297 lines
15 KiB
PHP
297 lines
15 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
require_once __DIR__ . '/includes/layout.php'; require_role('admin');
|
|
|
|
$userId = (int)($_GET['id'] ?? 0);
|
|
$isAjax = isset($_GET['ajax']) && $_GET['ajax'] === '1';
|
|
|
|
if ($userId <= 0) {
|
|
if ($isAjax) {
|
|
echo json_encode(['success' => false, 'message' => 'Invalid ID']);
|
|
exit;
|
|
}
|
|
header('Location: admin_truck_owners.php');
|
|
exit;
|
|
}
|
|
|
|
$errors = [];
|
|
$flash = null;
|
|
|
|
// Fetch Truck Owner Profile
|
|
$stmt = db()->prepare("
|
|
SELECT u.id, u.email, u.full_name, u.status, u.role,
|
|
p.phone, p.address_line, p.country_id, p.city_id,
|
|
p.bank_account, p.bank_name, p.bank_branch,
|
|
p.id_card_path, p.is_company, p.ctr_number, p.notes
|
|
FROM users u
|
|
LEFT JOIN truck_owner_profiles p ON u.id = p.user_id
|
|
WHERE u.id = ? AND u.role = 'truck_owner'
|
|
");
|
|
$stmt->execute([$userId]);
|
|
$owner = $stmt->fetch();
|
|
|
|
$trucks = db()->prepare("SELECT * FROM trucks WHERE user_id = ?");
|
|
$trucks->execute([$userId]);
|
|
$ownerTrucks = $trucks->fetchAll();
|
|
|
|
if (!$owner) {
|
|
if ($isAjax) {
|
|
echo json_encode(['success' => false, 'message' => 'Owner not found']);
|
|
exit;
|
|
}
|
|
header('Location: admin_truck_owners.php');
|
|
exit;
|
|
}
|
|
|
|
$countries = db()->query("SELECT id, name_en, name_ar FROM countries ORDER BY name_en ASC")->fetchAll();
|
|
$cities = db()->query("SELECT id, country_id, name_en, name_ar FROM cities ORDER BY name_en ASC")->fetchAll();
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') { validate_csrf_token();
|
|
if (isset($_POST['approve_truck'])) {
|
|
$truckId = (int)$_POST['truck_id'];
|
|
db()->prepare("UPDATE trucks SET is_approved = 1 WHERE id = ? AND user_id = ?")->execute([$truckId, $userId]);
|
|
$flash = 'Truck approved successfully.';
|
|
} elseif (isset($_POST['reject_truck'])) {
|
|
$truckId = (int)$_POST['truck_id'];
|
|
db()->prepare("UPDATE trucks SET is_approved = 0 WHERE id = ? AND user_id = ?")->execute([$truckId, $userId]);
|
|
$flash = 'Truck status set to unapproved.';
|
|
} else {
|
|
$fullName = trim($_POST['full_name'] ?? '');
|
|
$email = trim($_POST['email'] ?? '');
|
|
$phone = trim($_POST['phone'] ?? '');
|
|
$countryId = (int)($_POST['country_id'] ?? 0);
|
|
$cityId = (int)($_POST['city_id'] ?? 0);
|
|
$addressLine = trim($_POST['address_line'] ?? '');
|
|
$status = trim($_POST['status'] ?? '');
|
|
$password = $_POST['password'] ?? '';
|
|
|
|
$bankAccount = trim($_POST['bank_account'] ?? '');
|
|
$bankName = trim($_POST['bank_name'] ?? '');
|
|
$bankBranch = trim($_POST['bank_branch'] ?? '');
|
|
$isCompany = isset($_POST['is_company']) ? 1 : 0;
|
|
$ctrNumber = trim($_POST['ctr_number'] ?? '');
|
|
$notes = trim($_POST['notes'] ?? '');
|
|
|
|
if ($fullName === '') $errors[] = 'Full name is required.';
|
|
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) $errors[] = 'Valid email is required.';
|
|
if ($phone === '') $errors[] = 'Phone number is required.';
|
|
if (!in_array($status, ['pending', 'active', 'rejected'], true)) $errors[] = 'Invalid status.';
|
|
|
|
if ($countryId <= 0 || $cityId <= 0) {
|
|
$errors[] = 'Please select country and city.';
|
|
}
|
|
|
|
if (!$errors) {
|
|
try {
|
|
db()->beginTransaction();
|
|
|
|
$stmtUser = db()->prepare("UPDATE users SET full_name = ?, email = ?, status = ? WHERE id = ? AND role = 'truck_owner'");
|
|
$stmtUser->execute([$fullName, $email, $status, $userId]);
|
|
|
|
if ($password !== '') {
|
|
$stmtPass = db()->prepare("UPDATE users SET password = ? WHERE id = ? AND role = 'truck_owner'");
|
|
$stmtPass->execute([password_hash($password, PASSWORD_DEFAULT), $userId]);
|
|
}
|
|
|
|
$stmtProfile = db()->prepare("
|
|
UPDATE truck_owner_profiles
|
|
SET phone = ?, address_line = ?, country_id = ?, city_id = ?,
|
|
bank_account = ?, bank_name = ?, bank_branch = ?, is_company = ?,
|
|
ctr_number = ?, notes = ?
|
|
WHERE user_id = ?
|
|
");
|
|
$stmtProfile->execute([$phone, $addressLine, $countryId, $cityId, $bankAccount, $bankName, $bankBranch, $isCompany, $ctrNumber, $notes, $userId]);
|
|
|
|
db()->commit();
|
|
$flash = 'Truck Owner profile updated successfully.';
|
|
} catch (Throwable $e) {
|
|
db()->rollBack();
|
|
$errors[] = 'Failed to update truck owner profile. Please try again.';
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// -- OUTPUT START --
|
|
if (!$isAjax):
|
|
render_header('Edit Truck Owner', 'admin', true);
|
|
?>
|
|
|
|
<div class="row g-0">
|
|
<div class="col-md-2 bg-white border-end min-vh-100">
|
|
<?php render_admin_sidebar('truck_owners'); ?>
|
|
</div>
|
|
<div class="col-md-10 p-4">
|
|
<div class="page-intro mb-4">
|
|
<a href="admin_truck_owners.php" class="text-decoration-none small text-muted mb-2 d-inline-block">← <?= e(t('back')) ?></a>
|
|
<h1 class="section-title mb-1"><?= e(t('edit_owner')) ?></h1>
|
|
</div>
|
|
|
|
<?php if ($flash): ?>
|
|
<div class="alert alert-success" data-auto-dismiss="true"><?= e($flash) ?></div>
|
|
<?php endif; ?>
|
|
<?php if ($errors): ?>
|
|
<div class="alert alert-warning"><?= e(implode('<br>', $errors)) ?></div>
|
|
<?php endif; ?>
|
|
|
|
<div class="panel p-4">
|
|
<form method="post" action="admin_truck_owner_edit.php?id=<?= $userId ?>" class="mb-5"> <?= csrf_field() ?>
|
|
<h5 class="mb-3"><?= e(t('full_name')) ?></h5>
|
|
<div class="row g-3 mb-4">
|
|
<div class="col-md-6">
|
|
<label class="form-label" for="full_name"><?= e(t('full_name')) ?></label>
|
|
<input type="text" name="full_name" id="full_name" class="form-control" value="<?= e((string)$owner['full_name']) ?>" required>
|
|
</div>
|
|
<div class="col-md-6">
|
|
<label class="form-label" for="email"><?= e(t('email')) ?></label>
|
|
<input type="email" name="email" id="email" class="form-control" value="<?= e((string)$owner['email']) ?>" required>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="phone"><?= e(t('phone')) ?></label>
|
|
<input type="text" name="phone" id="phone" class="form-control" value="<?= e((string)$owner['phone']) ?>" required>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="password"><?= e(t('password')) ?> <small class="text-muted">(leave blank)</small></label>
|
|
<input type="password" name="password" id="password" class="form-control" autocomplete="new-password">
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="status"><?= e(t('status')) ?></label>
|
|
<select name="status" id="status" class="form-select" required>
|
|
<option value="pending" <?= $owner['status'] === 'pending' ? 'selected' : '' ?>><?= e(t('pending')) ?></option>
|
|
<option value="active" <?= $owner['status'] === 'active' ? 'selected' : '' ?>><?= e(t('active')) ?></option>
|
|
<option value="rejected" <?= $owner['status'] === 'rejected' ? 'selected' : '' ?>><?= e(t('rejected')) ?></option>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="row g-3 mb-4">
|
|
<div class="col-md-6">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="is_company" id="is_company" value="1" <?= $owner['is_company'] ? 'checked' : '' ?>>
|
|
<label class="form-check-label" for="is_company"><?= e(t('is_company_checkbox')) ?></label>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-6">
|
|
<label class="form-label" for="ctr_number"><?= e(t('ctr_number')) ?></label>
|
|
<input type="text" name="ctr_number" id="ctr_number" class="form-control" value="<?= e((string)($owner['ctr_number'] ?? '')) ?>">
|
|
</div>
|
|
<div class="col-md-12">
|
|
<label class="form-label" for="notes"><?= e(t('notes')) ?></label>
|
|
<textarea name="notes" id="notes" class="form-control"><?= e((string)($owner['notes'] ?? '')) ?></textarea>
|
|
</div>
|
|
</div>
|
|
|
|
<h5 class="mb-3"><?= e(t('location')) ?></h5>
|
|
<div class="row g-3 mb-4">
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="country_id"><?= e(t('country')) ?></label>
|
|
<select name="country_id" id="country_id" class="form-select" onchange="syncCities()" required>
|
|
<option value=""><?= e(t('select_country')) ?></option>
|
|
<?php foreach ($countries as $country): ?>
|
|
<option value="<?= e((string)$country['id']) ?>" <?= (string)$owner['country_id'] === (string)$country['id'] ? 'selected' : '' ?>>
|
|
<?= e($lang === 'ar' && !empty($country['name_ar']) ? $country['name_ar'] : $country['name_en']) ?>
|
|
</option>
|
|
<?php endforeach; ?>
|
|
</select>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="city_id"><?= e(t('city')) ?></label>
|
|
<select name="city_id" id="city_id" class="form-select" required data-selected="<?= e((string)$owner['city_id']) ?>">
|
|
<option value=""><?= e(t('select_city')) ?></option>
|
|
</select>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="address_line"><?= e(t('address')) ?></label>
|
|
<input type="text" name="address_line" id="address_line" class="form-control" value="<?= e((string)$owner['address_line']) ?>" required>
|
|
</div>
|
|
</div>
|
|
|
|
<h5 class="mb-3 border-top pt-3"><?= e(t('bank_account')) ?></h5>
|
|
<div class="row g-3 mb-4">
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="bank_account"><?= e(t('bank_account')) ?></label>
|
|
<input type="text" name="bank_account" id="bank_account" class="form-control" value="<?= e((string)($owner['bank_account'] ?? '')) ?>">
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="bank_name"><?= e(t('bank_name')) ?></label>
|
|
<input type="text" name="bank_name" id="bank_name" class="form-control" value="<?= e((string)($owner['bank_name'] ?? '')) ?>">
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label class="form-label" for="bank_branch"><?= e(t('bank_branch')) ?></label>
|
|
<input type="text" name="bank_branch" id="bank_branch" class="form-control" value="<?= e((string)($owner['bank_branch'] ?? '')) ?>">
|
|
</div>
|
|
</div>
|
|
<button type="submit" class="btn btn-primary"><?= e(t('save_changes')) ?></button>
|
|
</form>
|
|
|
|
<h5 class="mb-3 border-top pt-3"><?= e(t('truck_info')) ?></h5>
|
|
<table class="table table-bordered">
|
|
<thead>
|
|
<tr>
|
|
<th><?= e(t('truck_type')) ?></th>
|
|
<th><?= e(t('cap')) ?></th>
|
|
<th><?= e(t('plate_no')) ?></th>
|
|
<th>Expiry</th>
|
|
<th>Status</th>
|
|
<th><?= e(t('actions')) ?></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<?php foreach ($ownerTrucks as $truck): ?>
|
|
<?php
|
|
$isExpired = (strtotime($truck['registration_expiry_date'] ?? '1900-01-01') < time()) || (strtotime($truck['insurance_expiry_date'] ?? '1900-01-01') < time());
|
|
?>
|
|
<tr class="<?= $isExpired ? 'table-danger' : '' ?>">
|
|
<td><?= e($truck['truck_type']) ?></td>
|
|
<td><?= e($truck['load_capacity']) ?></td>
|
|
<td><?= e($truck['plate_no']) ?></td>
|
|
<td><?= e(($truck['registration_expiry_date'] ?? 'N/A') . ' / ' . ($truck['insurance_expiry_date'] ?? 'N/A')) ?></td>
|
|
<td>
|
|
<?php if ($isExpired): ?>
|
|
<span class="badge bg-danger"><?= e(t('rejected')) ?></span>
|
|
<?php elseif ($truck['is_approved']): ?>
|
|
<span class="badge bg-success"><?= e(t('active')) ?></span>
|
|
<?php else: ?>
|
|
<span class="badge bg-warning text-dark"><?= e(t('pending')) ?></span>
|
|
<?php endif; ?>
|
|
</td>
|
|
<td>
|
|
<form method="post" action="admin_truck_owner_edit.php?id=<?= $userId ?>">
|
|
<?= csrf_field() ?>
|
|
<input type="hidden" name="truck_id" value="<?= e((string)$truck['id']) ?>">
|
|
<?php if ($truck['is_approved'] && !$isExpired): ?>
|
|
<button type="submit" name="reject_truck" class="btn btn-sm btn-outline-danger"><?= e(t('reject')) ?></button>
|
|
<?php elseif (!$isExpired): ?>
|
|
<button type="submit" name="approve_truck" class="btn btn-sm btn-outline-success"><?= e(t('approve')) ?></button>
|
|
<?php endif; ?>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<script>
|
|
const allCities = <?= json_encode($cities, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?>;
|
|
function syncCities() {
|
|
const countryId = document.getElementById('country_id').value;
|
|
const citySelect = document.getElementById('city_id');
|
|
const selectedValue = citySelect.dataset.selected || '';
|
|
citySelect.innerHTML = '<option value=""><?= e(t('select_city')) ?></option>';
|
|
allCities.forEach((city) => {
|
|
if (String(city.country_id) !== String(countryId)) return;
|
|
const option = document.createElement('option');
|
|
option.value = city.id;
|
|
option.textContent = '<?= $lang ?>' === 'ar' && city.name_ar ? city.name_ar : (city.name_en || city.name_ar);
|
|
if (String(city.id) === String(selectedValue)) option.selected = true;
|
|
citySelect.appendChild(option);
|
|
});
|
|
citySelect.dataset.selected = '';
|
|
}
|
|
syncCities();
|
|
</script>
|
|
<?php render_footer(); endif; ?>
|