<?php
  include("database.php");

  $sid = null;
  $sname = null;
  session_start();
  if (isset($_SESSION["sid"]) && isset($_SESSION["sname"])) {
    if (isset($_GET["state"]) && $_GET["state"] == "close") {
      session_destroy();
    } else {
      $sid = $_SESSION["sid"];
      $sname = $_SESSION["sname"];
    }
  }
  $products = null;
  if ($sid) {
    $query = "SELECT * FROM items";
    $products = mysqli_query($connection, $query);
  }
?>
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Products</title>
  <style>
    div {
      padding: 5px 0px;
    }
  </style>
</head>
<body>
  <section>
    <?php
      if (!$sid) {
    ?>
      <div>You must sign in.</div>
      <div><a href="signin.php">Sign In</a></div>
      <div><a href="signup.php">Create Account</a></div>
    <?php
      } else {
        echo "<div>Account: ".htmlspecialchars($sname)."</div>";
        echo "<div>";
        echo "<a href=\"account.php\">Shopping Cart</a> - ";
        echo "<a href=\"index.php?state=close\">Sign Out</a>";
        echo "</div>";

        foreach($products as $item) {
          echo "<div>";
          echo "<a href=\"details.php?id=".$item["id"]."\">".$item["name"]." ".$item["price"]."</a>";
          echo "</div>";
        }
      }
    ?>
  </section>
</body>
</html>