&&!empty($_POST["NmBarang"])&&!empty($_POST["SatuanBarang"])&&!empty($_POST["KetBarang"])){
      $perintah="UPDATE `barang` SET `NmBarang`='".$_POST["NmBarang"]."', `SatuanBarang`='".$_POST["SatuanBarang"]."', `KetBarang` = '".$_POST["KetBarang"]."' WHERE `KodeBarang` = '".$_GET["id"]."'";
      $ambil=mysql_query($perintah,$server_connect);
      header("Location:../index.php?what=barang&edit_success=true");
    }else{
      header("Location:../index.php?what=barang&tab=input&action=edit&id=".$_GET["id"]."&empty_fields=true");
    }
  }else{
    header("Location:../index.php?what=barang&error=true");
  }
}else{header("Location:../index.php?what=barang&error=true");}
?>