<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST')
{

$product = $_POST["name"];
$tradeurl = $_POST["tradeurl"];
$email = $_POST["email"];
// assetid
$id = $_POST["id"];
$assetid = $_POST["assetid"];
$ordernumber = $_POST["ordernumber"];
//echo $id;
//echo $assetid;
//echo $ordernumber;
$name = "CS GO Bazaar";

    echo "Produkt: $product<br>";
    echo "Din valda tradeurl: $tradeurl<br>";
    echo "Din valda email: $email<br>";
    echo "Ditt Ordernummer: $ordernumber<br>";

    echo "Tack för ditt köp!";

    $file = "../transactions/$id.txt";
    file_put_contents($file, "$tradeurl\n\r$email\n\r$id\n\r$product");

    $to = "jimmie.magnusson@hotmail.com, epost";
	//$to = "johan.nordstrom.consulting@hotmail.com";
    $headers = "From: $name<$email>\r\nReturn-path: $email";
    $subject = "Nytt köp";

    $message = "Trade URL: $tradeurl\n";
    $message .= "Email: $email\n";
    $message .= "Produkt: $product\n";
    $message .= "ID: $ordernumber";

    mail($to, $subject, $message, $headers);

include("../config/mysql.php");
$conn = new mysqli($DB_HOST, $DB_USER, $DB_PASSWORD, $DB_NAME);
if (mysqli_connect_errno()) {
	printf("Connect failed: %s\n", mysqli_connect_error());
	exit();
}

try {
    $qry = sprintf("INSERT INTO transactions (ordernumber, itemid, assetid) VALUES('%s', '%u', '%s')",
        $ordernumber,
        $id,
        $assetid);

    $result = mysqli_query($conn, $qry);
    mysqli_close($conn);
} catch (Exception $e)
{
   echo $e->getMessage();
}

}


else
{
  echo "Oj, nu har du kommit fel!";
}

?>