<?php
require_once("session.php");
require_once("connection.php");
require_once("functions.php");

// CSRF Token Validation
if (!isset($_POST['csrf_token']) || !validateCSRFToken($_POST['csrf_token'])) {
    http_response_code(403);
    echo json_encode(['status' => 'error', 'message' => 'Security token validation failed.']);
    exit();
}

// Check if user_id is set in the POST request
if (isset($_POST['user_id']) && !empty($_POST['user_id'])) {
    // Validate user_id as integer
    $user_id = intval($_POST['user_id']);
    if ($user_id <= 0) {
        echo json_encode(['status' => 'error', 'message' => 'Invalid user ID.']);
        exit();
    }
    
    $created_at = date('Y-m-d H:i:s'); // Use current date and time for created_at

    // First, check if a bar tab already exists for this user_id
    $stmt = $conn->prepare("SELECT * FROM bar_tabs WHERE user_id = ? LIMIT 1");
    $stmt->bind_param("i", $user_id);
    $stmt->execute();
    $checkResult = $stmt->get_result();

    if ($checkResult->num_rows > 0) {
        // If a bar tab already exists for this user_id, return an error message
        echo json_encode(['status' => 'error', 'message' => 'A bar tab already exists for this user.']);
    } else {
        // Prepare the SQL query to insert a new record into the bar_tabs table
        $stmt = $conn->prepare("INSERT INTO bar_tabs (user_id) VALUES (?)");
        $stmt->bind_param("i", $user_id);

        // Execute the query
        if ($stmt->execute()) {
            // If the insertion is successful, return a success message
            echo json_encode(['status' => 'success', 'message' => 'Bar tab created successfully.']);
        } else {
            // If there's an error, return an error message
            echo json_encode(['status' => 'error', 'message' => 'Error: ' . $conn->error]);
        }
    }
} else {
    // If user_id is not provided, return an error message
    echo json_encode(['status' => 'error', 'message' => 'User ID is required.']);
}
?>