<?php
$servername = "localhost";
$username = "civic";
$password = "sense";
$dbname = "admin_civic";

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// define variables and set to empty values
$indirizzo = $citta = $descrizione = $priorita = "";

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $latitudine = $_POST["latitudine"];
    $longitudine = $_POST["longitudine"];
    $titolo = $_POST["titolo"];
    $citta = $_POST["citta"];
    $indirizzo = $_POST["indirizzo"];
    $descrizione = $_POST["descrizione"];
    $priorita = $_POST["priorita"];
    $imgFile = $_FILES["pic"]['name'];
    $tmp_dir = $_FILES["pic"]['tmp_name'];
    $imgSize = $_FILES["pic"]['size'];

    if (empty($imgFile)) {
        $errMSG = "Please Select Image File.";
    } else {
        $upload_dir = "..".DIRECTORY_SEPARATOR ."foto".DIRECTORY_SEPARATOR; // upload directory

        $imgExt = strtolower(pathinfo($imgFile, PATHINFO_EXTENSION)); // get image extension
        // valid image extensions
        $valid_extensions = array('jpeg', 'jpg', 'png', 'gif'); // valid extensions
        // allow valid image file formats
        if (in_array($imgExt, $valid_extensions)) {
            // Check file size '5MB'
            if ($imgSize < 5000000) {
                $stmt = $conn->prepare("INSERT INTO segnalazione (latitudine, longitudine, titolo, citta, indirizzo, descrizione, priorita) VALUES (?, ?, ?, ?, ?, ?, ?)");
                $stmt->bind_param("ddssssi", $latitudine, $longitudine, $titolo, $citta, $indirizzo, $descrizione, $priorita);
                $stmt->execute();

                $last_id = $conn->insert_id;
                $userpic = $last_id . "." . $imgExt;
                move_uploaded_file($tmp_dir, $upload_dir . $userpic);
                // prepare and bind
                // rename uploading image

                $absFoto = $upload_dir . $userpic;
                $stmt = $conn->prepare('INSERT INTO foto (url, id) VALUES(?, ?)');
                $stmt->bind_param("si", $absFoto, $last_id);


                if ($stmt->execute()) {
                    echo "SEGNALAZIONE CARICATA CON SUCCESSO";
                    $cdt = $last_id + 1;
                    echo "<br><br>CDT: " . $last_id . "<br><br>";
                } else {
                    echo "error while inserting....";
                }
            } else {
                echo "Sorry, your file is too large.";
            }
        } else {
            echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";
        }
    }
} else {
    echo "ERRORE NEL SALVATAGGIO DELLA SEGNALAZIONE";
}





$conn->close();
?>

<a href="../home.php"><button>CONTINUA</button></a>