Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
qr_codes	[ DIR ]	drwxr-xr-x	2025-11-15 15:55
uploads	[ DIR ]	drwxr-xr-x	2025-11-15 19:42
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
applications.php	10.83 KB	-rw-r--r--	2025-11-15 20:31
dashboard.php	11.46 KB	-rw-r--r--	2025-11-15 20:31
error_log	6.23 KB	-rw-r--r--	2026-03-17 00:48
login.php	3.76 KB	-rw-r--r--	2025-11-15 19:37
logout.php	131 B	-rw-r--r--	2025-11-15 19:37
payments.php	14.71 KB	-rw-r--r--	2025-11-15 20:34
settings.php	17.27 KB	-rw-r--r--	2025-11-15 20:36
transactions.php	7.22 KB	-rw-r--r--	2025-11-15 20:34
user_applications.php	6.77 KB	-rw-r--r--	2025-11-15 19:40
users.php	6.75 KB	-rw-r--r--	2025-11-15 20:31
view_application.php	9.53 KB	-rw-r--r--	2025-11-15 19:39
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
require_once '../config.php';

if (!isAdminLoggedIn()) {
    redirect('login.php');
}

$conn = getDBConnection();
$status = isset($_GET['status']) ? sanitizeInput($_GET['status']) : 'all';

$where = '';
if ($status != 'all') {
    $status = sanitizeSQL($conn, $status);
    $where = "WHERE p.status = '$status'";
}

$payments = $conn->query("SELECT p.*, u.email, a.step1_full_name, a.step2_vehicle_type, a.step2_vehicle_number
                          FROM payments p
                          JOIN users u ON p.user_id = u.id
                          JOIN applications a ON p.application_id = a.id
                          $where
                          ORDER BY p.created_at DESC");

$error = '';
$success = '';

// Handle payment approval/rejection
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action'])) {
    $payment_id = intval($_POST['payment_id'] ?? 0);
    $action = sanitizeInput($_POST['action']);
    
    if ($payment_id > 0 && in_array($action, ['approve', 'reject'])) {
        $payment_status = ($action == 'approve') ? 'paid' : 'rejected';
        $payment_status = sanitizeSQL($conn, $payment_status);
        
        if ($conn->query("UPDATE payments SET status = '$payment_status', payment_date = NOW() WHERE id = $payment_id")) {
            // If approved, generate QR code
            if ($action == 'approve') {
                $payment = $conn->query("SELECT application_id, user_id FROM payments WHERE id = $payment_id")->fetch_assoc();
                $app_id = $payment['application_id'];
                $user_id = $payment['user_id'];
                
                // Get application code for QR
                $app_code_result = $conn->query("SELECT application_code FROM applications WHERE id = $app_id");
                $app_code = $app_code_result->num_rows > 0 ? $app_code_result->fetch_assoc()['application_code'] : $app_id;
                
                // Check if QR already exists
                $qr_check = $conn->query("SELECT id FROM qr_codes WHERE application_id = $app_id");
                if ($qr_check->num_rows == 0) {
                    // Generate QR code using 7-digit application code
                    $qr_data = SITE_URL . "view_qr.php?qr_id=" . $app_code;
                    $qr_filename = 'qr_' . $app_id . '_' . time() . '.png';
                    $qr_path = QR_CODE_DIR . $qr_filename;
                    
                    // Use API to generate QR
                    $qr_api_url = "https://api.qrserver.com/v1/create-qr-code/?size=300x300&data=" . urlencode($qr_data);
                    $qr_code = @file_get_contents($qr_api_url);
                    if ($qr_code && strlen($qr_code) > 0) {
                        // Ensure directory exists
                        if (!file_exists(QR_CODE_DIR)) {
                            mkdir(QR_CODE_DIR, 0777, true);
                        }
                        
                        if (file_put_contents($qr_path, $qr_code)) {
                            // Store full URL path for easy access
                            $qr_path_db = sanitizeSQL($conn, SITE_URL . $qr_path);
                            $qr_data_db = sanitizeSQL($conn, $qr_data);
                            $conn->query("INSERT INTO qr_codes (user_id, application_id, qr_code_path, qr_code_data, is_active) 
                                         VALUES ($user_id, $app_id, '$qr_path_db', '$qr_data_db', 1)");
                        }
                    } else {
                        // Fallback: Store API URL directly
                        $qr_path_db = sanitizeSQL($conn, $qr_api_url);
                        $qr_data_db = sanitizeSQL($conn, $qr_data);
                        $conn->query("INSERT INTO qr_codes (user_id, application_id, qr_code_path, qr_code_data, is_active) 
                                     VALUES ($user_id, $app_id, '$qr_path_db', '$qr_data_db', 1)");
                    }
                } else {
                    // Activate existing QR
                    $conn->query("UPDATE qr_codes SET is_active = 1, activated_at = NOW() WHERE application_id = $app_id");
                }
            }
            
            $success = "Payment $action" . "d successfully!";
        } else {
            $error = "Failed to $action payment.";
        }
    }
}

?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Payments - <?php echo SITE_NAME; ?></title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.0/font/bootstrap-icons.css">
    <style>
        :root {
            --gov-green: #006B3C;
            --gov-green-dark: #004D2A;
            --gov-green-light: #008751;
            --gov-white: #FFFFFF;
            --gov-gray: #F5F5F5;
            --gov-border: #E0E0E0;
            --gov-shadow: 0 4px 12px rgba(0, 107, 60, 0.15);
            --gov-shadow-sm: 0 2px 8px rgba(0, 0, 0, 0.08);
        }
        body {
            background: linear-gradient(135deg, #F8F9FA 0%, #E9ECEF 100%);
        }
        .admin-sidebar {
            min-height: 100vh;
            background: linear-gradient(135deg, var(--gov-green) 0%, var(--gov-green-dark) 100%);
            color: white;
            box-shadow: var(--gov-shadow);
            border-right: 4px solid var(--gov-green-light);
        }
        .admin-sidebar .sidebar-header {
            padding: 1.5rem;
            background: rgba(0, 0, 0, 0.1);
            border-bottom: 2px solid var(--gov-green-light);
        }
        .admin-sidebar .sidebar-header h4 {
            margin: 0;
            font-weight: 700;
            font-size: 1.2rem;
        }
        .admin-sidebar a {
            color: white;
            text-decoration: none;
            display: flex;
            align-items: center;
            gap: 0.75rem;
            padding: 1rem 1.5rem;
            border-bottom: 1px solid rgba(255,255,255,0.1);
            transition: all 0.3s ease;
            font-weight: 500;
        }
        .admin-sidebar a:hover, .admin-sidebar a.active {
            background: rgba(255,255,255,0.15);
            padding-left: 2rem;
        }
        .admin-sidebar a i {
            font-size: 1.2rem;
        }
        .admin-content {
            padding: 2rem;
        }
    </style>
</head>
<body>
    <div class="container-fluid">
        <div class="row">
            <div class="col-md-2 admin-sidebar p-0">
                <div class="sidebar-header">
                    <h4><i class="bi bi-shield-check-fill"></i> Admin Panel</h4>
                </div>
                <a href="dashboard.php"><i class="bi bi-speedometer2"></i> Dashboard</a>
                <a href="users.php"><i class="bi bi-people-fill"></i> User Management</a>
                <a href="applications.php"><i class="bi bi-file-earmark-text-fill"></i> Applications</a>
                <a href="payments.php" class="active"><i class="bi bi-credit-card-2-front-fill"></i> Payments</a>
                <a href="transactions.php"><i class="bi bi-receipt-cutoff"></i> Transactions</a>
                <a href="settings.php"><i class="bi bi-gear-fill"></i> Settings</a>
                <a href="logout.php"><i class="bi bi-box-arrow-right"></i> Logout</a>
            </div>
            <div class="col-md-10 admin-content">
                <h2 class="mb-4 fw-bold" style="color: var(--gov-green);">
                    <i class="bi bi-credit-card-2-front-fill"></i> Payments Management
                </h2>
                
                <?php if ($error): ?>
                    <div class="alert mb-4" style="background: #f8d7da; border-left: 5px solid #dc3545; color: #721c24; padding: 1rem; border-radius: 8px;">
                        <i class="bi bi-exclamation-triangle-fill"></i> <?php echo $error; ?>
                    </div>
                <?php endif; ?>
                <?php if ($success): ?>
                    <div class="alert mb-4" style="background: #d4edda; border-left: 5px solid var(--gov-green); color: #155724; padding: 1rem; border-radius: 8px;">
                        <i class="bi bi-check-circle-fill"></i> <?php echo $success; ?>
                    </div>
                <?php endif; ?>
                
                <div class="mb-4">
                    <div class="btn-group" role="group">
                        <a href="?status=all" class="btn btn-sm <?php echo $status == 'all' ? '' : 'btn-outline-'; ?>btn" style="<?php echo $status == 'all' ? 'background: var(--gov-green); color: white;' : 'border-color: var(--gov-green); color: var(--gov-green);'; ?>">All</a>
                        <a href="?status=pending" class="btn btn-sm <?php echo $status == 'pending' ? '' : 'btn-outline-'; ?>btn-warning">Pending</a>
                        <a href="?status=paid" class="btn btn-sm <?php echo $status == 'paid' ? '' : 'btn-outline-'; ?>btn-success">Paid</a>
                        <a href="?status=rejected" class="btn btn-sm <?php echo $status == 'rejected' ? '' : 'btn-outline-'; ?>btn-danger">Rejected</a>
                    </div>
                </div>
                
                <div class="card" style="border: none; box-shadow: var(--gov-shadow-sm); border-radius: 12px;">
                    <div class="card-header" style="background: linear-gradient(135deg, var(--gov-green) 0%, var(--gov-green-dark) 100%); color: white; border-radius: 12px 12px 0 0;">
                        <h5 class="mb-0 fw-bold"><i class="bi bi-credit-card-2-front"></i> All Payments</h5>
                    </div>
                    <div class="card-body p-0">
                        <div class="table-responsive">
                            <table class="table table-hover mb-0">
                                <thead style="background: var(--gov-gray);">
                            <tr>
                                <th>ID</th>
                                <th>User</th>
                                <th>Name</th>
                                <th>Vehicle Type</th>
                                <th>Amount</th>
                                <th>Method</th>
                                <th>Transaction ID</th>
                                <th>Status</th>
                                <th>Date</th>
                                <th>Actions</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php while ($payment = $payments->fetch_assoc()): ?>
                                <tr>
                                    <td>#<?php echo $payment['id']; ?></td>
                                    <td><?php echo htmlspecialchars($payment['email']); ?></td>
                                    <td><?php echo htmlspecialchars($payment['step1_full_name']); ?></td>
                                    <td><?php echo htmlspecialchars($payment['step2_vehicle_type']); ?></td>
                                    <td>PKR <?php echo number_format($payment['amount'], 2); ?></td>
                                    <td><?php echo htmlspecialchars($payment['payment_method'] ?? 'N/A'); ?></td>
                                    <td><?php echo htmlspecialchars($payment['transaction_id'] ?? 'N/A'); ?></td>
                                    <td>
                                        <?php if ($payment['status'] == 'paid'): ?>
                                            <span class="badge bg-success">Paid</span>
                                        <?php elseif ($payment['status'] == 'rejected'): ?>
                                            <span class="badge bg-danger">Rejected</span>
                                        <?php else: ?>
                                            <span class="badge bg-warning">Pending</span>
                                        <?php endif; ?>
                                    </td>
                                    <td><?php echo date('d M Y', strtotime($payment['created_at'])); ?></td>
                                    <td>
                                        <div class="d-flex gap-1 flex-wrap">
                                            <?php if ($payment['payment_proof']): ?>
                                                <a href="../<?php echo UPLOAD_DIR . $payment['payment_proof']; ?>" target="_blank" class="btn btn-sm" style="background: #17a2b8; color: white; border: none;">
                                                    <i class="bi bi-image"></i> View Proof
                                                </a>
                                            <?php endif; ?>
                                            <?php if ($payment['status'] == 'pending'): ?>
                                                <form method="POST" style="display:inline;" onsubmit="return confirm('Approve this payment?');">
                                                    <input type="hidden" name="payment_id" value="<?php echo $payment['id']; ?>">
                                                    <input type="hidden" name="action" value="approve">
                                                    <button type="submit" class="btn btn-sm" style="background: var(--gov-green); color: white; border: none;">
                                                        <i class="bi bi-check"></i> Approve
                                                    </button>
                                                </form>
                                                <form method="POST" style="display:inline;" onsubmit="return confirm('Reject this payment?');">
                                                    <input type="hidden" name="payment_id" value="<?php echo $payment['id']; ?>">
                                                    <input type="hidden" name="action" value="reject">
                                                    <button type="submit" class="btn btn-sm btn-danger">
                                                        <i class="bi bi-x"></i> Reject
                                                    </button>
                                                </form>
                                            <?php endif; ?>
                                        </div>
                                    </td>
                                </tr>
                            <?php endwhile; ?>
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
</body>
</html>