<?php
session_start();
if (!isset($_SESSION['loggedin'])) {
    exit("unauthorized");
}

include "../database.php";

$bacheca_id = $_POST["bacheca_id"];
$bacheca_object = $_POST["bacheca_object"];
$bacheca_body = $_POST["bacheca_body"];

$nl = ["\r\n","\n","\r"];
$body = str_replace($nl, '<br>', $bacheca_body);
$datetime    = date("Y-m-d H:i:s");

$sql_update = "UPDATE bacheca SET object = '$bacheca_object', body = '$body' WHERE id = $bacheca_id";
if ($con->query($sql_update) === true) {
    $sql        = "SELECT * FROM bacheca ORDER BY id DESC LIMIT 1";
    $result     = mysqli_query($con, $sql);
    $first_bacheca = mysqli_fetch_assoc($result);
    echo $first_bacheca["id"];
} else {
    echo "error";
}

$con->close();
