<?php
session_start();
$usuarioSession = $_SESSION['USUARIO'];
$grupo = $_SESSION['GRUPO'];
$contacto = $_SESSION['CONTACTO'];
$awa_session_id = $_SESSION['AWA_SESION_ID'];
include('../includes/conex.php');
include('../includes/eat.php');
include('../includes/historial.php');
if(!isset($usuarioSession) or $awa_session_id != $awa_id)
{
    eatCookies();
    header('Location:../index.php');
}
if(isset($_COOKIE['usuario']) AND $_COOKIE['usuario'] != $staticUsu )
{
    eatCookies();
    header('Loction:../index.php');
}
if(isset($_COOKIE['idioma']))
{
    include('../lg/LG_' . $_COOKIE['idioma'] . '.php');
}
else
{
    include('../lg/LG_SP.php');
}
$variable = "";
$codigo = $_SESSION['CODIGO_COCHE'];
$tipo = "VO";
$variable .= " SET TIPO = '$tipo',";
$idcar = htmlspecialchars(mysqli_real_escape_string($con,$_POST['idcar']));
$variable .= " IDCAR = '$idcar',";
$marca = htmlspecialchars(mysqli_real_escape_string($con,$_POST['marca']));
$variable .= " MARCA = $marca,";
$modelo = htmlspecialchars(mysqli_real_escape_string($con,$_POST['modelo']));
$variable .= " MODELO = $modelo,";
$dist_amb = htmlspecialchars(mysqli_real_escape_string($con,$_POST['dist_amb']));
$variable .= " DISTINTIVO_AMB = $dist_amb,";
$matricula = htmlspecialchars(mysqli_real_escape_string($con,$_POST['matricula']));
$variable .= " MATRICULA = '$matricula',";
$color_literal = htmlspecialchars(mysqli_real_escape_string($con,$_POST['color_literal']));
$variable .= " COLORPRI_LIT = '$color_literal',";
if(isset($_POST['anoFab']))
{
    $anoFab = htmlspecialchars(mysqli_real_escape_string($con,$_POST['anoFab']));
    $variable .= " ANO_FAB = $anoFab,";
}
if(isset($_POST['fecha_matriculacion']))
{
    $fecha_matriculacion = htmlspecialchars(mysqli_real_escape_string($con,$_POST['fecha_matriculacion']));
    $variable .= " MATRICULACION = '$fecha_matriculacion',";
}
if(isset($_POST['bastidor']))
{
    $bastidor = htmlspecialchars(mysqli_real_escape_string($con,$_POST['bastidor']));
    $variable .= " BASTIDOR = '$bastidor',";    
}
$km = htmlspecialchars(mysqli_real_escape_string($con,$_POST['km']));
$variable .= " KM = $km,";   
$carroceria = htmlspecialchars(mysqli_real_escape_string($con,$_POST['carroceria']));
$variable .= " CARROCERIA = $carroceria,";
if(isset($_POST['version']))
{
    $version = htmlspecialchars(mysqli_real_escape_string($con,$_POST['version']));
    $variable .= " VERSION = '$version',";
}
$cajacambio = htmlspecialchars(mysqli_real_escape_string($con,$_POST['cajacambio']));
$variable .= " CAJACAMBIOS = $cajacambio,";
$combustible = htmlspecialchars(mysqli_real_escape_string($con,$_POST['combustible']));
$variable .= " COMBUSTIBLE = $combustible,"; 
$color = htmlspecialchars(mysqli_real_escape_string($con,$_POST['color']));
$variable .= " COLOR_PRINCIPAL = $color,";
if(!empty($_POST['garantia']))
{
    $garantia = htmlspecialchars(mysqli_real_escape_string($con,$_POST['garantia']));
    $variable .= " GARANTIA = $garantia,";
}
if(isset($_POST['col_com']))
{
    $col_com = htmlspecialchars(mysqli_real_escape_string($con,$_POST['col_com']));
    $variable .= " COLOR_COMERCIAL = $col_com,";
}
$sql = "SELECT M.DESCRIPCION AS MARCA_TITULO, MO.DESCRIPCION AS MODELO_TITULO
FROM VEHICULOS_MARCAS M, VEHICULOS_MODELOS MO
WHERE M.CODIGO = $marca AND MO.CODIGO = $modelo";
$res = $con->query($sql);
$fila = $res->fetch_array();
$mostrar = "$idcar - " . $fila['MARCA_TITULO'] . " - " . $fila['MODELO_TITULO'] . " - $matricula";
$variable .= " MOSTRAR = '$mostrar'";
$sql = "UPDATE VEHICULOS $variable
WHERE CODIGO = $codigo";
$con->query($sql);
historial($con,2,$codigo,$datos_principales_lg);
$_SESSION['edit'] = 1;  
header("Location:../resultados-editar.php");

?>