<?
//header('Content-Type: text/html; charset=utf-8');
date_default_timezone_set('Asia/Bangkok');
$date = date('Y-m-d H:i:s');
ini_set('max_execution_time', 300);
if ($_SERVER['REQUEST_METHOD'] === 'POST')
{
    $barcode = $_POST['barcode'];
	$store = $_POST['store'];
}
else
{
	$barcode = $_GET['barcode'];
	$store = $_GET['store'];
}
if(strlen(trim($barcode))!=13)
	exit;
include("connect.php");
mysqli_query($mysqli,"SET character_set_results=utf8");
mysqli_query($mysqli,"SET character_set_client=utf8");
mysqli_query($mysqli,"SET character_set_connection=utf8");
if(strlen($store)>0)
{
	$result = $mysqli->query("SELECT * FROM allstores WHERE barcode LIKE '$barcode' AND store = '$store'");
	$num_rows = mysqli_num_rows($result);
	if($num_rows==0)
		$result = $mysqli->query("SELECT * FROM allstores WHERE barcode LIKE '$barcode' ORDER BY ctime DESC");
}
else
{
	$result = $mysqli->query("SELECT * FROM allstores WHERE barcode LIKE '$barcode' ORDER BY ctime DESC");
}
$num_rows = mysqli_num_rows($result);
if($num_rows>0)
{
	$row=mysqli_fetch_row($result);
	$productname = $row[1];
	$price = $row[2];
	$amount = $row[4];
	$store = $row[6];
	$imageurl = $row[11];
	echo $productname."|1|".strval($price)."|2|".$store."|3|".$imageurl;
	$amount = $amount+1;
	$sql = "UPDATE allstores SET amount='$amount',ctime = '$date' WHERE barcode LIKE '$barcode' AND store = '$store'";
	if (!mysqli_query($mysqli, $sql))
		echo "";
	exit;
}
else
{
	$url = "https://api.barcodelookup.com/v2/products?barcode=".$barcode."&key=gddlxplez4ml6jwv0r4gdm0ph5xtye";
	$data = file_get_contents($url, false, stream_context_create(['http' => ['ignore_errors' => true]]));
	if(strlen($data)<2)
		exit;
	else
	{
		$response = json_decode($data);
		$productname = $response->products[0]->title;
		$price = $response->products[0]->stores[0]->store_price;
		$store = $response->products[0]->stores[0]->store_name;
		$imageurl = $response->products[0]->images[0];
		if($price==null)
			$price="1";
		echo $productname."|1|".strval($price)."|2|".$store."|3|".$imageurl;
		$productname = str_replace("'","`",$productname);
		$sql = "INSERT IGNORE INTO allstores (barcode,productname,price,amount,ctime,store,imageurl) VALUES ('$barcode','$productname','$price',1,'$date','$store','$imageurl')";
		if (!mysqli_query($mysqli, $sql))
			echo "";
	}
}
?>