<?php
require '../utils/dbPDO.php';
require '../utils/validate.php';
$dalingk = new dalingkDB();
$db = $dalingk->connect();
$title = 'Products By Price';
$main = '';
$main .= <<<EOF
<form class="center">
<h2 class="subheader">Select products under $:</h2>
<input type="text" placeholder="Price" name="price" autofocus>
<input type="submit">
</form>
EOF;
if (isset($_GET['price'])) {
    $price = validFloat($_GET['price']);
    if ($price > 0) {
        $query = $db->prepare("SELECT price, name, image FROM geekproducts WHERE price <= ? ORDER BY price, name");
        $query->execute(array($price));
        $number = $query->rowCount();
        $main .= "<p class=\"center\">We sell <strong>$number</strong> products under <strong>$$price</strong>.</p>";
        $main .= '<table class="simple">';
        $main .= '<tr><th>Price</th><th>Item Name</th><th>Thumbnail (click to enlarge)</th></tr>';
        foreach ($query->fetchAll() as $row) {
            $main .= "<tr><td>$$row[price]</td><td>$row[name]</td><td><a href=\"//yorktown.cbe.wwu.edu/sandvig/mis314/assignments/a06/images/l_$row[image]\"><img src=\"//yorktown.cbe.wwu.edu/sandvig/mis314/assignments/a06/images/m_$row[image]\" class=\"thumbnail\"></a></td></tr>";
        }
        $main .= '</table>';
    } else {
        $price = htmlspecialchars($_GET['price']);
        $main .= "<p class=\"center\"><strong class=\"red\">$price</strong> is not a valid number. Please enter a valid number.</p>";
    }
}
require '../utils/simpleTemplate.php';
?>
