finished adding new order

addOrder.php

@@ -21,6 +21,45 @@
     
         exit(0);
     }
-    $data = json_decode(file_get_contents('php://input'), true);
-    print_r($data);
+
+    include 'db_connection.php';
+    session_start();
+    $conn = openCon();
+        mysqli_set_charset($conn, "utf8");
+        $data = json_decode(file_get_contents("php://input"),true);
+        $q = "INSERT INTO `order` (`client_id`, `login_id`, `type`, `start`, `end`, `street`, `adNumber`, `city`, `zipcode`, `post`, `person`, `email`, `phone`)" . sprintf(
+            "VALUES (\"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\")", 
+            $data["clientId"],
+            $_SESSION["id"],
+            $data["type"],
+            $data["startDate"],
+            $data["endDate"],
+            $data["street"],
+            $data["adNumber"],
+            $data["city"],
+            $data["zipcode"],
+            $data["post"],
+            $data["person"],
+            $data["email"],
+            $data["phone"]
+        );
+        mysqli_query($conn, $q);
+        $orderId = mysqli_insert_id($conn);
+        
+        foreach($data["products"] as $product){
+            $q = "INSERT INTO order_product (`order_id`, `product_id`, `prNumber`, `offerPrice`, `maintenance`, `extra`, `lock`, `risk`)" . sprintf(
+            "VALUES (\"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\", \"%s\")",
+            $orderId,
+            $product["productId"],
+            $product["prNumber"],
+            $product["offerPrice"],
+            $product["maintenance"],
+            $product["extra"],
+            $product["lock"],
+            $product["risk"]
+            );
+            mysqli_query($conn, $q);
+        }
+        echo json_encode($orderId);
+    closeCon($conn);
 ?>