39038-vm/admin_shipper_edit.php
2026-03-08 10:11:07 +00:00

222 lines
9.8 KiB
PHP

<?php
declare(strict_types=1);
require_once __DIR__ . '/includes/layout.php';
$userId = (int)($_GET['id'] ?? 0);
if ($userId <= 0) {
header('Location: admin_shippers.php');
exit;
}
$errors = [];
$flash = null;
// Fetch Shipper Profile
$stmt = db()->prepare("
SELECT u.id, u.email, u.full_name, u.status, u.role,
p.company_name, p.phone, p.address_line, p.country_id, p.city_id
FROM users u
LEFT JOIN shipper_profiles p ON u.id = p.user_id
WHERE u.id = ? AND u.role = 'shipper'
");
$stmt->execute([$userId]);
$shipper = $stmt->fetch();
if (!$shipper) {
header('Location: admin_shippers.php');
exit;
}
$countries = db()->query("SELECT id, name_en, name_ar FROM countries ORDER BY name_en ASC")->fetchAll();
$cities = db()->query("SELECT id, country_id, name_en, name_ar FROM cities ORDER BY name_en ASC")->fetchAll();
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$fullName = trim($_POST['full_name'] ?? '');
$email = trim($_POST['email'] ?? '');
$phone = trim($_POST['phone'] ?? '');
$countryId = (int)($_POST['country_id'] ?? 0);
$cityId = (int)($_POST['city_id'] ?? 0);
$addressLine = trim($_POST['address_line'] ?? '');
$companyName = trim($_POST['company_name'] ?? '');
$status = trim($_POST['status'] ?? '');
$password = $_POST['password'] ?? '';
if ($fullName === '') $errors[] = 'Full name is required.';
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) $errors[] = 'Valid email is required.';
if ($phone === '') $errors[] = 'Phone number is required.';
if ($companyName === '') $errors[] = 'Company name is required.';
if (!in_array($status, ['pending', 'active', 'rejected'], true)) $errors[] = 'Invalid status.';
if ($countryId <= 0 || $cityId <= 0) {
$errors[] = 'Please select country and city.';
} else {
$cityCheck = db()->prepare("SELECT COUNT(*) FROM cities WHERE id = ? AND country_id = ?");
$cityCheck->execute([$cityId, $countryId]);
if ((int)$cityCheck->fetchColumn() === 0) {
$errors[] = 'Selected city does not belong to selected country.';
}
}
if (!$errors) {
try {
db()->beginTransaction();
$stmtUser = db()->prepare("UPDATE users SET full_name = ?, email = ?, status = ? WHERE id = ? AND role = 'shipper'");
$stmtUser->execute([$fullName, $email, $status, $userId]);
if ($password !== '') {
$stmtPass = db()->prepare("UPDATE users SET password = ? WHERE id = ? AND role = 'shipper'");
$stmtPass->execute([password_hash($password, PASSWORD_DEFAULT), $userId]);
}
$stmtProfile = db()->prepare("
UPDATE shipper_profiles
SET company_name = ?, phone = ?, address_line = ?, country_id = ?, city_id = ?
WHERE user_id = ?
");
$stmtProfile->execute([$companyName, $phone, $addressLine, $countryId, $cityId, $userId]);
db()->commit();
$flash = 'Shipper profile updated successfully.';
// Refresh data
$shipper['full_name'] = $fullName;
$shipper['email'] = $email;
$shipper['status'] = $status;
$shipper['company_name'] = $companyName;
$shipper['phone'] = $phone;
$shipper['address_line'] = $addressLine;
$shipper['country_id'] = $countryId;
$shipper['city_id'] = $cityId;
} catch (Throwable $e) {
db()->rollBack();
if (stripos($e->getMessage(), 'Duplicate entry') !== false) {
$errors[] = 'This email is already in use by another account.';
} else {
$errors[] = 'Failed to update shipper profile. Please try again.';
}
}
}
}
render_header('Edit Shipper', 'admin', true);
?>
<div class="row g-0">
<div class="col-md-2 bg-white border-end min-vh-100">
<?php render_admin_sidebar('shippers'); ?>
</div>
<div class="col-md-10 p-4">
<div class="page-intro d-flex flex-column flex-md-row justify-content-between align-items-md-center mb-4">
<div>
<a href="admin_shippers.php" class="text-decoration-none small text-muted mb-2 d-inline-block">&larr; Back to Shippers</a>
<h1 class="section-title mb-1">Edit Shipper</h1>
<p class="muted mb-0">Update profile information for <?= e($shipper['full_name']) ?>.</p>
</div>
</div>
<?php if ($flash): ?>
<div class="alert alert-success" data-auto-dismiss="true"><?= e($flash) ?></div>
<?php endif; ?>
<?php if ($errors): ?>
<div class="alert alert-warning"><?= e(implode('<br>', $errors)) ?></div>
<?php endif; ?>
<div class="panel p-4">
<form method="post">
<div class="row g-3">
<div class="col-md-6">
<label class="form-label" for="full_name">Full Name</label>
<input type="text" name="full_name" id="full_name" class="form-control" value="<?= e((string)$shipper['full_name']) ?>" required>
</div>
<div class="col-md-6">
<label class="form-label" for="email">Email</label>
<input type="email" name="email" id="email" class="form-control" value="<?= e((string)$shipper['email']) ?>" required>
</div>
<div class="col-md-6">
<label class="form-label" for="company_name">Company Name</label>
<input type="text" name="company_name" id="company_name" class="form-control" value="<?= e((string)$shipper['company_name']) ?>" required>
</div>
<div class="col-md-6">
<label class="form-label" for="phone">Phone</label>
<input type="text" name="phone" id="phone" class="form-control" value="<?= e((string)$shipper['phone']) ?>" required>
</div>
<div class="col-md-6">
<label class="form-label" for="country_id">Country</label>
<select name="country_id" id="country_id" class="form-select" onchange="syncCities()" required>
<option value="">Select country</option>
<?php foreach ($countries as $country): ?>
<option value="<?= e((string)$country['id']) ?>" <?= (string)$shipper['country_id'] === (string)$country['id'] ? 'selected' : '' ?>>
<?= e($lang === 'ar' && !empty($country['name_ar']) ? $country['name_ar'] : $country['name_en']) ?>
</option>
<?php endforeach; ?>
</select>
</div>
<div class="col-md-6">
<label class="form-label" for="city_id">City</label>
<select name="city_id" id="city_id" class="form-select" required data-selected="<?= e((string)$shipper['city_id']) ?>">
<option value="">Select city</option>
</select>
</div>
<div class="col-md-6">
<label class="form-label" for="address_line">Address Line</label>
<input type="text" name="address_line" id="address_line" class="form-control" value="<?= e((string)$shipper['address_line']) ?>" required>
</div>
<div class="col-md-3">
<label class="form-label" for="password">Password <small class="text-muted">(leave blank to keep)</small></label>
<input type="password" name="password" id="password" class="form-control" autocomplete="new-password">
</div>
<div class="col-md-3">
<label class="form-label" for="status">Account Status</label>
<select name="status" id="status" class="form-select" required>
<option value="pending" <?= $shipper['status'] === 'pending' ? 'selected' : '' ?>>Pending</option>
<option value="active" <?= $shipper['status'] === 'active' ? 'selected' : '' ?>>Active</option>
<option value="rejected" <?= $shipper['status'] === 'rejected' ? 'selected' : '' ?>>Rejected</option>
</select>
</div>
<div class="col-12 mt-4">
<button type="submit" class="btn btn-primary">Save Changes</button>
<a href="admin_shippers.php" class="btn btn-outline-dark ms-2">Cancel</a>
</div>
</div>
</form>
</div>
</div>
</div>
<script>
const allCities = <?= json_encode($cities, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?>;
function syncCities() {
const countryId = document.getElementById('country_id').value;
const citySelect = document.getElementById('city_id');
const selectedValue = citySelect.dataset.selected || '';
citySelect.innerHTML = '<option value="">Select city</option>';
allCities.forEach((city) => {
if (String(city.country_id) !== String(countryId)) {
return;
}
const option = document.createElement('option');
option.value = city.id;
option.textContent = <?= $lang === 'ar' ? '(city.name_ar || city.name_en)' : '(city.name_en || city.name_ar)' ?>;
if (String(city.id) === String(selectedValue)) {
option.selected = true;
}
citySelect.appendChild(option);
});
// clear selected after first render
citySelect.dataset.selected = '';
}
syncCities();
</script>
<?php render_footer(); ?>