Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
includes	[ DIR ]	drwxr-xr-x	2026-03-11 22:58
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
404.php	5.09 KB	-rw-r--r--	2026-03-12 12:29
admin-profile.php	4.68 KB	-rw-r--r--	2026-03-13 19:31
assignments.php	20.91 KB	-rw-r--r--	2026-03-30 15:12
deposits.php	8.48 KB	-rw-r--r--	2026-03-12 13:18
error_log	3.7 KB	-rw-r--r--	2026-03-23 09:01
index.php	137 B	-rw-r--r--	2026-03-12 12:26
index_real.php	3.95 KB	-rw-r--r--	2026-03-13 19:31
login.php	2.46 KB	-rw-r--r--	2026-03-13 19:32
logout.php	88 B	-rw-r--r--	2026-03-11 22:57
maintenance.php	3.68 KB	-rw-r--r--	2026-03-12 12:35
payment-methods.php	7.03 KB	-rw-r--r--	2026-03-12 12:35
plans.php	7.85 KB	-rw-r--r--	2026-03-12 12:35
referrals.php	4.91 KB	-rw-r--r--	2026-03-31 10:44
settings.php	17.83 KB	-rw-r--r--	2026-03-31 10:21
tickets.php	9.89 KB	-rw-r--r--	2026-03-12 13:15
users.php	19.8 KB	-rw-r--r--	2026-03-29 05:10
withdraw-methods.php	8.28 KB	-rw-r--r--	2026-03-12 15:17
withdrawals.php	6.26 KB	-rw-r--r--	2026-03-12 15:18
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
require_once '../includes/config.php';
$error = '';
$success = $_SESSION['success'] ?? '';
unset($_SESSION['success']);

// Handle approvals/rejections
if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['action'])) {
    $deposit_id = (int)$_POST['deposit_id'];
    $action = $_POST['action'];

$stmt = $pdo->prepare("SELECT d.*, u.full_name, p.price, p.validity_type, p.validity_days FROM deposits d JOIN users u ON d.user_id = u.id JOIN plans p ON d.plan_id = p.id WHERE d.id = ? AND d.status = 'pending'");
    $stmt->execute([$deposit_id]);
    $deposit = $stmt->fetch();

if ($deposit) {
        $user_id = $deposit['user_id'];
        $plan_id = $deposit['plan_id'];
        $plan_price = $deposit['price'];

if ($action == 'approve') {
            try {
                $pdo->beginTransaction();

// 1. Update deposit status
                $pdo->prepare("UPDATE deposits SET status = 'approved', reviewed_at = CURRENT_TIMESTAMP WHERE id = ?")->execute([$deposit_id]);

// 2. Activate user
                $pdo->prepare("UPDATE users SET status = 'active' WHERE id = ?")->execute([$user_id]);

// 3. Insert user plan
                $expires_at = null;
                if ($deposit['validity_type'] == 'days') {
                    $expires_at = date('Y-m-d H:i:s', strtotime("+" . $deposit['validity_days'] . " days"));
                }
                $pdo->prepare("INSERT INTO user_plans (user_id, plan_id, status, expires_at) VALUES (?, ?, 'active', ?)")->execute([$user_id, $plan_id, $expires_at]);

// 4. Record transaction
                $pdo->prepare("INSERT INTO transactions (user_id, type, amount, description) VALUES (?, 'plan_purchase', ?, 'Purchased active plan from deposit')")->execute([$user_id, $plan_price]);

// 5. Handle Referrals
                $user_stmt = $pdo->prepare("SELECT referred_by FROM users WHERE id = ?");
                $user_stmt->execute([$user_id]);
                $referred_by = $user_stmt->fetchColumn();

if ($referred_by) {
                    $settings_stmt = $pdo->query("SELECT setting_key, setting_value FROM site_settings");
                    $settings = [];
                    while ($row = $settings_stmt->fetch()) {
                        $settings[$row['setting_key']] = $row['setting_value'];
                    }

$commissions = json_decode($settings['referral_commissions'] ?? '{"1": 10, "2": 5, "3": 2}', true) ?: [];
                    if (!is_array($commissions))
                        $commissions = ["1" => 10, "2" => 5, "3" => 2];
                    $max_levels = (int)($settings['referral_levels'] ?? 3);

$current_referrer = $referred_by;
                    $level = 1;

while ($current_referrer && $level <= $max_levels) {
                        // Check if referrer is active
                        $ref_status = $pdo->prepare("SELECT status, referred_by FROM users WHERE id = ?");
                        $ref_status->execute([$current_referrer]);
                        $ref = $ref_status->fetch();

if ($ref && $ref['status'] == 'active') {
                            $percent = $commissions[(string)$level] ?? 0;
                            if ($percent > 0) {
                                $com_amount = ($plan_price * $percent) / 100;

// Insert referral record
                                $pdo->prepare("INSERT INTO referrals (referrer_id, referred_id, level, commission_earned) VALUES (?, ?, ?, ?)")->execute([$current_referrer, $user_id, $level, $com_amount]);

// Update referrer balance and transaction
                                $pdo->prepare("UPDATE users SET balance = balance + ?, total_earned = total_earned + ? WHERE id = ?")->execute([$com_amount, $com_amount, $current_referrer]);
                                $pdo->prepare("INSERT INTO transactions (user_id, type, amount, description) VALUES (?, 'referral_commission', ?, ?)")->execute([$current_referrer, $com_amount, "Level $level Commission from " . $deposit['full_name']]);
                            }
                        }

if (!$ref)
                            break;
                        $current_referrer = $ref['referred_by'];
                        $level++;
                    }
                }

$pdo->commit();
                $_SESSION['success'] = "Deposit approved and user activated.";
                header("Location: deposits.php");
                exit;
            }
            catch (Exception $e) {
                $pdo->rollBack();
                $error = "Error processing approval: " . $e->getMessage();
            }
        }
        elseif ($action == 'reject') {
            $pdo->prepare("UPDATE deposits SET status = 'rejected', reviewed_at = CURRENT_TIMESTAMP WHERE id = ?")->execute([$deposit_id]);
            $_SESSION['success'] = "Deposit rejected successfully.";
            header("Location: deposits.php");
            exit;
        }
    }
}

// Now include visual elements before output
require_once 'includes/header.php';
require_once 'includes/sidebar.php';

// Fetch pending deposits
$stmt = $pdo->query("SELECT d.*, u.full_name, u.email, p.name as plan_name, p.price FROM deposits d JOIN users u ON d.user_id = u.id JOIN plans p ON d.plan_id = p.id WHERE d.status = 'pending' ORDER BY d.id ASC");
$deposits = $stmt->fetchAll();

<h2 style="margin-bottom:30px;">Pending Deposits</h2>

<?php if ($error): ?>
    <div class="badge badge-danger" style="display:block; margin-bottom:20px; text-align:center; padding:15px; border-radius:8px;"><?php echo htmlspecialchars($error); ?></div>
<?php
endif; ?>
<?php if ($success): ?>
    <div class="badge badge-success" style="display:block; margin-bottom:20px; text-align:center; padding:15px; border-radius:8px;"><?php echo htmlspecialchars($success); ?></div>
<?php
endif; ?>

<div class="card" style="overflow-x:auto;">
    <table class="admin-table">
        <thead>
            <tr>
                <th>ID</th>
                <th>User Name</th>
                <th>Email</th>
                <th>Plan Name</th>
                <th>Amount</th>
                <th>Payment Proof</th>
                <th>Submitted At</th>
                <th>Actions</th>
            </tr>
        </thead>
        <tbody>
            <?php foreach ($deposits as $d): ?>
                <tr>
                    <td><?php echo $d['id']; ?></td>
                    <td style="font-weight:600;"><?php echo htmlspecialchars($d['full_name']); ?></td>
                    <td><?php echo htmlspecialchars($d['email']); ?></td>
                    <td><span class="badge badge-pending"><?php echo htmlspecialchars($d['plan_name']); ?></span></td>
                    <td style="color:var(--primary-color); font-weight:600;">Rs <?php echo number_format($d['price'], 2); ?></td>
                    <td>
                        <a href="<?php echo htmlspecialchars($d['payment_proof']); ?>" target="_blank" class="btn-outline" style="padding:5px 10px; font-size:0.8rem;">View Proof</a>
                    </td>
                    <td><?php echo date('M d, Y h:i A', strtotime($d['submitted_at'])); ?></td>
                    <td>
                        <form method="POST" style="display:inline;">
                            <input type="hidden" name="deposit_id" value="<?php echo $d['id']; ?>">
                            <button type="submit" name="action" value="approve" class="btn-primary" style="padding:5px 10px; font-size:0.8rem; border-color:#27ae60; background:#27ae60; box-shadow:none;">Approve</button>
                            <button type="submit" name="action" value="reject" class="btn-outline" style="padding:5px 10px; font-size:0.8rem; border-color:#e74c3c; color:#e74c3c; margin-left:5px;">Reject</button>
                        </form>
                    </td>
                </tr>
            <?php
endforeach; ?>
            <?php if (empty($deposits)): ?>
                <tr><td colspan="8" style="text-align:center; padding:30px; color:var(--text-muted);"><i class="fas fa-check-circle" style="font-size:2rem; display:block; margin-bottom:10px;"></i>No pending deposits to review.</td></tr>
            <?php
endif; ?>
        </tbody>
    </table>
</div>

<?php require_once 'includes/footer.php'; ?>