PackIt/admin/item_groups.php

<?php
require_once __DIR__ . '/auth.php';
require_once __DIR__ . '/layout.php';
require_admin();

$pdo = get_pdo();

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    require_csrf();
    $action = $_POST['action'] ?? '';
    if ($action === 'add') {
        $name  = trim($_POST['groupName'] ?? '');
        $order = (int)($_POST['sortOrder'] ?? 0);
        if ($name !== '') {
            $pdo->prepare("INSERT INTO item_groups (groupName, sortOrder) VALUES (?,?)")->execute([$name, $order]);
            flash('success', "Group '$name' added.");
        } else { flash('error', 'Name required.'); }
    }
    if ($action === 'edit') {
        $id    = (int)$_POST['groupID'];
        $name  = trim($_POST['groupName'] ?? '');
        $order = (int)($_POST['sortOrder'] ?? 0);
        if ($name !== '') {
            $pdo->prepare("UPDATE item_groups SET groupName=?,sortOrder=? WHERE groupID=?")->execute([$name,$order,$id]);
            flash('success', 'Group updated.');
        } else { flash('error', 'Name required.'); }
    }
    if ($action === 'delete') {
        $id = (int)$_POST['groupID'];
        $pdo->prepare("DELETE FROM item_groups WHERE groupID=?")->execute([$id]);
        flash('success', 'Group deleted.');
    }
    header('Location: item_groups.php'); exit;
}

$groups = $pdo->query("SELECT * FROM item_groups ORDER BY sortOrder, groupID")->fetchAll();

admin_head('Item Groups', 'item_groups.php');
show_alerts();
?>
<h1>Item Groups</h1>

<div class="card">
  <h2>Add New Group</h2>
  <form method="POST">
    <?= csrf_field() ?>
    <input type="hidden" name="action" value="add">
    <div class="form-row">
      <div>
        <label>Group Name</label>
        <input type="text" name="groupName" placeholder="e.g. Clothing" required>
      </div>
      <div>
        <label>Sort Order</label>
        <input type="number" name="sortOrder" value="0" min="0">
      </div>
    </div>
    <div style="display:flex;gap:.5rem;">
      <button type="submit" class="btn btn-primary">➕ Add Group</button>
    </div>
  </form>
</div>

<?php foreach ($groups as $g): ?>
<form id="edit-form-<?= $g['groupID'] ?>" method="POST">
  <?= csrf_field() ?>
  <input type="hidden" name="action" value="edit">
  <input type="hidden" name="groupID" value="<?= $g['groupID'] ?>">
</form>
<?php endforeach; ?>

<table class="tbl tbl-fixed">
  <colgroup>
    <col style="width:60px">
    <col>
    <col style="width:100px">
    <col style="width:100px">
    <col style="width:200px">
  </colgroup>
  <thead><tr><th>#</th><th>Name</th><th>Sort</th><th>Items</th><th></th></tr></thead>
  <tbody>
  <?php foreach ($groups as $g):
    $stmt = $pdo->prepare("SELECT COUNT(*) FROM items WHERE groupID=?");
    $stmt->execute([$g['groupID']]);
    $cnt = $stmt->fetchColumn();
    $id = $g['groupID'];
  ?>
  <tr id="row-<?= $id ?>" data-editing="false">
    <td style="color:var(--muted)"><?= $id ?></td>
    <td>
      <div class="view"><?= htmlspecialchars($g['groupName']) ?></div>
      <div class="edit"><input type="text" name="groupName" form="edit-form-<?= $id ?>" value="<?= htmlspecialchars($g['groupName']) ?>" required></div>
    </td>
    <td>
      <div class="view"><?= $g['sortOrder'] ?></div>
      <div class="edit"><input type="number" name="sortOrder" form="edit-form-<?= $id ?>" value="<?= (int)$g['sortOrder'] ?>" min="0"></div>
    </td>
    <td><span class="badge badge-group"><?= $cnt ?></span></td>
    <td>
      <div class="view actions-buttons">
        <button type="button" onclick="startEdit(<?= $id ?>)" class="btn btn-sm btn-teal">Edit</button>
        <form method="POST" onsubmit="return confirm('Delete group and ALL its items?')">
          <?= csrf_field() ?>
          <input type="hidden" name="action" value="delete">
          <input type="hidden" name="groupID" value="<?= $id ?>">
          <button class="btn btn-sm btn-danger">Delete</button>
        </form>
      </div>
      <div class="edit actions-buttons">
        <button type="submit" form="edit-form-<?= $id ?>" class="btn btn-sm btn-primary">💾 Save</button>
        <button type="button" onclick="cancelEdit(<?= $id ?>)" class="btn btn-sm btn-secondary">Cancel</button>
      </div>
    </td>
  </tr>
  <?php endforeach; ?>
  </tbody>
</table>

<script>
function startEdit(id) {
  var row = document.getElementById('row-' + id);
  row.dataset.editing = 'true';
  var input = row.querySelector('.edit input[name="groupName"]');
  if (input) input.focus();
}
function cancelEdit(id) {
  document.getElementById('row-' + id).dataset.editing = 'false';
}
</script>

<?php admin_foot(); ?>