Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
ads.php	10.11 KB	-rw-r--r--	2025-12-22 20:20
announcements.php	8.13 KB	-rw-r--r--	2025-12-25 17:46
banners.php	9.86 KB	-rw-r--r--	2025-12-22 19:19
boosts.php	5.51 KB	-rw-r--r--	2025-12-24 21:41
daily_targets.php	11.29 KB	-rw-r--r--	2025-12-26 07:59
dashboard.php	9.23 KB	-rw-r--r--	2025-12-25 12:46
deposits.php	13.59 KB	-rw-r--r--	2026-01-26 16:58
dpin_requests.php	7.43 KB	-rw-r--r--	2025-12-24 21:41
dpins.php	9.37 KB	-rw-r--r--	2025-12-23 19:48
error_log	1.14 KB	-rw-r--r--	2026-01-07 16:39
footer.php	122 B	-rw-r--r--	2025-12-25 18:15
header.php	6.83 KB	-rw-r--r--	2026-01-26 17:15
login.php	4.42 KB	-rw-r--r--	2026-01-26 17:46
lucky_wheel.php	24.12 KB	-rw-r--r--	2026-01-26 16:57
orders.php	12.63 KB	-rw-r--r--	2026-01-07 16:27
payment_methods.php	6.53 KB	-rw-r--r--	2025-12-23 19:24
plans.php	22.86 KB	-rw-r--r--	2025-12-29 11:03
products.php	10.72 KB	-rw-r--r--	2026-01-07 16:15
ranks.php	7.31 KB	-rw-r--r--	2025-12-25 16:48
referrals.php	8.7 KB	-rw-r--r--	2025-12-25 12:43
return.php	440 B	-rw-r--r--	2025-12-29 13:55
settings.php	10.77 KB	-rw-r--r--	2026-01-07 16:26
tickets.php	11.98 KB	-rw-r--r--	2025-12-22 19:21
users.php	18.1 KB	-rw-r--r--	2025-12-29 13:53
withdraws.php	11.42 KB	-rw-r--r--	2025-12-24 22:29
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
define('ADMIN_PANEL', true);
require_once '../includes/config.php';
requireAdmin();

$page_title = 'Manage Withdrawals';
$pkrRate = (float) getSetting('pkr_rate', '280');

// Handle withdrawal approval/rejection
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $withdrawId = intval($_POST['withdraw_id']);
    $action = $_POST['action'];
    $transactionId = trim($_POST['transaction_id'] ?? '');
    $adminNote = trim($_POST['admin_note'] ?? '');

try {
        $pdo->beginTransaction();

// Get withdrawal details
        $stmt = $pdo->prepare("SELECT * FROM withdraw_requests WHERE id = ?");
        $stmt->execute([$withdrawId]);
        $withdrawal = $stmt->fetch();

if (!$withdrawal) {
            throw new Exception("Withdrawal not found");
        }

if ($action === 'approve') {
            if (empty($transactionId)) {
                throw new Exception("Transaction ID is required for approval");
            }

// Update withdrawal status
            $stmt = $pdo->prepare("
                UPDATE withdraw_requests 
                SET status = 'approved', transaction_id = ?, admin_note = ? 
                WHERE id = ?
            ");
            $stmt->execute([$transactionId, $adminNote, $withdrawId]);

// Update user's total withdraw
            $stmt = $pdo->prepare("
                UPDATE users 
                SET total_withdraw = total_withdraw + ? 
                WHERE id = ?
            ");
            $stmt->execute([$withdrawal['amount'], $withdrawal['user_id']]);

$pdo->commit();
            setSuccess("Withdrawal approved successfully!");

} elseif ($action === 'reject') {
            // Update withdrawal status
            $stmt = $pdo->prepare("
                UPDATE withdraw_requests 
                SET status = 'rejected', admin_note = ? 
                WHERE id = ?
            ");
            $stmt->execute([$adminNote, $withdrawId]);

// Return amount to user's wallet
            $stmt = $pdo->prepare("
                UPDATE users 
                SET wallet_balance = wallet_balance + ? 
                WHERE id = ?
            ");
            $stmt->execute([$withdrawal['amount'], $withdrawal['user_id']]);

$pdo->commit();
            setSuccess("Withdrawal rejected and amount returned to user!");
        }

} catch (Exception $e) {
        $pdo->rollBack();
        setError($e->getMessage());
    }

header('Location: withdraws.php');
    exit;
}

// Get all withdrawals
$filter = $_GET['filter'] ?? 'all';
$query = "
    SELECT w.*, u.full_name, u.email
    FROM withdraw_requests w
    JOIN users u ON w.user_id = u.id
";

if ($filter === 'pending') {
    $query .= " WHERE w.status = 'pending'";
} elseif ($filter === 'approved') {
    $query .= " WHERE w.status = 'approved'";
} elseif ($filter === 'rejected') {
    $query .= " WHERE w.status = 'rejected'";
}

$query .= " ORDER BY w.created_at DESC";

$stmt = $pdo->query($query);
$withdrawals = $stmt->fetchAll();

include 'header.php';
?>

<?php
$success = getSuccess();
if ($success) {
    echo '<div class="alert alert-success"><i class="fas fa-check-circle"></i> ' . htmlspecialchars($success) . '</div>';
}

$error = getError();
if ($error) {
    echo '<div class="alert alert-danger"><i class="fas fa-exclamation-circle"></i> ' . htmlspecialchars($error) . '</div>';
}
?>

<div class="card">
    <div class="card-body">
        <div style="display: flex; gap: 10px; flex-wrap: wrap;">
            <a href="withdraws.php?filter=all"
                class="btn btn-<?php echo $filter === 'all' ? 'primary' : 'secondary'; ?>">
                All
            </a>
            <a href="withdraws.php?filter=pending"
                class="btn btn-<?php echo $filter === 'pending' ? 'warning' : 'secondary'; ?>">
                Pending
            </a>
            <a href="withdraws.php?filter=approved"
                class="btn btn-<?php echo $filter === 'approved' ? 'success' : 'secondary'; ?>">
                Approved
            </a>
            <a href="withdraws.php?filter=rejected"
                class="btn btn-<?php echo $filter === 'rejected' ? 'danger' : 'secondary'; ?>">
                Rejected
            </a>
        </div>
    </div>
</div>

<div class="card">
    <div class="card-header">
        <i class="fas fa-hand-holding-usd"></i> Withdrawals (<?php echo count($withdrawals); ?>)
    </div>
    <div class="card-body">
        <?php if (empty($withdrawals)): ?>
            <p style="color: var(--text-secondary); text-align: center;">No withdrawals found.</p>
        <?php else: ?>
            <div style="max-height: 900px; overflow-y: auto; padding-right: 5px;">
                <?php foreach ($withdrawals as $withdrawal): ?>
                    <div class="card" style="margin-bottom: 15px; background: var(--dark-bg);">
                        <div class="card-body">
                            <div style="display: flex; justify-content: space-between; margin-bottom: 15px;">
                                <div>
                                    <h4 style="color: var(--text-primary); margin-bottom: 5px;">
                                        <?php echo htmlspecialchars($withdrawal['full_name']); ?>
                                    </h4>
                                    <p style="color: var(--text-secondary); margin: 0; font-size: 12px;">
                                        <?php echo htmlspecialchars($withdrawal['email']); ?>
                                    </p>
                                </div>
                                <div style="text-align: right;">
                                    <div style="font-size: 18px; font-weight: bold; color: var(--danger-color);">
                                        <?php echo number_format($withdrawal['amount'] * $pkrRate, 2); ?> PKR
                                    </div>
                                    <div style="font-size: 14px; color: var(--text-secondary);">
                                        (<?php echo formatCurrency($withdrawal['amount']); ?>)
                                    </div>
                                    <?php
                                    $badgeClass = 'warning';
                                    if ($withdrawal['status'] === 'approved')
                                        $badgeClass = 'success';
                                    if ($withdrawal['status'] === 'rejected')
                                        $badgeClass = 'danger';
                                    ?>
                                    <span class="badge badge-<?php echo $badgeClass; ?>">
                                        <?php echo ucfirst($withdrawal['status']); ?>
                                    </span>
                                </div>
                            </div>

<div style="margin-bottom: 15px;">
                                <p style="color: var(--text-secondary); margin-bottom: 5px;">
                                    <i class="fas fa-mobile-alt"></i> Method:
                                    <strong><?php echo htmlspecialchars($withdrawal['method']); ?></strong>
                                    <?php if ($withdrawal['bank_name']): ?>
                                        <span style="color: var(--primary-color);">
                                            (<?php echo htmlspecialchars($withdrawal['bank_name']); ?>)</span>
                                    <?php endif; ?>
                                </p>
                                <p style="color: var(--text-secondary); margin-bottom: 5px;">
                                    <i class="fas fa-hashtag"></i> Account:
                                    <strong><?php echo htmlspecialchars($withdrawal['account_number']); ?></strong>
                                </p>
                                <p style="color: var(--text-secondary); margin-bottom: 5px;">
                                    <i class="fas fa-user"></i> Name:
                                    <strong><?php echo htmlspecialchars($withdrawal['account_name']); ?></strong>
                                </p>
                                <?php if ($withdrawal['transaction_id']): ?>
                                    <p style="color: var(--text-secondary); margin-bottom: 5px;">
                                        <i class="fas fa-receipt"></i> Transaction ID:
                                        <strong><?php echo htmlspecialchars($withdrawal['transaction_id']); ?></strong>
                                    </p>
                                <?php endif; ?>
                                <?php if ($withdrawal['admin_note']): ?>
                                    <p style="color: var(--text-secondary); margin-bottom: 5px;">
                                        <i class="fas fa-sticky-note"></i> Note:
                                        <?php echo htmlspecialchars($withdrawal['admin_note']); ?>
                                    </p>
                                <?php endif; ?>
                                <p style="color: var(--text-secondary); margin: 0;">
                                    <i class="fas fa-calendar"></i> Date:
                                    <?php echo date('M d, Y H:i', strtotime($withdrawal['created_at'])); ?>
                                </p>
                            </div>

<?php if ($withdrawal['status'] === 'pending'): ?>
                                <form method="POST" action="" style="display: flex; gap: 10px; flex-direction: column;">
                                    <input type="hidden" name="withdraw_id" value="<?php echo $withdrawal['id']; ?>">

<div style="display: grid; grid-template-columns: repeat(2, 1fr); gap: 10px;">
                                        <button type="submit" name="action" value="approve" class="btn btn-success">
                                            <i class="fas fa-check"></i> Approve
                                        </button>
                                        <button type="submit" name="action" value="reject" class="btn btn-danger">
                                            <i class="fas fa-times"></i> Reject
                                        </button>
                                    </div>
                                </form>
                            <?php endif; ?>
                        </div>
                    </div>
                <?php endforeach; ?>
            </div>
        <?php endif; ?>
    </div>
</div>

<?php include 'footer.php'; ?>