<?php
require_once(__DIR__ . '/../inc/config.php');
require_once(__DIR__ . '/_admin_inc.php'); // checks session and user id; die() if not admin

// csrf check
require_once(__DIR__ . '/_admin_inc_request_with_ajax.php');

$place_id = $_POST['place_id'];
$paid = $_POST['paid'];

if($paid == 'paid'){
	$query = "UPDATE places SET paid = 0 WHERE place_id= :place_id";
	$paid = $txt_unpaid;
}
else {
	$query = "UPDATE places SET paid = 1 WHERE place_id= :place_id";
	$paid = $txt_paid;
}

$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();

echo $paid;