From 5781bc0097480c895766b97f7d669b764d7681c7 Mon Sep 17 00:00:00 2001
From: Juthatip McDevitt <jtp@mcdevitt.tech>
Date: Sun, 7 Jul 2024 14:50:54 -0500
Subject: [PATCH] updated user review functionality

---
 hotel_booking/ajax/review_room.php | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 hotel_booking/ajax/review_room.php

diff --git a/hotel_booking/ajax/review_room.php b/hotel_booking/ajax/review_room.php
new file mode 100644
index 0000000..92bdf8b
--- /dev/null
+++ b/hotel_booking/ajax/review_room.php
@@ -0,0 +1,26 @@
+<?php
+
+    require('../admin/components/db_config.php');
+    require('../admin/components/utils.php');
+
+    date_default_timezone_set("America/Chicago");
+
+    session_start();
+    if(!(isset($_SESSION['login']) && $_SESSION['login'] == true)){
+        redirect('index.php');
+    }
+
+    if(isset($_POST['review_form'])){
+        $frm_data = filteration($_POST);
+        $update_query = "UPDATE `booking_order` SET `review`=? WHERE `booking_id`=? AND `user_id`=?";
+        $update_values = [1, $frm_data['booking_id'], $_SESSION['uerID']];
+        $update_result = update($update_query, $update_values, 'iii');
+        
+        $insert_query = "INSERT INTO `review`(`booking_id`, `room_id`, `user_id`, `room_review`, `clean_review`, `staff_review`, `service_review`, `review`) VALUES (?, ?, ?, ?, ?, ?, ?, ?)";
+        $insert_values = [$frm_data['booking_id'], $frm_data['room_id'], $_SESSION['uerID'], $frm_data['room_review'], $frm_data['clean_review'], $frm_data['staff_review'], $frm_data['service_review'], $frm_data['review']];
+        $insert_result = insert($insert_query, $insert_values, 'iiiiiiis');
+
+        echo $insert_result;
+    }
+
+?>
\ No newline at end of file