Folder set up

create-job.php

@@ -0,0 +1,132 @@
+<?php
+declare(strict_types=1);
+require_once __DIR__ . '/db/config.php';
+require_once __DIR__ . '/includes/auth.php';
+
+requireLogin();
+
+$user = getCurrentUser();
+$companyId = $user['company_id'];
+$error = '';
+
+// Fetch clients for selection
+$stmt = db()->prepare("SELECT id, name FROM clients WHERE company_id = ? AND is_active = 1 ORDER BY name ASC");
+$stmt->execute([$companyId]);
+$clients = $stmt->fetchAll();
+
+// Fetch statuses for selection
+$stmt = db()->prepare("SELECT id, name, is_default FROM job_statuses WHERE company_id = ? ORDER BY sort_order ASC");
+$stmt->execute([$companyId]);
+$statuses = $stmt->fetchAll();
+
+// Fetch company settings
+$stmt = db()->prepare("SELECT uprn_required FROM companies WHERE id = ?");
+$stmt->execute([$companyId]);
+$company = $stmt->fetch();
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    $clientId = $_POST['client_id'] ?? '';
+    $statusId = $_POST['status_id'] ?? '';
+    $uprn = $_POST['uprn'] ?? '';
+    $address = $_POST['address'] ?? '';
+    $description = $_POST['description'] ?? '';
+
+    if (empty($clientId) || empty($statusId) || empty($address)) {
+        $error = 'Please fill in all required fields.';
+    } elseif ($company['uprn_required'] && empty($uprn)) {
+        $error = 'UPRN is required for this company.';
+    } else {
+        try {
+            db()->beginTransaction();
+
+            // 1. Insert Job
+            $stmt = db()->prepare("
+                INSERT INTO jobs (company_id, client_id, status_id, uprn, address, description) 
+                VALUES (?, ?, ?, ?, ?, ?)
+            ");
+            $stmt->execute([$companyId, $clientId, $statusId, $uprn, $address, $description]);
+            $jobId = db()->lastInsertId();
+
+            // 2. Add Mandatory Folders
+            $stmt = db()->prepare("SELECT name FROM required_folders WHERE company_id = ?");
+            $stmt->execute([$companyId]);
+            $reqFolders = $stmt->fetchAll();
+
+            $folderStmt = db()->prepare("INSERT INTO job_folders (job_id, name, is_required) VALUES (?, ?, ?)");
+            foreach ($reqFolders as $rf) {
+                $folderStmt->execute([$jobId, $rf['name'], 1]);
+            }
+
+            // 3. Log activity
+            $logStmt = db()->prepare("INSERT INTO job_logs (job_id, user_id, action, details) VALUES (?, ?, ?, ?)");
+            $logStmt->execute([$jobId, $user['id'], 'created', 'Job created manually by user.']);
+
+            db()->commit();
+            header('Location: dashboard.php');
+            exit;
+        } catch (Exception $e) {
+            db()->rollBack();
+            $error = "Database error: " . $e->getMessage();
+        }
+    }
+}
+
+$pageTitle = "Create New Job";
+require_once __DIR__ . '/includes/header.php';
+?>
+
+<div class="row justify-content-center">
+    <div class="col-md-8">
+        <div class="card shadow-sm">
+            <div class="card-header bg-white py-3">
+                <h4 class="fw-bold m-0">Create New Job</h4>
+            </div>
+            <div class="card-body p-4">
+                <?php if ($error): ?>
+                    <div class="alert alert-danger"><?= htmlspecialchars($error) ?></div>
+                <?php endif; ?>
+
+                <form method="POST">
+                    <div class="row g-3">
+                        <div class="col-md-6">
+                            <label class="form-label fw-bold">Client <span class="text-danger">*</span></label>
+                            <select name="client_id" class="form-select" required>
+                                <option value="">Select Client...</option>
+                                <?php foreach ($clients as $c): ?>
+                                    <option value="<?= $c['id'] ?>"><?= htmlspecialchars($c['name']) ?></option>
+                                <?php endforeach; ?>
+                            </select>
+                        </div>
+                        <div class="col-md-6">
+                            <label class="form-label fw-bold">Status <span class="text-danger">*</span></label>
+                            <select name="status_id" class="form-select" required>
+                                <?php foreach ($statuses as $s): ?>
+                                    <option value="<?= $s['id'] ?>" <?= $s['is_default'] ? 'selected' : '' ?>><?= htmlspecialchars($s['name']) ?></option>
+                                <?php endforeach; ?>
+                            </select>
+                        </div>
+                        <div class="col-12">
+                            <label class="form-label fw-bold">UPRN <?= $company['uprn_required'] ? '<span class="text-danger">*</span>' : '' ?></label>
+                            <input type="text" name="uprn" class="form-control" placeholder="Unique Property Reference Number" <?= $company['uprn_required'] ? 'required' : '' ?>>
+                        </div>
+                        <div class="col-12">
+                            <label class="form-label fw-bold">Property Address <span class="text-danger">*</span></label>
+                            <textarea name="address" class="form-control" rows="2" placeholder="Full property address" required></textarea>
+                        </div>
+                        <div class="col-12">
+                            <label class="form-label fw-bold">Job Description</label>
+                            <textarea name="description" class="form-control" rows="4" placeholder="Briefly describe the repair required..."></textarea>
+                        </div>
+                    </div>
+
+                    <div class="d-flex justify-content-between mt-5">
+                        <a href="dashboard.php" class="btn btn-outline-secondary">Cancel</a>
+                        <button type="submit" class="btn btn-primary px-5">Create Job</button>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+</div>
+
+<?php require_once __DIR__ . '/includes/footer.php'; ?>

dashboard.php

@@ -0,0 +1,82 @@
+<?php
+declare(strict_types=1);
+require_once __DIR__ . '/db/config.php';
+require_once __DIR__ . '/includes/auth.php';
+
+requireLogin();
+
+$pageTitle = "Dashboard";
+$user = getCurrentUser();
+$companyId = $user['company_id'];
+
+// Fetch jobs for this company
+$stmt = db()->prepare("
+    SELECT j.*, c.name as client_name, s.name as status_name 
+    FROM jobs j
+    JOIN clients c ON j.client_id = c.id
+    JOIN job_statuses s ON j.status_id = s.id
+    WHERE j.company_id = ?
+    ORDER BY j.created_at DESC
+");
+$stmt->execute([$companyId]);
+$jobs = $stmt->fetchAll();
+
+require_once __DIR__ . '/includes/header.php';
+?>
+
+<div class="d-flex justify-content-between align-items-center mb-4">
+    <h2 class="fw-bold m-0">Jobs Overview</h2>
+    <a href="create-job.php" class="btn btn-primary">
+        <i class="bi bi-plus-lg"></i> Create New Job
+    </a>
+</div>
+
+<?php if (empty($jobs)): ?>
+    <div class="card p-5 text-center">
+        <div class="mb-3">
+            <i class="bi bi-clipboard2-plus text-secondary display-1"></i>
+        </div>
+        <h4>No jobs found</h4>
+        <p class="text-secondary">Get started by creating your first repair job.</p>
+        <div class="mt-3">
+            <a href="create-job.php" class="btn btn-primary">Create First Job</a>
+        </div>
+    </div>
+<?php else: ?>
+    <div class="card shadow-sm overflow-hidden">
+        <div class="table-responsive">
+            <table class="table table-hover align-middle mb-0">
+                <thead class="table-light">
+                    <tr>
+                        <th>Job ID</th>
+                        <th>Client</th>
+                        <th>Address</th>
+                        <th>Status</th>
+                        <th>UPRN</th>
+                        <th>Created</th>
+                        <th class="text-end">Actions</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <?php foreach ($jobs as $job): ?>
+                        <tr>
+                            <td>#<?= $job['id'] ?></td>
+                            <td><?= htmlspecialchars($job['client_name']) ?></td>
+                            <td><?= htmlspecialchars($job['address']) ?></td>
+                            <td>
+                                <span class="badge bg-secondary"><?= htmlspecialchars($job['status_name']) ?></span>
+                            </td>
+                            <td><?= htmlspecialchars($job['uprn'] ?? 'N/A') ?></td>
+                            <td><?= date('d M Y', strtotime($job['created_at'])) ?></td>
+                            <td class="text-end">
+                                <a href="view-job.php?id=<?= $job['id'] ?>" class="btn btn-sm btn-outline-primary">View Details</a>
+                            </td>
+                        </tr>
+                    <?php endforeach; ?>
+                </tbody>
+            </table>
+        </div>
+    </div>
+<?php endif; ?>
+
+<?php require_once __DIR__ . '/includes/footer.php'; ?>

db/init.sql

@@ -57,3 +57,57 @@ CREATE TABLE IF NOT EXISTS clients (
     FOREIGN KEY (company_id) REFERENCES companies(id) ON DELETE CASCADE,
     UNIQUE KEY (company_id, name) -- Ensure client names are unique per company
 );
+
+-- Jobs Table: Core entity for the application.
+CREATE TABLE IF NOT EXISTS jobs (
+    id INT AUTO_INCREMENT PRIMARY KEY,
+    company_id INT NOT NULL,
+    client_id INT NOT NULL,
+    status_id INT NOT NULL,
+    uprn VARCHAR(255) DEFAULT NULL, -- Unique Property Reference Number
+    address TEXT NOT NULL,
+    description TEXT,
+    works_approved BOOLEAN DEFAULT FALSE,
+    is_completed BOOLEAN DEFAULT FALSE,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    FOREIGN KEY (company_id) REFERENCES companies(id) ON DELETE CASCADE,
+    FOREIGN KEY (client_id) REFERENCES clients(id),
+    FOREIGN KEY (status_id) REFERENCES job_statuses(id)
+);
+
+-- Job Folders Table: Mandatory and custom folders for each job.
+CREATE TABLE IF NOT EXISTS job_folders (
+    id INT AUTO_INCREMENT PRIMARY KEY,
+    job_id INT NOT NULL,
+    name VARCHAR(255) NOT NULL,
+    is_required BOOLEAN DEFAULT FALSE, -- If true, it's a company-wide mandatory folder.
+    is_completed BOOLEAN DEFAULT FALSE,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (job_id) REFERENCES jobs(id) ON DELETE CASCADE
+);
+
+-- Job Files Table: Files uploaded to job folders.
+CREATE TABLE IF NOT EXISTS job_files (
+    id INT AUTO_INCREMENT PRIMARY KEY,
+    folder_id INT NOT NULL,
+    user_id INT NOT NULL,
+    filename VARCHAR(255) NOT NULL,
+    file_path VARCHAR(255) NOT NULL,
+    file_size INT NOT NULL,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (folder_id) REFERENCES job_folders(id) ON DELETE CASCADE,
+    FOREIGN KEY (user_id) REFERENCES users(id)
+);
+
+-- Job Logs Table: Server-side logging for all job activities.
+CREATE TABLE IF NOT EXISTS job_logs (
+    id INT AUTO_INCREMENT PRIMARY KEY,
+    job_id INT NOT NULL,
+    user_id INT NOT NULL,
+    action VARCHAR(255) NOT NULL, -- e.g., 'created', 'status_updated', 'file_uploaded'
+    details TEXT,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (job_id) REFERENCES jobs(id) ON DELETE CASCADE,
+    FOREIGN KEY (user_id) REFERENCES users(id)
+);

includes/auth.php

@@ -0,0 +1,35 @@
+<?php
+declare(strict_types=1);
+
+if (session_status() === PHP_SESSION_NONE) {
+    session_start();
+}
+
+function isLoggedIn(): bool {
+    return isset($_SESSION['user_id']);
+}
+
+function requireLogin(): void {
+    if (!isLoggedIn()) {
+        header('Location: login.php');
+        exit;
+    }
+}
+
+function getCurrentUser(): ?array {
+    if (!isLoggedIn()) return null;
+    
+    static $user;
+    if (!$user) {
+        $stmt = db()->prepare("SELECT u.*, c.name as company_name FROM users u JOIN companies c ON u.company_id = c.id WHERE u.id = ?");
+        $stmt->execute([$_SESSION['user_id']]);
+        $user = $stmt->fetch();
+    }
+    return $user;
+}
+
+function logout(): void {
+    session_destroy();
+    header('Location: login.php');
+    exit;
+}

includes/footer.php

@@ -0,0 +1,8 @@
+    </div>
+    <footer class="container py-4 border-top text-center text-secondary small">
+        &copy; <?= date('Y') ?> RepairsPro Multi-Tenant Application.
+    </footer>
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
+    <script src="assets/js/main.js?v=<?= time() ?>"></script>
+</body>
+</html>

includes/header.php

@@ -0,0 +1,40 @@
+<?php
+require_once __DIR__ . '/auth.php';
+$currentUser = getCurrentUser();
+?>
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title><?= $pageTitle ?? 'RepairsPro' ?></title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="assets/css/custom.css?v=<?= time() ?>">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.1/font/bootstrap-icons.css">
+</head>
+<body class="bg-light">
+    <nav class="navbar navbar-expand-lg navbar-dark bg-dark mb-4">
+        <div class="container">
+            <a class="navbar-brand fw-bold" href="dashboard.php">RepairsPro</a>
+            <button class="navbar-expand-lg navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarNav">
+                <span class="navbar-toggler-icon"></span>
+            </button>
+            <div class="collapse navbar-collapse" id="navbarNav">
+                <ul class="navbar-nav me-auto">
+                    <li class="nav-item"><a class="nav-link" href="dashboard.php">Dashboard</a></li>
+                    <li class="nav-item"><a class="nav-link" href="clients.php">Clients</a></li>
+                    <?php if ($currentUser['role'] === 'admin'): ?>
+                        <li class="nav-item"><a class="nav-link" href="settings.php">Settings</a></li>
+                    <?php endif; ?>
+                </ul>
+                <div class="navbar-nav ms-auto">
+                    <span class="navbar-text me-3">
+                        <i class="bi bi-person-circle"></i> <?= htmlspecialchars($currentUser['name']) ?> (<?= htmlspecialchars($currentUser['company_name']) ?>)
+                    </span>
+                    <a href="logout.php" class="btn btn-outline-light btn-sm">Logout</a>
+                </div>
+            </div>
+        </div>
+    </nav>
+    <div class="container pb-5">

index.php

@@ -1,6 +1,7 @@
 <?php
 declare(strict_types=1);
 require_once __DIR__ . '/db/config.php';
+require_once __DIR__ . '/includes/auth.php';
 
 // Check if any company exists
 $stmt = db()->query("SELECT COUNT(*) FROM companies");
@@ -11,52 +12,65 @@ if ($companyCount == 0) {
     exit;
 }
 
-$pageTitle = "Repairs Multi-Tenant App";
+if (isLoggedIn()) {
+    header('Location: dashboard.php');
+    exit;
+}
+
+$pageTitle = "RepairsPro - Multi-Tenant Management";
 ?>
 <!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title><?= $pageTitle ?> - Landing</title>
+    <title><?= $pageTitle ?></title>
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
     <link rel="stylesheet" href="assets/css/custom.css?v=<?= time() ?>">
+    <style>
+        .hero-section { background: linear-gradient(135deg, #0f172a 0%, #1e293b 100%); color: white; padding: 100px 0; }
+    </style>
 </head>
 <body>
-    <nav class="navbar navbar-expand-lg">
+    <nav class="navbar navbar-expand-lg navbar-dark bg-dark">
         <div class="container">
             <a class="navbar-brand fw-bold" href="#">RepairsPro</a>
             <div class="ms-auto">
-                <a href="dashboard.php" class="btn btn-primary">Go to Dashboard</a>
+                <a href="login.php" class="btn btn-primary">Sign In</a>
             </div>
         </div>
     </nav>
 
+    <header class="hero-section text-center">
+        <div class="container">
+            <h1 class="display-3 fw-bold mb-4">Master Your Repair Workflow</h1>
+            <p class="lead mb-5 opacity-75">Multi-tenant isolation, custom folder structures, and immutable audit logs.</p>
+            <a href="login.php" class="btn btn-primary btn-lg px-5">Get Started</a>
+        </div>
+    </header>
+
     <main class="container py-5">
-        <div class="row justify-content-center">
-            <div class="col-md-8 text-center">
-                <h1 class="display-4 fw-bold mb-4">Efficient Repair Management for Multi-Tenant Businesses</h1>
-                <p class="lead text-secondary mb-5">Isolated data, customizable workflows, and strict audit logging. Everything you need to scale your repair operations.</p>
-                <div class="row g-4 text-start">
+        <div class="row g-4 text-center mt-4">
             <div class="col-md-4">
-                        <div class="card p-3 h-100">
-                            <h5 class="fw-bold">Isolated Data</h5>
-                            <p class="text-secondary small mb-0">Each company has its own private database silo for jobs, clients, and files.</p>
+                <div class="card p-4 h-100 border-0 shadow-sm">
+                    <div class="mb-3"><i class="bi bi-shield-check display-4 text-primary"></i></div>
+                    <h5 class="fw-bold">Data Isolation</h5>
+                    <p class="text-secondary small">Company-specific data silos ensure security and privacy for all your records.</p>
                 </div>
             </div>
             <div class="col-md-4">
-                        <div class="card p-3 h-100">
-                            <h5 class="fw-bold">Custom Workflows</h5>
-                            <p class="text-secondary small mb-0">Define your own job statuses and mandatory folder structures.</p>
+                <div class="card p-4 h-100 border-0 shadow-sm">
+                    <div class="mb-3"><i class="bi bi-folder-check display-4 text-primary"></i></div>
+                    <h5 class="fw-bold">Mandatory Folders</h5>
+                    <p class="text-secondary small">Automatically enforce standard folder structures for every single job.</p>
                 </div>
             </div>
             <div class="col-md-4">
-                        <div class="card p-3 h-100">
-                            <h5 class="fw-bold">Audit Trail</h5>
-                            <p class="text-secondary small mb-0">Strict server-side logging for every action taken on any job.</p>
-                        </div>
-                    </div>
+                <div class="card p-4 h-100 border-0 shadow-sm">
+                    <div class="mb-3"><i class="bi bi-clock-history display-4 text-primary"></i></div>
+                    <h5 class="fw-bold">Audit Logging</h5>
+                    <p class="text-secondary small">Every status change and file upload is recorded for compliance and tracking.</p>
                 </div>
             </div>
         </div>

login.php

@@ -0,0 +1,80 @@
+<?php
+declare(strict_types=1);
+require_once __DIR__ . '/db/config.php';
+require_once __DIR__ . '/includes/auth.php';
+
+if (isLoggedIn()) {
+    header('Location: dashboard.php');
+    exit;
+}
+
+$error = '';
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    $email = $_POST['email'] ?? '';
+    $password = $_POST['password'] ?? '';
+
+    if (empty($email) || empty($password)) {
+        $error = 'Please fill in all fields.';
+    } else {
+        $stmt = db()->prepare("SELECT * FROM users WHERE email = ?");
+        $stmt->execute([$email]);
+        $user = $stmt->fetch();
+
+        if ($user && password_verify($password, $user['password'])) {
+            $_SESSION['user_id'] = $user['id'];
+            $_SESSION['company_id'] = $user['company_id'];
+            $_SESSION['user_role'] = $user['role'];
+            header('Location: dashboard.php');
+            exit;
+        } else {
+            $error = 'Invalid email or password.';
+        }
+    }
+}
+?>
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Login - RepairsPro</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="assets/css/custom.css?v=<?= time() ?>">
+    <style>
+        body { background-color: #f8fafc; height: 100vh; display: flex; align-items: center; justify-content: center; }
+        .login-card { width: 100%; max-width: 400px; padding: 2rem; border-radius: 8px; box-shadow: 0 4px 6px -1px rgb(0 0 0 / 0.1); background: #fff; }
+    </style>
+</head>
+<body>
+    <div class="login-card">
+        <div class="text-center mb-4">
+            <h2 class="fw-bold">RepairsPro</h2>
+            <p class="text-secondary">Sign in to your account</p>
+        </div>
+
+        <?php if ($error): ?>
+            <div class="alert alert-danger py-2 small"><?= htmlspecialchars($error) ?></div>
+        <?php endif; ?>
+
+        <form method="POST">
+            <div class="mb-3">
+                <label class="form-label small fw-bold">Email address</label>
+                <input type="email" name="email" class="form-control" required autofocus>
+            </div>
+            <div class="mb-3">
+                <label class="form-label small fw-bold">Password</label>
+                <input type="password" name="password" class="form-control" required>
+            </div>
+            <div class="d-grid gap-2 mt-4">
+                <button type="submit" class="btn btn-primary">Sign In</button>
+            </div>
+        </form>
+        
+        <div class="mt-4 text-center">
+            <p class="small text-secondary">Forgot your password? <br>Contact your company administrator.</p>
+        </div>
+    </div>
+</body>
+</html>

logout.php

@@ -0,0 +1,4 @@
+<?php
+declare(strict_types=1);
+require_once __DIR__ . '/includes/auth.php';
+logout();