<?php
session_start();
include 'db_config.php';

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $reg = mysqli_real_escape_string($conn, $_POST['registration_number']);
    
    // 1. Duplicate Check
    $check = $conn->query("SELECT app_id FROM hsrp_applications WHERE registration_number = '$reg'");
    
    if ($check->num_rows > 0) {
        $old_data = $check->fetch_assoc();
        $_SESSION['current_app_id'] = $old_data['app_id'];
        header("Location: secure-payment.php");
        exit;
    }

    // 2. Generate New App ID
    $app_id = "HSRP" . rand(100000, 999999);
    $_SESSION['current_app_id'] = $app_id;

    // 3. Save Data
    $state = $_POST['state'];
    $chassis = $_POST['chassis_number'];
    $engine = $_POST['engine_number'];
    $name = $_POST['full_name'];
    $phone = $_POST['phone'];
    $email = $_POST['email'];
    $address = $_POST['address'];

    $sql = "INSERT INTO hsrp_applications (app_id, state, registration_number, chassis_number, engine_number, full_name, phone, email, address) 
            VALUES ('$app_id', '$state', '$reg', '$chassis', '$engine', '$name', '$phone', '$email', '$address')";

    if ($conn->query($sql) === TRUE) {
        header("Location: secure-payment.php");
    }
}
?>