✏ 编辑: submit_query.php

<?php
header('Content-Type: application/json');
require_once 'config.php';

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['success' => false, 'message' => 'Invalid request method']);
    exit;
}

try {
    $conn = getDBConnection();
    
    // Sanitize and validate input
    $fullName = trim($_POST['fullName'] ?? '');
    $email = trim($_POST['email'] ?? '');
    $telephone = trim($_POST['telephone'] ?? '');
    $dob = !empty($_POST['dob']) ? $_POST['dob'] : null;
    $enquiry = trim($_POST['enquiry'] ?? '');
    
    // Validation
    if (empty($fullName) || empty($email) || empty($telephone)) {
        throw new Exception('Please fill in all required fields');
    }
    
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        throw new Exception('Please enter a valid email address');
    }
    
    // Prepare and execute insert statement
    $stmt = $conn->prepare("INSERT INTO queries (full_name, email, telephone, date_of_birth, enquiry) VALUES (?, ?, ?, ?, ?)");
    $stmt->bind_param("sssss", $fullName, $email, $telephone, $dob, $enquiry);
    
    if ($stmt->execute()) {
        echo json_encode([
            'success' => true,
            'message' => 'Your query has been submitted successfully! We will get back to you soon.'
        ]);
    } else {
        throw new Exception('Failed to submit query. Please try again.');
    }
    
    $stmt->close();
    $conn->close();
    
} catch (Exception $e) {
    echo json_encode([
        'success' => false,
        'message' => $e->getMessage()
    ]);
}
?>

[X] 取消