booking_process.php

<?php
session_start();
require 'db.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Check if user is logged in
    if (!isset($_SESSION['user_id'])) {
        http_response_code(401);
        echo json_encode(['success' => false, 'message' => 'Please login first']);
        exit();
    }

    $user_id = $_SESSION['user_id'];
    $name = trim($_POST['name'] ?? '');
    $email = trim($_POST['email'] ?? '');
    $phone = trim($_POST['phone'] ?? '');
    $service = trim($_POST['service'] ?? '');
    $date = trim($_POST['date'] ?? '');
    $time = trim($_POST['time'] ?? '');

    if (empty($name) || empty($email) || empty($service) || empty($date) || empty($time)) {
        http_response_code(400);
        echo json_encode(['success' => false, 'message' => 'All fields required']);
        exit();
    }

    $stmt = $conn->prepare("INSERT INTO bookings (user_id, name, email, phone, service, date, time) VALUES (?, ?, ?, ?, ?, ?, ?)");
    $stmt->bind_param("issssss", $user_id, $name, $email, $phone, $service, $date, $time);

    if ($stmt->execute()) {
        echo json_encode(['success' => true, 'message' => 'Booking confirmed', 'booking_id' => $conn->insert_id]);
    } else {
        http_response_code(500);
        echo json_encode(['success' => false, 'message' => 'Booking failed']);
    }
}
?>