prepare("SELECT * FROM expenses WHERE id = :id AND client_id = :client_id"); $stmt->execute(['id' => $expense_id, 'client_id' => $client_id]); $expense = $stmt->fetch(PDO::FETCH_ASSOC); if (!$expense) { $_SESSION['error_message'] = 'Despesa não encontrada.'; header('Location: expenses.php'); exit; } } catch (PDOException $e) { $_SESSION['error_message'] = 'Erro ao buscar despesa.'; header('Location: expenses.php'); exit; } // Lógica para atualizar a despesa if ($_SERVER['REQUEST_METHOD'] === 'POST') { $description = $_POST['description'] ?? ''; $amount = $_POST['amount'] ?? ''; $category = $_POST['category'] ?? ''; $expense_date = $_POST['expense_date'] ?? ''; if (empty($description) || empty($amount) || empty($category) || empty($expense_date)) { $error_message = 'Todos os campos são obrigatórios.'; } else { try { $sql = "UPDATE expenses SET description = :description, amount = :amount, category = :category, expense_date = :expense_date WHERE id = :id AND client_id = :client_id"; $stmt = $pdo->prepare($sql); $stmt->execute([ 'description' => $description, 'amount' => $amount, 'category' => $category, 'expense_date' => $expense_date, 'id' => $expense_id, 'client_id' => $client_id ]); $_SESSION['success_message'] = 'Despesa atualizada com sucesso!'; header('Location: expenses.php'); exit; } catch (PDOException $e) { $error_message = 'Erro ao atualizar a despesa: ' . $e->getMessage(); } } } include __DIR__ . '/includes/header.php'; ?>