list

<?php
session_start();
include 'config.php';
include 'template.html';
if(!isset($_SESSION['username'])){
    header('location:login.php');
}
$name=$_SESSION['username'];
$sqlId="SELECT id FROM users WHERE username='$name'";
$executeId=mysqli_query($con,$sqlId);
while ($row=mysqli_fetch_row($executeId)){
    $id=$row[0];
}
if(isset($_POST['save'])) {
    $nameList = $_POST['listName'];
    $typeList = $_POST['listType'];
    $date = date("Y-m-d h:i:sa");
    $nameListSec = mysqli_real_escape_string($con, $nameList);
    $typeListSec = mysqli_real_escape_string($con, $typeList);
    $addList = "INSERT INTO liste(name, type, date, id) VALUES ('$nameListSec','$typeListSec','$date','$id')";
    $resultat = mysqli_query($con, $addList)
    or die(mysqli_error($con));
    $res = mysqli_affected_rows($con);

    if ($res == 1) {
        $selectListId = "SELECT * FROM liste where date='$date' AND id='$id'";
        $resultList = mysqli_query($con, $selectListId);
        while ($ligne = mysqli_fetch_array($resultList)) {
            $listId = $ligne[0];
        }
        if (isset($_POST['insert'])) {
            $nameItem = $_POST['itemName'];
            $prix = $_POST['prix'];
            $quantity = $_POST['quantity'];
            $nameItemSec = mysqli_real_escape_string($con, $nameItem);
            $prixSec = mysqli_real_escape_string($con, $prix);
            $quantitySec = mysqli_real_escape_string($con, $quantity);
            $priceInt = intval($prixSec);
            $quantityInt = intval($quantitySec);
            $price = $prixSec * $quantitySec;


            $addItem = "INSERT INTO item (name,prixUnitaire,quantite,prixTotal,listId,image) VALUES ('$nameItemSec','$priceInt','$quantitySec','$price','$listId',1)";
            mysqli_query($con, $addItem)
            or die(mysqli_error($con));
        }


    }

}

        ?>
        <html>
        <body>
        <div class="form-box">
            <div align="center">
                <h3>Your List</h3>
            </div>
            <form action="index.php" method="post">
                List Name:<input type="text" align="left" name="listName"><br>
                Type List:<input type="text" align="left" name="listType"><br>
                <input type="submit" name="save" value="Save">
                <br>
                Item Name: <input type="text" align="left" name="itemName"><br>
                Prix :<input type="number" align="left" name="prix">
                Quantity: <input type="number" align="left" name="quantity"><br>
                <input type="submit" name="insert" value="Insert">
            </form>


        </body>
        </html>