<?php
include '../db/db.php';
include '../includes/session_control.php';

ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

if (!isset($_SESSION['user'])) {
    header('Content-Type: application/json');
    echo json_encode(['error' => 'User not authenticated']);
    exit;
}

$field = $conn->real_escape_string($_POST['field'] ?? '');
$id = $conn->real_escape_string($_POST['id'] ?? '');
$value = $conn->real_escape_string($_POST['value'] ?? '');

if (!$field || !$id || !$value) {
    header('Content-Type: application/json');
    echo json_encode(['error' => 'Missing parameters']);
    exit;
}

$sql = "UPDATE tb_cotizacion_detalle SET $field = '$value' WHERE id = '$id'";

if ($conn->query($sql) === TRUE) {
    header('Content-Type: application/json');
    echo json_encode(['success' => 'Detalle de cotización actualizado']);
} else {
    header('Content-Type: application/json');
    echo json_encode(['error' => $conn->error]);
}
exit;
?>