<?php
require 'dbPDO.php';
require 'encryption.php';
require_once 'utiluser.php';
$title = 'Order History';
$nav = true;
$content = '';
$emailform = '<div class="formGroup"><form method="post" class="checkout required"><h1 class="subheading">Previous orders</h1><p class="center">Enter your email address to see previous orders.</p><div><label><span>Email:</span><input name="email" type="email" placeholder="joe@example.com" required="required" maxlength="50" pattern="[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}"></label></div><input type="submit"> <input type="reset" value="Clear form"></form></div>';
if ($userCustID > 0) {
    $custID = $userCustID;
    $custIDs = htmlspecialchars($custID);
    $customer = $db->prepare('SELECT fname, lname, email FROM bookCustomers WHERE custID = ?;');
    $customer->execute(array($custID));
    if ($customer->rowCount() == 1) {
        $row = $customer->fetch();

        $orders = $db->prepare('SELECT o.orderID, o.orderdate FROM bookorders o WHERE o.custID = ? GROUP BY o.orderID ORDER BY o.orderdate DESC;');
        $orders->execute(array($custID));
        if ($orders->rowCount() == 0) {
            $content .= "<h1 class=\"subheading\">No orders for customer <span class=\"red\">$row[fname] $row[lname]</span>.</h1>";
        } else {
            $content .= "<h1 class=\"subheading\">Orders for customer <span class=\"red\">$row[fname] $row[lname]</span>.</h1>";
            $books = $db->prepare('SELECT i.qty, i.price, d.ISBN, d.title, d.pages FROM bookorderitems i, bookdescriptions d WHERE i.orderID = ? AND i.ISBN = d.ISBN ORDER BY d.title;');
            foreach ($orders->fetchAll() as $order) {
                $orderDate = date('F j Y \a\t g:i a', $order['orderdate']);
                $content .= "<h1 class=\"subheading\">Order #$order[orderID] on $orderDate</h1>";
                $books->execute(array($order['orderID']));
                $content .= "<div class=\"cartitems\">";
                $orderTotal = 0;
                $pages = 0;
                foreach ($books->fetchAll() as $book) {
                    $pricef = sprintf("$%.2f", $book['price']);
                    $totalf = sprintf("$%.2f", $book['price'] * $book['qty']);
                    $content .= "<article class=\"bookteaser\"><a href=\"productPage.php?isbn=$book[ISBN]\"><h1>$book[title]</h1></a><div class=\"clearfix\"><a href=\"productPage.php?isbn=$book[ISBN]\"><img src=\"//yorktown.cbe.wwu.edu/sandvig/mis314/assignments/bookstore/bookimages/$book[ISBN].01.THUMBZZZ.jpg\"></a>Price: <span class=\"red\">$pricef</span><br>Quantity: $book[qty]<br>Total: <span class=\"red\">$totalf</span></div></article>";
                    $orderTotal += $book['price'] * $book['qty'];
                    $pages += $book['pages'] * $book['qty'];
                }
                $orderTotalf = sprintf("$%.2f", $orderTotal);
                $shipping = sprintf("$%.2f", pow($pages, .25));
                $totalf = sprintf("$%.2f", $orderTotal + pow($pages, .25));
                $content .= "</div><div>Sub Total: <strong class=\"red\">$orderTotalf</strong></div><div>Shipping: <strong class=\"red\">$shipping</strong></div><div>Total: <strong class=\"red\">$totalf</strong></div>";
            }
        }
    } else {
        $content .= "Error: Customer with ID <strong class=\"red\">$custIDs</strong> not found in database.";
    }
} else {
    header('location: account.php?orderHistory=true');
    exit();
}
require 'template.php';
?>
