orders_save.php

<?php
require_once 'includes/auth.php';
require_login();
require_csrf();
require_once 'includes/db.php';

try {
    $stmt = $pdo->prepare("INSERT INTO orders
    (beleg, pos, artikel, bezeichnung_artikel, menge, liefermenge, versendet, verpackt, in_produktion, offen, liefertermin, verwendung, kommentar)
    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
    $stmt->execute([
      $_POST['beleg'] ?? null,
      $_POST['pos'] ?? null,
      $_POST['artikel'] ?? null,
      $_POST['bezeichnung_artikel'] ?? null,
      $_POST['menge'] ?? null,
      $_POST['liefermenge'] ?? null,
      $_POST['versendet'] ?? null,
      $_POST['verpackt'] ?? null,
      $_POST['in_produktion'] ?? null,
      $_POST['offen'] ?? null,
      $_POST['liefertermin'] ?? null,
      $_POST['verwendung'] ?? null,
      $_POST['kommentar'] ?? null
    ]);
    echo json_encode(['success' => true]);
} catch (PDOException $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
}