Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
ads.php	15.26 KB	-rw-r--r--	2025-10-18 22:42
dashboard.php	22.01 KB	-rw-r--r--	2025-10-18 22:49
deposit_history.php	4.14 KB	-rw-r--r--	2025-10-18 21:52
deposit_methods.php	11.74 KB	-rw-r--r--	2025-10-18 21:52
deposits.php	12.91 KB	-rw-r--r--	2025-10-18 21:52
dpin_details.php	4.52 KB	-rw-r--r--	2025-10-18 22:26
dpin_management.php	10.04 KB	-rw-r--r--	2025-10-18 21:52
dpin_send.php	6 KB	-rw-r--r--	2025-10-18 22:26
footer.php	148 B	-rw-r--r--	2025-10-18 21:50
header.php	8.2 KB	-rw-r--r--	2025-10-18 22:54
login.php	6.11 KB	-rw-r--r--	2025-10-18 21:41
logout.php	88 B	-rw-r--r--	2025-10-18 21:42
notifications.php	9.34 KB	-rw-r--r--	2025-10-18 21:54
plans.php	15.64 KB	-rw-r--r--	2025-10-18 22:42
referral.php	9.89 KB	-rw-r--r--	2025-10-18 21:52
sidebar.php	5.11 KB	-rw-r--r--	2025-10-18 21:50
transactions.php	4.47 KB	-rw-r--r--	2025-10-18 21:53
users.php	12.66 KB	-rw-r--r--	2025-10-18 22:42
withdraw_history.php	4.2 KB	-rw-r--r--	2025-10-18 21:53
withdraw_methods.php	11.89 KB	-rw-r--r--	2025-10-18 21:53
withdrawals.php	13.4 KB	-rw-r--r--	2025-10-18 21:53

Rename

<?php
require_once '../config.php';

// Check if admin is logged in
if (!isset($_SESSION['admin_id'])) {
    header("Location: login.php");
    exit();
}

// Get pending withdrawals
$stmt = $conn->prepare("SELECT w.*, u.name as user_name FROM withdrawals w JOIN users u ON w.user_id = u.id WHERE w.status = 'pending' ORDER BY w.created_at DESC");
$stmt->execute();
$withdrawals_result = $stmt->get_result();
$withdrawals = [];
while ($row = $withdrawals_result->fetch_assoc()) {
    $withdrawals[] = $row;
}

// Handle withdrawal approval/rejection
if (isset($_POST['process_withdrawal'])) {
    $withdrawal_id = intval($_POST['withdrawal_id']);
    $action = sanitize_input($_POST['action']); // approve or reject
    $amount = floatval($_POST['amount']);
    $user_id = intval($_POST['user_id']);
    
    if ($action == 'approve') {
        // Start transaction
        $conn->begin_transaction();
        
        try {
            // Update withdrawal status
            $stmt = $conn->prepare("UPDATE withdrawals SET status = 'approved' WHERE id = ?");
            $stmt->bind_param("i", $withdrawal_id);
            $stmt->execute();
            
            // Add transaction record
            $stmt = $conn->prepare("INSERT INTO transactions (user_id, type, amount, status, description) VALUES (?, 'withdrawal', ?, 'completed', 'Withdrawal approved by admin')");
            $stmt->bind_param("id", $user_id, $amount);
            $stmt->execute();
            
            // Add notification
            $message = "Your withdrawal of " . format_currency($amount) . " has been approved.";
            $stmt = $conn->prepare("INSERT INTO notifications (user_id, message, type) VALUES (?, ?, 'success')");
            $stmt->bind_param("is", $user_id, $message);
            $stmt->execute();
            
            // Commit transaction
            $conn->commit();
            
            header("Location: withdrawals.php?success=approved");
            exit();
        } catch (Exception $e) {
            // Rollback transaction
            $conn->rollback();
            
            header("Location: withdrawals.php?error=approval_failed");
            exit();
        }
    } elseif ($action == 'reject') {
        // Start transaction
        $conn->begin_transaction();
        
        try {
            // Update withdrawal status
            $stmt = $conn->prepare("UPDATE withdrawals SET status = 'rejected' WHERE id = ?");
            $stmt->bind_param("i", $withdrawal_id);
            $stmt->execute();
            
            // Refund amount to user balance
            $stmt = $conn->prepare("UPDATE users SET balance = balance + ? WHERE id = ?");
            $stmt->bind_param("di", $amount, $user_id);
            $stmt->execute();
            
            // Add transaction record
            $stmt = $conn->prepare("INSERT INTO transactions (user_id, type, amount, status, description) VALUES (?, 'withdrawal_refund', ?, 'completed', 'Withdrawal rejected, amount refunded')");
            $stmt->bind_param("id", $user_id, $amount);
            $stmt->execute();
            
            // Add notification
            $message = "Your withdrawal of " . format_currency($amount) . " has been rejected. Amount has been refunded to your balance.";
            $stmt = $conn->prepare("INSERT INTO notifications (user_id, message, type) VALUES (?, ?, 'error')");
            $stmt->bind_param("is", $user_id, $message);
            $stmt->execute();
            
            // Commit transaction
            $conn->commit();
            
            header("Location: withdrawals.php?success=rejected");
            exit();
        } catch (Exception $e) {
            // Rollback transaction
            $conn->rollback();
            
            header("Location: withdrawals.php?error=rejection_failed");
            exit();
        }
    }
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Withdrawal Management - Admin Panel</title>
    <?php include 'header.php'; ?>
</head>
<body>
    <div class="container-fluid">
        <div class="row">
            <?php include 'sidebar.php'; ?>
            
            <main class="col-md-9 ms-sm-auto col-lg-10 main-content">
                <div class="d-flex justify-content-between flex-wrap flex-md-nowrap align-items-center pt-3 pb-2 mb-3 border-bottom">
                    <h1 class="h2">Withdrawal Management</h1>
                </div>
                
                <?php if (isset($_GET['success']) && $_GET['success'] == 'approved'): ?>
                    <div class="alert alert-success">Withdrawal approved successfully.</div>
                <?php endif; ?>
                
                <?php if (isset($_GET['success']) && $_GET['success'] == 'rejected'): ?>
                    <div class="alert alert-success">Withdrawal rejected successfully.</div>
                <?php endif; ?>
                
                <?php if (isset($_GET['error']) && $_GET['error'] == 'approval_failed'): ?>
                    <div class="alert alert-danger">Failed to approve withdrawal.</div>
                <?php endif; ?>
                
                <?php if (isset($_GET['error']) && $_GET['error'] == 'rejection_failed'): ?>
                    <div class="alert alert-danger">Failed to reject withdrawal.</div>
                <?php endif; ?>
                
                <div class="card">
                    <div class="card-header">
                        <h5 class="mb-0">Pending Withdrawals</h5>
                    </div>
                    <div class="card-body">
                        <?php if (empty($withdrawals)): ?>
                            <div class="text-center py-5">
                                <i class="fas fa-file-invoice-dollar fa-3x text-muted mb-3"></i>
                                <h4>No Pending Withdrawals</h4>
                                <p class="mb-0">There are no pending withdrawal requests at the moment.</p>
                            </div>
                        <?php else: ?>
                            <div class="table-responsive">
                                <table class="table table-striped">
                                    <thead>
                                        <tr>
                                            <th>ID</th>
                                            <th>User</th>
                                            <th>Amount</th>
                                            <th>Method</th>
                                            <th>Date</th>
                                            <th>Actions</th>
                                        </tr>
                                    </thead>
                                    <tbody>
                                        <?php foreach ($withdrawals as $withdrawal): ?>
                                            <tr>
                                                <td><?php echo $withdrawal['id']; ?></td>
                                                <td><?php echo htmlspecialchars($withdrawal['user_name']); ?></td>
                                                <td><?php echo format_currency($withdrawal['amount']); ?></td>
                                                <td><?php echo htmlspecialchars($withdrawal['method']); ?></td>
                                                <td><?php echo date('M d, Y H:i', strtotime($withdrawal['created_at'])); ?></td>
                                                <td>
                                                    <button class="btn btn-sm btn-primary" data-bs-toggle="modal" data-bs-target="#processModal<?php echo $withdrawal['id']; ?>">
                                                        Process
                                                    </button>
                                                </td>
                                            </tr>
                                            
                                            
                                            <div class="modal fade" id="processModal<?php echo $withdrawal['id']; ?>" tabindex="-1" aria-labelledby="processModalLabel<?php echo $withdrawal['id']; ?>" aria-hidden="true">
                                                <div class="modal-dialog">
                                                    <div class="modal-content">
                                                        <div class="modal-header">
                                                            <h5 class="modal-title" id="processModalLabel<?php echo $withdrawal['id']; ?>">Process Withdrawal</h5>
                                                            <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                                                        </div>
                                                        <form method="POST">
                                                            <div class="modal-body">
                                                                <input type="hidden" name="withdrawal_id" value="<?php echo $withdrawal['id']; ?>">
                                                                <input type="hidden" name="user_id" value="<?php echo $withdrawal['user_id']; ?>">
                                                                <input type="hidden" name="amount" value="<?php echo $withdrawal['amount']; ?>">
                                                                
                                                                <div class="mb-3">
                                                                    <label class="form-label">User</label>
                                                                    <input type="text" class="form-control" value="<?php echo htmlspecialchars($withdrawal['user_name']); ?>" readonly>
                                                                </div>
                                                                
                                                                <div class="mb-3">
                                                                    <label class="form-label">Amount</label>
                                                                    <input type="text" class="form-control" value="<?php echo format_currency($withdrawal['amount']); ?>" readonly>
                                                                </div>
                                                                
                                                                <div class="mb-3">
                                                                    <label class="form-label">Method</label>
                                                                    <input type="text" class="form-control" value="<?php echo htmlspecialchars($withdrawal['method']); ?>" readonly>
                                                                </div>
                                                                
                                                                <div class="mb-3">
                                                                    <label class="form-label">Details</label>
                                                                    <textarea class="form-control" readonly><?php echo htmlspecialchars($withdrawal['details']); ?></textarea>
                                                                </div>
                                                                
                                                                <div class="mb-3">
                                                                    <label class="form-label">Action</label>
                                                                    <select class="form-select" name="action" required>
                                                                        <option value="approve">Approve</option>
                                                                        <option value="reject">Reject</option>
                                                                    </select>
                                                                </div>
                                                            </div>
                                                            <div class="modal-footer">
                                                                <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
                                                                <button type="submit" name="process_withdrawal" class="btn btn-primary">Process Withdrawal</button>
                                                            </div>
                                                        </form>
                                                    </div>
                                                </div>
                                            </div>
                                        <?php endforeach; ?>
                                    </tbody>
                                </table>
                            </div>
                        <?php endif; ?>
                    </div>
                </div>
            </main>
        </div>
    </div>
    
    <?php include 'footer.php'; ?>
</body>
</html>