Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
includes	[ DIR ]	drwxr-xr-x	2026-03-11 22:58
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
404.php	5.09 KB	-rw-r--r--	2026-03-12 12:29
admin-profile.php	4.68 KB	-rw-r--r--	2026-03-13 19:31
assignments.php	20.91 KB	-rw-r--r--	2026-03-30 15:12
deposits.php	8.48 KB	-rw-r--r--	2026-03-12 13:18
error_log	3.7 KB	-rw-r--r--	2026-03-23 09:01
index.php	137 B	-rw-r--r--	2026-03-12 12:26
index_real.php	3.95 KB	-rw-r--r--	2026-03-13 19:31
login.php	2.46 KB	-rw-r--r--	2026-03-13 19:32
logout.php	88 B	-rw-r--r--	2026-03-11 22:57
maintenance.php	3.68 KB	-rw-r--r--	2026-03-12 12:35
payment-methods.php	7.03 KB	-rw-r--r--	2026-03-12 12:35
plans.php	7.85 KB	-rw-r--r--	2026-03-12 12:35
referrals.php	4.91 KB	-rw-r--r--	2026-03-31 10:44
settings.php	17.83 KB	-rw-r--r--	2026-03-31 10:21
tickets.php	9.89 KB	-rw-r--r--	2026-03-12 13:15
users.php	19.8 KB	-rw-r--r--	2026-03-29 05:10
withdraw-methods.php	8.28 KB	-rw-r--r--	2026-03-12 15:17
withdrawals.php	6.26 KB	-rw-r--r--	2026-03-12 15:18
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
require_once '../includes/config.php';
require_once 'includes/header.php';
require_once 'includes/sidebar.php';

$error = '';
$success = '';

if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['action'])) {
    $withdraw_id = (int)$_POST['withdraw_id'];
    $action = $_POST['action'];

$stmt = $pdo->prepare("SELECT w.*, u.balance FROM withdrawals w JOIN users u ON w.user_id = u.id WHERE w.id = ? AND w.status = 'pending'");
    $stmt->execute([$withdraw_id]);
    $withdrawal = $stmt->fetch();

if ($withdrawal) {
        if ($action == 'approve') {
            try {
                $pdo->beginTransaction();

// Approve
                $pdo->prepare("UPDATE withdrawals SET status = 'approved', approved_at = CURRENT_TIMESTAMP WHERE id = ?")->execute([$withdraw_id]);

// Update total withdrawn only (balance was already deducted on request)
                $pdo->prepare("UPDATE users SET total_withdrawn = total_withdrawn + ? WHERE id = ?")->execute([$withdrawal['amount'], $withdrawal['user_id']]);

// No need to record transaction here as it was recorded in 'user/withdraw.php' when submitted
                // However, we can update the description or status if we wanted. 
                // Currently, a record already exists with 'withdrawal' type.

$pdo->commit();
                $success = "Withdrawal approved successfully.";
            }
            catch (Exception $e) {
                $pdo->rollBack();
                $error = "Error: " . $e->getMessage();
            }
        }
        elseif ($action == 'reject') {
            try {
                $pdo->beginTransaction();

// Reject
                $pdo->prepare("UPDATE withdrawals SET status = 'rejected', approved_at = CURRENT_TIMESTAMP WHERE id = ?")->execute([$withdraw_id]);

// Refund balance
                $pdo->prepare("UPDATE users SET balance = balance + ? WHERE id = ?")->execute([$withdrawal['amount'], $withdrawal['user_id']]);

// Record refund transaction
                $pdo->prepare("INSERT INTO transactions (user_id, type, amount, description) VALUES (?, 'deposit', ?, 'Withdrawal rejected - funds returned')")->execute([$withdrawal['user_id'], $withdrawal['amount']]);

$pdo->commit();
                $success = "Withdrawal rejected and funds refunded to user balance.";
            }
            catch (Exception $e) {
                $pdo->rollBack();
                $error = "Error: " . $e->getMessage();
            }
        }
    }
    else {
        $error = "Withdrawal not found or already processed.";
    }
}

$stmt = $pdo->query("SELECT w.*, u.full_name, u.email, m.bank_name FROM withdrawals w JOIN users u ON w.user_id = u.id JOIN withdraw_methods m ON w.method_id = m.id WHERE w.status = 'pending' ORDER BY w.id ASC");
$withdrawals = $stmt->fetchAll();

<h2 style="margin-bottom:30px;">Pending Withdrawals</h2>

<?php if ($error): ?>
    <div class="badge badge-danger" style="display:block; margin-bottom:20px; text-align:center; padding:15px; border-radius:8px;"><?php echo htmlspecialchars($error); ?></div>
<?php
endif; ?>
<?php if ($success): ?>
    <div class="badge badge-success" style="display:block; margin-bottom:20px; text-align:center; padding:15px; border-radius:8px;"><?php echo htmlspecialchars($success); ?></div>
<?php
endif; ?>

<div class="card" style="padding:20px; overflow-x:auto;">
    <table class="admin-table">
        <thead>
            <tr>
                <th>Req ID</th>
                <th>User / Email</th>
                <th>Account Details</th>
                <th>Method</th>
                <th>Amount</th>
                <th>Requested On</th>
                <th>Actions</th>
            </tr>
        </thead>
        <tbody>
            <?php foreach ($withdrawals as $w): ?>
                <tr>
                    <td><?php echo $w['id']; ?></td>
                    <td><div style="font-weight:600;"><?php echo htmlspecialchars($w['full_name']); ?></div><div style="font-size:0.8rem; color:var(--text-muted);"><?php echo htmlspecialchars($w['email']); ?></div></td>
                    <td>
                        <?php if(!empty($w['user_bank_name'])): ?>
                            <div style="font-size:0.8rem; color:var(--text-muted); text-transform:uppercase; letter-spacing:1px;"><?php echo htmlspecialchars($w['user_bank_name']); ?></div>
                        <?php endif; ?>
                        <div style="font-size:0.9rem; font-weight:600;"><?php echo htmlspecialchars($w['user_account_name']); ?></div>
                        <div style="font-size:0.85rem; color:var(--primary-color); font-family:monospace;"><?php echo htmlspecialchars($w['user_account_number']); ?></div>
                    </td>
                    <td><span class="badge badge-pending"><?php echo htmlspecialchars($w['bank_name']); ?></span></td>
                    <td style="color:var(--primary-color); font-weight:700;">Rs <?php echo number_format($w['amount'], 2); ?></td>
                    <td><?php echo date('d M, Y h:i A', strtotime($w['requested_at'])); ?></td>
                    <td>
                        <form method="POST" style="display:inline;">
                            <input type="hidden" name="withdraw_id" value="<?php echo $w['id']; ?>">
                            <button type="submit" name="action" value="approve" class="btn-primary" style="padding:5px 10px; font-size:0.8rem; background:#27ae60; box-shadow:none;">Approve</button>
                            <button type="submit" name="action" value="reject" class="btn-outline" style="padding:5px 10px; font-size:0.8rem; border-color:#e74c3c; color:#e74c3c;">Reject</button>
                        </form>
                    </td>
                </tr>
            <?php
endforeach; ?>
            <?php if (empty($withdrawals)): ?>
                <tr><td colspan="7" style="text-align:center; padding:30px; color:var(--text-muted);"><i class="fas fa-check" style="font-size:2rem; display:block; margin-bottom:10px;"></i>No pending withdrawal requests.</td></tr>
            <?php
endif; ?>
        </tbody>
    </table>
</div>

<?php require_once 'includes/footer.php'; ?>