diff --git a/login.php b/login.php
new file mode 100644
index 0000000..5001268
--- /dev/null
+++ b/login.php
@@ -0,0 +1,65 @@
+prepare("SELECT * FROM users WHERE email = ?");
+ $stmt->execute([$email]);
+ $user = $stmt->fetch(PDO::FETCH_ASSOC);
+
+ if ($user && password_verify($password, $user['password'])) {
+ $_SESSION['user_id'] = $user['id'];
+ $_SESSION['user_role'] = $user['role'];
+ header('Location: admin.php');
+ exit;
+ } else {
+ $error = t('Invalid email or password.', 'البريد الإلكتروني أو كلمة المرور غير صحيحة.');
+ }
+ } else {
+ $error = t('Please fill in all fields.', 'يرجى تعبئة جميع الحقول.');
+ }
+}
+
+render_head(t('Login', 'تسجيل الدخول'));
+render_nav('login.php');
+?>
+
+
+
+
diff --git a/logout.php b/logout.php
new file mode 100644
index 0000000..e230326
--- /dev/null
+++ b/logout.php
@@ -0,0 +1,8 @@
+prepare("INSERT INTO landing_settings (setting_key, value_en, value_ar) VALUES (:key, :en, :ar) ON DUPLICATE KEY UPDATE value_en = :en, value_ar = :ar");
+ foreach ($settings as $key => $values) {
+ $stmt->execute([
+ 'key' => $key,
+ 'en' => $values['en'] ?? '',
+ 'ar' => $values['ar'] ?? ''
+ ]);
+ }
+
+ # Save image settings
+ $upload_dir = __DIR__ . '/assets/images/uploads/';
+ if (!is_dir($upload_dir)) {
+ mkdir($upload_dir, 0775, true);
+ }
+
+ $sections = ['hero', 'courses', 'subjects', 'flow', 'plans'];
+ foreach ($sections as $sec) {
+ if (isset($_FILES['images']['error'][$sec]) && $_FILES['images']['error'][$sec] === UPLOAD_ERR_OK) {
+ $filename = time() . '_' . basename($_FILES['images']['name'][$sec]);
+ $target_file = $upload_dir . $filename;
+ if (move_uploaded_file($_FILES['images']['tmp_name'][$sec], $target_file)) {
+ $picture = 'assets/images/uploads/' . $filename;
+ $stmt->execute([
+ 'key' => $sec . '_image',
+ 'en' => $picture,
+ 'ar' => $picture
+ ]);
+ }
+ }
+ }
+
+ header('Location: ' . app_url('admin.php', ['page' => 'landing', 'saved' => 1]));
+ exit;
+}
+
+$stmt = $pdo->query("SELECT setting_key, value_en, value_ar FROM landing_settings");
+$all_settings = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+$settings = [];
+foreach ($all_settings as $row) {
+ $settings[$row['setting_key']] = $row;
+}
+
+$sections = [
+ 'hero' => [
+ 'label' => 'Hero Section / القسم الأول',
+ 'fields' => [
+ 'eyebrow' => ['label' => 'Eyebrow / النص الصغير', 'type' => 'text'],
+ 'title' => ['label' => 'Title / العنوان الرئيسي', 'type' => 'textarea'],
+ 'desc' => ['label' => 'Description / الوصف', 'type' => 'textarea'],
+ ]
+ ],
+ 'courses' => [
+ 'label' => 'Courses Section / قسم الدورات',
+ 'fields' => [
+ 'eyebrow' => ['label' => 'Eyebrow / النص الصغير', 'type' => 'text'],
+ 'title' => ['label' => 'Title / العنوان الرئيسي', 'type' => 'textarea'],
+ ]
+ ],
+ 'subjects' => [
+ 'label' => 'Subjects Section / قسم المواد',
+ 'fields' => [
+ 'eyebrow' => ['label' => 'Eyebrow / النص الصغير', 'type' => 'text'],
+ 'title' => ['label' => 'Title / العنوان الرئيسي', 'type' => 'textarea'],
+ ]
+ ],
+ 'flow' => [
+ 'label' => 'Delivery Flow Section / قسم مسار التسليم',
+ 'fields' => [
+ 'eyebrow' => ['label' => 'Eyebrow / النص الصغير', 'type' => 'text'],
+ 'title' => ['label' => 'Title / العنوان الرئيسي', 'type' => 'textarea'],
+ ]
+ ],
+ 'plans' => [
+ 'label' => 'Plans Section / قسم الخطط',
+ 'fields' => [
+ 'eyebrow' => ['label' => 'Eyebrow / النص الصغير', 'type' => 'text'],
+ 'title' => ['label' => 'Title / العنوان الرئيسي', 'type' => 'textarea'],
+ ]
+ ]
+];
+"""
+
+new_html_form = """
+
+"""
+
+# Now replace the parts in admin_landing.php
+# 1. from `if ($_SERVER['REQUEST_METHOD']` to `$fields = [...];`
+php_pattern = re.compile(r"if \(\$_SERVER\[\'REQUEST_METHOD\'\].*?\];\s*", re.DOTALL)
+admin_landing_content = php_pattern.sub(new_php_logic, admin_landing_content)
+
+# 2. from `
` at the end
+html_pattern = re.compile(r"
\s*$", re.DOTALL)
+admin_landing_content = html_pattern.sub(new_html_form, admin_landing_content)
+
+with open(admin_landing_path, 'w', encoding='utf-8') as f:
+ f.write(admin_landing_content)
diff --git a/patch_checkout.php b/patch_checkout.php
index 463696d..bd1113e 100644
--- a/patch_checkout.php
+++ b/patch_checkout.php
@@ -2,28 +2,21 @@
$file = 'checkout.php';
$content = file_get_contents($file);
-// check course limits
-$limit_check = <<
0) {
- $course = db()->query("SELECT * FROM courses WHERE id = $courseIdForView")->fetch();
- if ($course) {
- if (! $course['registration_open']) {
- die(t('Registration for this course is currently closed.', 'التسجيل في هذه الدورة مغلق حالياً.'));
- }
- if ($course['max_students'] > 0) {
- $enrolled = db()->query("SELECT COUNT(*) FROM course_students WHERE course_id = $courseIdForView")->fetchColumn();
- if ($enrolled >= $course['max_students']) {
- die(t('This course has reached its maximum number of students.', 'لقد وصلت هذه الدورة إلى الحد الأقصى لعدد الطلاب.'));
- }
- }
- } else {
- die('Course not found');
- }
-}
-PHP;
+$search1 = "'email' => trim((string) (\$_POST['email'] ?? '')),";
+$replace1 = $search1 . "\n 'password' => (string) (\$_POST['password'] ?? ''),";
+$content = str_replace($search1, $replace1, $content);
-$content = preg_replace("/if \(\\$courseIdForView > 0\) \{\\s*\\\$course = db\(\)->query\(\"SELECT \* FROM courses WHERE id = \\\$courseIdForView\"\)->fetch\(\);\\s*\}", $limit_check, $content);
+$search2 = "if (!filter_var(\$form['email'], FILTER_VALIDATE_EMAIL)) {";
+$replace2 = "if (empty(\$form['password']) || strlen(\$form['password']) < 6) {\n \$errors[] = t('Password must be at least 6 characters.', 'يجب أن تتكون كلمة المرور من 6 أحرف على الأقل.');\n }\n " . $search2;
+$content = str_replace($search2, $replace2, $content);
+
+$search3 = "'email' => \$form['email'],";
+$replace3 = "'email' => \$form['email'],\n 'password' => password_hash(\$form['password'], PASSWORD_DEFAULT),";
+$content = str_replace($search3, $replace3, $content);
+
+$search4 = '/\s*
.*?<\/div>/s';
+$replace4 = '$0'."\n".' '."\n".'
';
+$content = preg_replace($search4, $replace4, $content);
file_put_contents($file, $content);
-echo "Done\n";
-
+echo "checkout.php patched\n";
\ No newline at end of file
diff --git a/patch_index.py b/patch_index.py
new file mode 100644
index 0000000..f20924c
--- /dev/null
+++ b/patch_index.py
@@ -0,0 +1,161 @@
+with open('index.php', 'r', encoding='utf-8') as f:
+ content = f.read()
+
+# 1. Hero Section
+# find the panel-card div and everything inside it up to
+# It starts with:
+#
+#
+
+old_hero_col = """
+
"""
+
+new_hero_col = """
+
+
+
+
"""
+
+content = content.replace(old_hero_col, new_hero_col)
+
+old_hero_end = """
+
+
+
+
+ """
+
+new_hero_end = """
+
+
+
+ """
+
+content = content.replace(old_hero_end, new_hero_end)
+
+
+# 2. Courses Section
+old_courses = """ """
+
+new_courses = """
+
+
+
+
+
+
+
+
+
+ """
+content = content.replace(old_courses, new_courses)
+
+
+# 3. Subjects Section
+old_subjects = """ """
+
+new_subjects = """
+
+
+
+
+
+
+
+
+ """
+content = content.replace(old_subjects, new_subjects)
+
+
+# 4. Flow Section
+old_flow = """ """
+
+new_flow = """
+
+
+
+
+
+
+
+
+
+ """
+content = content.replace(old_flow, new_flow)
+
+
+# 5. Plans Section
+old_plans = """ """
+
+new_plans = """
+
+
+
+
+
+
+
+
+ """
+content = content.replace(old_plans, new_plans)
+
+with open('index.php', 'w', encoding='utf-8') as f:
+ f.write(content)
\ No newline at end of file
diff --git a/profile.php b/profile.php
new file mode 100644
index 0000000..432732a
--- /dev/null
+++ b/profile.php
@@ -0,0 +1,86 @@
+prepare("SELECT id FROM users WHERE email = ? AND id != ?");
+ $stmt->execute([$email, $user['id']]);
+ if ($stmt->fetchColumn()) {
+ $error = t('Email already taken.', 'البريد الإلكتروني مستخدم بالفعل.');
+ } else {
+ if ($password) {
+ $hash = password_hash($password, PASSWORD_DEFAULT);
+ $update = db()->prepare("UPDATE users SET name = ?, email = ?, password = ? WHERE id = ?");
+ $update->execute([$name, $email, $hash, $user['id']]);
+ } else {
+ $update = db()->prepare("UPDATE users SET name = ?, email = ? WHERE id = ?");
+ $update->execute([$name, $email, $user['id']]);
+ }
+ $success = t('Profile updated successfully.', 'تم تحديث الملف الشخصي بنجاح.');
+ $user = get_logged_in_user(); // Refresh
+ }
+ }
+}
+
+render_head(t('My Profile', 'الملف الشخصي'));
+render_nav('profile.php');
+?>
+
+
+
+
diff --git a/reset_password.php b/reset_password.php
new file mode 100644
index 0000000..b4061a7
--- /dev/null
+++ b/reset_password.php
@@ -0,0 +1,112 @@
+prepare("SELECT id FROM users WHERE email = ?");
+ $stmt->execute([$email]);
+ $user = $stmt->fetch();
+ if ($user) {
+ $newToken = bin2hex(random_bytes(32));
+ $expires = date('Y-m-d H:i:s', strtotime('+1 hour'));
+ $update = db()->prepare("UPDATE users SET reset_token = ?, reset_expires = ? WHERE id = ?");
+ $update->execute([$newToken, $expires, $user['id']]);
+
+ $resetUrl = app_url('reset_password.php', ['action' => 'reset', 'token' => $newToken]);
+ $fullResetUrl = 'http://' . $_SERVER['HTTP_HOST'] . '/' . ltrim($resetUrl, '/');
+ $htmlBody = "
You requested a password reset. Click the link below to reset it:
{$fullResetUrl}
Link expires in 1 hour.
";
+
+ MailService::sendMail($email, "Password Reset", $htmlBody);
+ }
+ $success = t('If that email is in our system, you will receive a password reset link shortly.', 'إذا كان البريد الإلكتروني مسجلاً لدينا، ستتلقى رابطاً لإعادة تعيين كلمة المرور قريباً.');
+ }
+ } elseif ($action === 'reset' && $token) {
+ $password = $_POST['password'] ?? '';
+ $password_confirm = $_POST['password_confirm'] ?? '';
+
+ $stmt = db()->prepare("SELECT id FROM users WHERE reset_token = ? AND reset_expires > NOW()");
+ $stmt->execute([$token]);
+ $user = $stmt->fetch();
+
+ if (!$user) {
+ $error = t('Invalid or expired token.', 'رمز غير صالح أو منتهي الصلاحية.');
+ } elseif ($password !== $password_confirm) {
+ $error = t('Passwords do not match.', 'كلمتا المرور غير متطابقتين.');
+ } else {
+ $hash = password_hash($password, PASSWORD_DEFAULT);
+ $update = db()->prepare("UPDATE users SET password = ?, reset_token = NULL, reset_expires = NULL WHERE id = ?");
+ $update->execute([$hash, $user['id']]);
+ $success = t('Password updated successfully. You can now log in.', 'تم تحديث كلمة المرور بنجاح. يمكنك الآن تسجيل الدخول.');
+ $action = 'done';
+ }
+ }
+}
+
+render_head(t('Reset Password', 'إعادة تعيين كلمة المرور'));
+render_nav('login.php');
+?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+