<?php
session_start();
error_reporting(0);
include("../config/theconfig.php");
include("header.php");

if(!(isset($_SESSION['adminid'])))
    header('Location:login.php?error=nologin');

?>
<div class="dt-content-wrapper">

    <div class="dt-content">

        <div class="dt-entry__header">
            Search Results
        </div>
        <div class="col-xl-12">

        </div>
        <div class="dt-card">

            <div class="dt-card__body">

                <div class="table-responsive">
                    <table id="data-table" class="table table-striped table-bordered table-hover">
                        <thead>
                            <tr>
                                <th width="15%">Account Number</th>
                                <th width="15%">Amount</th>
                                <th width="15%">Transaction Type</th>
                                <th width="15%">Date</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php
                            $query = $_GET['query'];
                            // gets value sent over search form

                            $min_length = 3;
                            // you can set minimum length of the query if you want

                            if(strlen($query) >= $min_length){ // if query length is more or equal minimum length then

                                $query = htmlspecialchars($query);
                                // changes characters used in html to their equivalents, for example: < to &gt;

                                $query = mysqli_real_escape_string($conn, $query);
                                // makes sure nobody uses SQL injection by escaping special characters.
                                // It is recommended to use prepared statements for better security.

                                $raw_results = mysqli_query($conn, "SELECT * FROM transactions
                                WHERE (`paymentdate` LIKE '%".$query."%') OR (`receiveid` LIKE '%".$query."%') ") or die(mysqli_error($conn));

                                // * means that it selects all fields, you can also write: `id`, `title`, `text`
                                // articles is the name of our table

                                // '%$query%' is what we're looking for, % means anything, for example if $query is Hello
                                // it will match "hello", "Hello man", "gogohello", if you want exact match use `title`='$query'
                                // or if you want to match just full word so "gogohello" is out use '% $query %' ...OR ... '$query %' ... OR ... '% $query'

                                if(mysqli_num_rows($raw_results) > 0){ // if one or more rows are returned do following

                                    while($results = mysqli_fetch_array($raw_results)){
                                    // $results = mysqli_fetch_array($raw_results) puts data from database into array, while it's valid it does the loop

                                    echo "<script>swal('Successful!', 'Transaction Available', 'success')</script>";

                                    echo "<tr>

                                    <td>
                                    ".htmlspecialchars($results['receiveid'])."
                                    </td>
                                    <td>$cur
                                    ".htmlspecialchars($results['amount'])."
                                    </td>
                                    <td>
                                    ".htmlspecialchars($results['type'])."
                                    </td>
                                    <td>
                                    ".htmlspecialchars($results['paymentdate'])."
                                    </td>

                                    </tr>";
                                    }

                                }
                                else{ // if there is no matching rows do following
                                    echo "<script>swal('Error!', 'Transaction Not Found For The Entry! Please Check The Account Number Or Try Searching By Date', 'error')</script>";
                                }

                            }
                            else{ // if query length is less than minimum
                                echo "Minimum length is ".$min_length;
                            }
                            ?>

                        </tbody>
                    </table>
                </div>
                </div>
            </div>
    </div>
</div>
<?php include'footer.php' ?>

<script src="../assets/node_modules/datatables.net/js/jquery.dataTables.js"></script>
<script src="../assets/node_modules/datatables.net-bs4/js/dataTables.bootstrap4.js"></script>
<script src="../assets/js/custom/data-table.js"></script>