From fc1839d4b8184c3140add9b1acf12be9b3cd2a53 Mon Sep 17 00:00:00 2001
From: Flatlogic Bot <support@flatlogic.com>
Date: Fri, 5 Dec 2025 19:51:38 +0000
Subject: [PATCH] v1.incomplete2

---
 cancel_subscription.php | 34 +++++++++++++++++++
 dashboard.php           | 17 ++++++++--
 includes/header.php     | 13 +++++---
 profile.php             | 72 +++++++++++++++++++++++++++++++++++++++++
 4 files changed, 128 insertions(+), 8 deletions(-)
 create mode 100644 cancel_subscription.php
 create mode 100644 profile.php

diff --git a/cancel_subscription.php b/cancel_subscription.php
new file mode 100644
index 0000000..999914e
--- /dev/null
+++ b/cancel_subscription.php
@@ -0,0 +1,34 @@
+<?php
+session_start();
+
+if (!isset($_SESSION['user_id'])) {
+    header('Location: login.php');
+    exit;
+}
+
+require_once 'db/config.php';
+
+if (isset($_GET['user_service_id'])) {
+    $user_service_id = $_GET['user_service_id'];
+    $user_id = $_SESSION['user_id'];
+
+    try {
+        $pdo = db();
+        // Verify the user owns this subscription before cancelling
+        $stmt = $pdo->prepare("UPDATE user_services SET status = 'cancelled' WHERE id = ? AND user_id = ?");
+        $stmt->execute([$user_service_id, $user_id]);
+
+        if ($stmt->rowCount() > 0) {
+            $_SESSION['message'] = 'Subscription cancelled successfully.';
+        } else {
+            $_SESSION['error'] = 'Could not cancel subscription. It might have been already cancelled or you do not have permission to perform this action.';
+        }
+    } catch (PDOException $e) {
+        $_SESSION['error'] = 'Database error: ' . $e->getMessage();
+    }
+} else {
+    $_SESSION['error'] = 'Invalid request.';
+}
+
+header('Location: dashboard.php');
+exit;
diff --git a/dashboard.php b/dashboard.php
index 00b36d9..f640c5e 100644
--- a/dashboard.php
+++ b/dashboard.php
@@ -9,6 +9,16 @@ require_once 'includes/header.php';
 ?>
 
 <div class="container mt-5">
+    <?php
+    if (isset($_SESSION['message'])) {
+        echo "<div class='alert alert-success'>" . $_SESSION['message'] . "</div>";
+        unset($_SESSION['message']);
+    }
+    if (isset($_SESSION['error'])) {
+        echo "<div class='alert alert-danger'>" . $_SESSION['error'] . "</div>";
+        unset($_SESSION['error']);
+    }
+    ?>
     <div class="row">
         <div class="col-md-12">
             <h1>Welcome to your Dashboard, <?php echo htmlspecialchars($_SESSION['user_name']); ?>!</h1>
@@ -22,15 +32,16 @@ require_once 'includes/header.php';
             <?php
             require_once 'db/config.php';
             $pdo = db();
-            $stmt = $pdo->prepare("SELECT s.name, s.description FROM services s JOIN user_services us ON s.id = us.service_id WHERE us.user_id = ? AND us.status = 'active'");
+            $stmt = $pdo->prepare("SELECT s.name, s.description, us.id as user_service_id FROM services s JOIN user_services us ON s.id = us.service_id WHERE us.user_id = ? AND us.status = 'active'");
             $stmt->execute([$_SESSION['user_id']]);
             $user_services = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
             if (count($user_services) > 0) {
                 echo "<ul class='list-group'>";
                 foreach ($user_services as $service) {
-                    echo "<li class='list-group-item'>";
-                    echo "<strong>" . htmlspecialchars($service['name']) . "</strong>: " . htmlspecialchars($service['description']);
+                    echo "<li class='list-group-item d-flex justify-content-between align-items-center'>";
+                    echo "<div><strong>" . htmlspecialchars($service['name']) . "</strong>: " . htmlspecialchars($service['description']) . "</div>";
+                    echo "<a href='cancel_subscription.php?user_service_id=" . $service['user_service_id'] . "' class='btn btn-danger btn-sm' onclick='return confirm("Are you sure you want to cancel this subscription?")'>Cancel</a>";
                     echo "</li>";
                 }
                 echo "</ul>";
diff --git a/includes/header.php b/includes/header.php
index 49176af..dc673f5 100644
--- a/includes/header.php
+++ b/includes/header.php
@@ -68,11 +68,14 @@
                             <li class="nav-item">
                                 <a class="nav-link" href="dashboard.php">Dashboard</a>
                             </li>
-                            <li class="nav-item">
-                                <a class="nav-link" href="#">Hi, <?php echo htmlspecialchars($_SESSION['user_name']); ?></a>
-                            </li>
-                            <li class="nav-item">
-                                <a class="nav-link" href="logout.php">Logout</a>
+                            <li class="nav-item dropdown">
+                                <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown" role="button" data-bs-toggle="dropdown" aria-expanded="false">
+                                    Hi, <?php echo htmlspecialchars($_SESSION['user_name']); ?>
+                                </a>
+                                <ul class="dropdown-menu" aria-labelledby="navbarDropdown">
+                                    <li><a class="dropdown-item" href="profile.php">Profile</a></li>
+                                    <li><a class="dropdown-item" href="logout.php">Logout</a></li>
+                                </ul>
                             </li>
                         <?php else: ?>
                             <li class="nav-item">
diff --git a/profile.php b/profile.php
new file mode 100644
index 0000000..e13927e
--- /dev/null
+++ b/profile.php
@@ -0,0 +1,72 @@
+<?php
+require_once 'includes/header.php';
+require_once 'db/config.php';
+
+if (!isset($_SESSION['user_id'])) {
+    header('Location: login.php');
+    exit;
+}
+
+$user_id = $_SESSION['user_id'];
+
+$message = '';
+$error = '';
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    $username = $_POST['username'];
+    $email = $_POST['email'];
+
+    if (empty($username) || empty($email)) {
+        $error = 'Username and email are required.';
+    } else {
+        try {
+            $stmt = db()->prepare("UPDATE users SET username = ?, email = ? WHERE id = ?");
+            $stmt->execute([$username, $email, $user_id]);
+            $_SESSION['user_name'] = $username;
+            $message = 'Profile updated successfully!';
+        } catch (PDOException $e) {
+            $error = 'Error updating profile: ' . $e->getMessage();
+        }
+    }
+}
+
+$stmt = db()->prepare("SELECT * FROM users WHERE id = ?");
+$stmt->execute([$user_id]);
+$user = $stmt->fetch();
+
+?>
+
+<div class="container mt-5">
+    <h1>User Profile</h1>
+
+    <?php if ($message): ?>
+        <div class="alert alert-success">
+            <?php echo $message; ?>
+        </div>
+    <?php endif; ?>
+
+    <?php if ($error): ?>
+        <div class="alert alert-danger">
+            <?php echo $error; ?>
+        </div>
+    <?php endif; ?>
+
+    <div class="card">
+        <div class="card-body">
+            <h5 class="card-title">Edit Your Information</h5>
+            <form action="profile.php" method="POST">
+                <div class="mb-3">
+                    <label for="username" class="form-label">Username</label>
+                    <input type="text" class="form-control" id="username" name="username" value="<?php echo htmlspecialchars($user['username']); ?>" required>
+                </div>
+                <div class="mb-3">
+                    <label for="email" class="form-label">Email address</label>
+                    <input type="email" class="form-control" id="email" name="email" value="<?php echo htmlspecialchars($user['email']); ?>" required>
+                </div>
+                <button type="submit" class="btn btn-primary">Update Profile</button>
+            </form>
+        </div>
+    </div>
+</div>
+
+<?php require_once 'includes/footer.php'; ?>
\ No newline at end of file