prepare("SELECT e.*, u.email FROM employees e JOIN users u ON e.user_id = u.id WHERE e.id = ? AND e.company_id = ?"); $stmt->execute([$employee_id, $company_id]); $employee = $stmt->fetch(); if (!$employee) { header('Location: /employees.php'); exit; } // Handle Update Employee if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_employee'])) { $first_name = $_POST['first_name'] ?? ''; $last_name = $_POST['last_name'] ?? ''; $position = $_POST['position'] ?? ''; $basic_salary = $_POST['basic_salary'] ?? 0; if (empty($first_name) || empty($last_name) || empty($position) || empty($basic_salary)) { $error_message = 'All fields are required.'; } else { try { $stmt = db()->prepare( "UPDATE employees SET first_name = ?, last_name = ?, position = ?, basic_salary = ? WHERE id = ? AND company_id = ?" ); $stmt->execute([$first_name, $last_name, $position, $basic_salary, $employee_id, $company_id]); $success_message = 'Employee updated successfully!'; // Refresh employee data after update $stmt = db()->prepare("SELECT * FROM employees WHERE id = ? AND company_id = ?"); $stmt->execute([$employee_id, $company_id]); $employee = $stmt->fetch(); } catch (Exception $e) { $error_message = "Failed to update employee: " . $e->getMessage(); } } } ?>