<?php
session_start();
$user="root";
$pass="";
$host="localhost";
$dbnamne="neardeal";

$name = $_REQUEST['name'];
$noHp = $_REQUEST['no_hp'];
$address = $_REQUEST['address'];
$productStr = $_REQUEST['productIds']; //productIds string separated by ,
$pricesStr = $_REQUEST['prices']; //productIds string separated by ,

//create connection
$conn = new mysqli($host, $user, $pass, $dbnamne);

//check connection
if($conn->connect_error){
    die("connection failed" .$com->connect_error);
}

if(!isset($_SESSION['user_id'])) {
    die("You're not allowed to access this api");
}

$user_id = $_SESSION['user_id'];
$sql = "INSERT INTO order VALUES(NULL, {$user_id}, '{$name}', '{$noHp}', '{$address}')";
$conn->query($sql);

$order_id = $conn->insert_id;
$productIds = explode(",", $productStr);
$prices = explode(",", $pricesStr);

foreach($productIds as $k=>$productId) {
    $sql = "INSERT INTO item_order VALUES(NULL, {$order_id}, {$productId}, {$prices[$k]})";
    $conn->query($sql);
}

echo json_encode(array(
    'success' => true,
    'order_id' => $order_id
));