<?php
include 'auth.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    if (empty($_POST['id'])) {
        require_permission('categories_add');
    } else {
        require_permission('categories_edit');
    }
    $id = $_POST['id'];
    $name = $_POST['name'];

    if (empty($id)) {
        // INSERT
        $sql = "INSERT INTO categories (name) VALUES (?)";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("s", $name);
    } else {
        // UPDATE
        $sql = "UPDATE categories SET name=? WHERE id=?";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("si", $name, $id);
    }

    if ($stmt->execute()) {
        header("Location: categories.php?success=تم حفظ الفئة بنجاح");
    } else {
        header("Location: categories.php?error=حدث خطأ: " . $stmt->error);
    }

    $stmt->close();
    $conn->close();

} else {
    header("Location: categories.php");
    exit();
}
?>