<?php
include 'auth.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    if (empty($_POST['id'])) {
        require_permission('branches_add');
    } else {
        require_permission('branches_edit');
    }
    $id = $_POST['id'];
    $name = $_POST['name'];
    $address = $_POST['address'];
    $phone = $_POST['phone'];
    $lat = $_POST['lat'];
    $lng = $_POST['lng'];

    if (empty($id)) {
        // INSERT
        $sql = "INSERT INTO branches (name, address, phone, lat, lng) VALUES (?, ?, ?, ?, ?)";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("ssssd", $name, $address, $phone, $lat, $lng);
    } else {
        // UPDATE
        $sql = "UPDATE branches SET name=?, address=?, phone=?, lat=?, lng=? WHERE id=?";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("ssssdi", $name, $address, $phone, $lat, $lng, $id);
    }

    if ($stmt->execute()) {
        header("Location: branches.php?success=تم حفظ بيانات الفرع بنجاح");
    } else {
        header("Location: branches.php?error=حدث خطأ أثناء حفظ البيانات: " . $stmt->error);
    }

    $stmt->close();
    $conn->close();

} else {
    header("Location: branches.php");
    exit();
}
?>