<?php session_start();

if (!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true) {
  header("location: login.php");
  exit;  
}

require_once "config.php";
require "password.php";

	$session_user = $_SESSION["username"];
	$server = "localhost";
  	$user = "kdforker";
  	$pass = "CS389";
  	$database = "kdforker";
  	$connect = mysqli_connect($server, $user, $pass);
  	mysqli_select_db($connect, $database);

  	$idSelected = $_POST['selectedApart'];
  	$results = mysqli_query($connect, "SELECT APART_ID, BED_TYPE, BATH_TYPE, SQ_FT, PRICE FROM apartments WHERE id = '$idSelected'");

  	$information = mysqli_fetch_row($results);
  	$apart_id = $information[0];
  	$bed_type = $information[1];
  	$bath_type = $information[2];
  	$sq_ft = $information[3];
  	$price = $information[4];

  	$sql = "INSERT INTO owned (USERNAME, APART_ID, BED_TYPE, BATH_TYPE, SQ_FT, PRICE_RANGE) values ('$session_user', '$apart_id', '$bed_type', '$bath_type', '$sq_ft', '$price')";
  	mysqli_query($connect, $sql);

  	$update = mysqli_query($connect, "UPDATE apartments SET AVAILABILITY = 'Occupied' WHERE id = '$idSelected'");

  	mysqli_close($connect);

  	header("location: index.php");

?>