1#@!#!123s

: / home / schoolcampuserp / hrschool.in / admin /
Filename : code.php
back
<?php

include('security.php');
session_start();
// error_reporting(E_ALL);
// ini_set('display_errors', 1);

/* Register Login Start */

if(isset($_POST['updatebtn']))
{
    $id = $_POST['edit_id'];
    $username = $_POST['edit_username'];
    $email = $_POST['edit_email'];
    $password = $_POST['edit_password'];

    $query = "UPDATE admin SET username='$username', email='$email', password='$password' WHERE id='$id' ";
    $query_run = mysqli_query($conn, $query);

    if($query_run)
    {
        $_SESSION['status'] = "Your Data is Updated";
        $_SESSION['status_code'] = "success";
        header('Location: register.php'); 
    }
    else
    {
        $_SESSION['status'] = "Your Data is NOT Updated";
        $_SESSION['status_code'] = "error";
        header('Location: register.php'); 
    }
}

if (isset($_POST['delete_btn'])) {
    $id = $_POST['delete_id'];

    $query = "DELETE FROM admin WHERE id='$id' ";
    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        $_SESSION['status'] = "Your Data is Deleted";
        $_SESSION['status_code'] = "success";
        header('Location: register.php');
    } else {
        $_SESSION['status'] = "Your Data is NOT DELETED";
        $_SESSION['status_code'] = "error";
        header('Location: register.php');
    }
}

if (isset($_POST['login_btn'])) {
    $email_login = $_POST['emaill'];
    $password_login = $_POST['passwordd'];

    $query = "SELECT * FROM admin WHERE email='$email_login' AND password='$password_login' LIMIT 1";
    $query_run = mysqli_query($conn, $query);

    if (mysqli_fetch_array($query_run)) {
        $_SESSION['username'] = $email_login;
        header('Location: index.php');
    } else {
        $_SESSION['status'] = "Email / Password is Invalid";
        header('Location: login.php');
    }
}

if (isset($_POST['registerbtn'])) {
    $username = $_POST['username'];
    $email = $_POST['email'];
    $password = $_POST['password'];
    $cpassword = $_POST['confirmpassword'];

    $email_query = "SELECT * FROM admin WHERE email='$email' ";
    $email_query_run = mysqli_query($conn, $email_query);
    if (mysqli_num_rows($email_query_run) > 0) {
        $_SESSION['status'] = "Email Already Taken. Please Try Another one.";
        $_SESSION['status_code'] = "error";
        header('Location: register.php');
    } else {
        if ($password === $cpassword) {
            $query = "INSERT INTO admin (username,email,password) VALUES ('$username','$email','$password')";
            $query_run = mysqli_query($conn, $query);

            if ($query_run) {
                // echo "Saved";
                $_SESSION['status'] = "Admin Profile Added";
                $_SESSION['status_code'] = "success";
                header('Location: register.php');
            } else {
                $_SESSION['status'] = "Admin Profile Not Added";
                $_SESSION['status_code'] = "error";
                header('Location: register.php');
            }
        } else {
            $_SESSION['status'] = "Password and Confirm Password Does Not Match";
            $_SESSION['status_code'] = "warning";
            header('Location: register.php');
        }
    }
}
/* Register Login End */

/* About School Start */
if (isset($_POST['about_school_save_btn'])) {
    $id = isset($_POST['id']) ? intval($_POST['id']) : 0;
    $about = $_POST['about'];
    $key_features = $_POST['key_features'];
    $background_color = $_POST['background_color'];

    // Handle image uploads
    $image1 = uploadImage('image1');
    $image2 = uploadImage('image2');
    $image3 = uploadImage('image3');

    if ($id > 0) {
        // Update record
        $sql = "UPDATE about_school SET 
                    about = ?, 
                    key_features = ?, 
                    image1 = COALESCE(NULLIF(?, ''), image1),
                    image2 = COALESCE(NULLIF(?, ''), image2),
                    image3 = COALESCE(NULLIF(?, ''), image3),
                    background_color = ?,
                    updated_at = NOW()
                WHERE id = ?";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("ssssssi", $about, $key_features, $image1, $image2, $image3, $background_color, $id);
    } else {
        // Insert new record
        $sql = "INSERT INTO about_school (about, key_features, image1, image2, image3, background_color, created_at, updated_at)
                VALUES (?, ?, ?, ?, ?, ?, NOW(), NOW())";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("ssssss", $about, $key_features, $image1, $image2, $image3, $background_color);
    }

    if ($stmt->execute()) {
        $_SESSION['status'] = "Data saved successfully";
        $_SESSION['status_code'] = "success";
        header('Location: about_school.php');
    } else {
        $_SESSION['status'] = "Failed To Save Data !";
        $_SESSION['status_code'] = "success";
        header('Location: about_school.php');
    }
}

// Image Upload Function
function uploadImage($fieldName) {
    if (isset($_FILES[$fieldName]["name"])) {
        $targetDir = "files/images/";
        $fileName = basename($_FILES[$fieldName]["name"]);
        
    // echo "test1<pre>";
    // print_r($_FILES[$fieldName]);
    //  echo "<pre>";
        
    if(!empty($fileName)){
    $file_ext = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    
    if (!in_array($file_ext, $allowed_ext)) {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed !";
        $_SESSION['status_code'] = "error";
        header('Location: about_school.php');
        exit();
    }
    }
        
        $targetFile = $targetDir . uniqid() . "_" . $fileName;

        if (move_uploaded_file($_FILES[$fieldName]["tmp_name"], $targetFile)) {
            return $targetFile;
        }
    }
    return ''; 
}
/* About School End */

// test only 
if (isset($_POST['gallery_save_btn'])) {
    $title = $_POST['title'];
    $related_to = $_POST['related_to'];
    $image_name = $_FILES["image_path"]['name'];
    $image_tmp = $_FILES["image_path"]["tmp_name"];
    $image_ext = strtolower(pathinfo($image_name, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];

    if (in_array($image_ext, $allowed_ext)) {
        $query = "INSERT INTO `gallery` (`title`,`image_path`, `related_to`) VALUES ('$title','$image_name', '$related_to')";
        $query_run = mysqli_query($conn, $query);

        if ($query_run) {
            move_uploaded_file($image_tmp, "files/gallery/" . $image_name);
            $_SESSION['status'] = "Image Added Successfully!";
            $_SESSION['status_code'] = "success";
            header('Location: gallery.php');
            exit();
        } else {
            $_SESSION['status'] = "Failed to Upload Image to Database!";
            $_SESSION['status_code'] = "error";
            header('Location: gallery.php');
            exit();
        }
    } else {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed.";
        $_SESSION['status_code'] = "error";
        header('Location: gallery.php');
        exit();
    }
}



/* Gallery Backend Start */

if (isset($_POST['gallery_save_btn'])) {
    $title = $_POST['title'];
    $related_to = $_POST['related_to'];
    $image_path = $_FILES["image_path"]['name'];
    
    $image_ext = strtolower(pathinfo($image_name, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    

if (in_array($image_ext, $allowed_ext)) {
    $query = "INSERT INTO  `gallery` (`title`,`image_path`, `related_to`) VALUES ('$title','$image_path', '$related_to')";
    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        move_uploaded_file($_FILES["image_path"]["tmp_name"],  "files/gallery/" . $_FILES['image_path']['name']);
        $_SESSION['status'] = "Image Added Successfully !";
        $_SESSION['status_code'] = "success";
        header('Location: gallery.php');
    } else {
        $_SESSION['status'] = "Failed to Upload Image";
        $_SESSION['status_code'] = "error";
        header('Location: gallery.php');
    }
    
} else {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed.";
        $_SESSION['status_code'] = "error";
        header('Location: gallery.php');
        exit();
    }
}


if (isset($_POST['gallery_delete_btn'])) {
    $id = $_POST['id'];

    $query1 = "SELECT * FROM gallery WHERE id = '$id'";
    $query_run1 = mysqli_query($conn, $query1);
    $row = mysqli_fetch_assoc($query_run1);
    unlink("files/gallery/" . $row['image_path']);

    $query = "DELETE FROM gallery WHERE id='$id' ";
    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        $_SESSION['status'] = "Image Delated Successfully !";
        $_SESSION['status_code'] = "success";
        header('Location: gallery.php');
    } else {
        $_SESSION['status'] = "Failed to Delete Image";
        $_SESSION['status_code'] = "error";
        header('Location: gallery.php');
    }
}

if (isset($_POST['gallery_status_update_btn'])) {
 
    $id = $_POST['id'];
    $stmt = $conn->prepare("SELECT status FROM gallery WHERE id = ?");
    $stmt->bind_param("i", $id);
    $stmt->execute();
    $stmt->store_result();
    $stmt->bind_result($current_status);
    $stmt->fetch();
    
    $new_status = ($current_status === 'active') ? 'inactive' : 'active';

    $update_stmt = $conn->prepare("UPDATE gallery SET status = ? WHERE id = ?");
    $update_stmt->bind_param("si", $new_status, $id);

    if ($update_stmt->execute()) {
        $_SESSION['status'] = "Status updated successfully!";
        $_SESSION['status_code'] = "success";
        header('Location: gallery.php');
    } else {
        $_SESSION['status'] = "Failed to Update Status !";
        $_SESSION['status_code'] = "error";
        header('Location: gallery.php');
    }
}

if (isset($_POST['gallery_category_save_btn'])) {
    
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    if (!empty($name)) {
        $query = "INSERT INTO gallery_category (name) VALUES ('$name')";
        
        if (mysqli_query($conn, $query)) {
     
            $_SESSION['status'] = "Category Added successfully!";
            $_SESSION['status_code'] = "success";
            $_SESSION['show_modal'] = true;
        } else {
            $_SESSION['status'] = "Failed to Add Category !";
            $_SESSION['status_code'] = "error";
            $_SESSION['show_modal'] = true;
        }
        header("Location: gallery.php");
    } 
}

if (isset($_POST['gallery_category_delete_btn'])) {
    $id = mysqli_real_escape_string($conn, $_POST['id']); 

    if (!empty($id)) {
        $query = "DELETE FROM gallery_category WHERE id = '$id'";

        if (mysqli_query($conn, $query)) {
            $_SESSION['status'] = "Category deleted successfully!";
            $_SESSION['status_code'] = "success";
        } else {
            $_SESSION['status'] = "Failed to delete the category!";
            $_SESSION['status_code'] = "error";
        }
    } else {
        $_SESSION['status'] = "Invalid category ID!";
        $_SESSION['status_code'] = "error";
    }
    header("Location: gallery.php");
}

/* Gallery Backend End */


/* Banner Backend Start */

if (isset($_POST['bsave'])) {
    $title = $_POST['title'];
    $image_path = $_FILES["image_path"]['name'];
    
        $image_ext = strtolower(pathinfo($image_path, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    
    if (!in_array($image_ext, $allowed_ext)) {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed !";
        $_SESSION['status_code'] = "error";
        header('Location: banner.php');
        exit();
    }


    $query = "INSERT INTO  `banner` (`title`,`image_path`) VALUES ('$title','$image_path')";
    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        move_uploaded_file($_FILES["image_path"]["tmp_name"], "files/images/" . $_FILES['image_path']['name']);
        $_SESSION['status'] = "Banner Added Successfully !";
        $_SESSION['status_code'] = "success";
        header('Location: banner.php');
    } else {
        $_SESSION['status'] = "File not uploaded";
        $_SESSION['status_code'] = "error";
        header('Location: banner.php');
    }
}


if (isset($_POST['delete_btn_img_b'])) {
    $id = $_POST['delete_img_b'];

    $query1 = "SELECT * FROM banner WHERE id = '$id'";
    $query_run1 = mysqli_query($conn, $query1);
    $row = mysqli_fetch_assoc($query_run1);
    unlink("files/images/" . $row['imgfile']);

    $query = "DELETE FROM banner WHERE id='$id' ";
    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        $_SESSION['status'] = "Banner Deleted Successfully !";
        $_SESSION['status_code'] = "success";
        header('Location: banner.php');
    } else {
        $_SESSION['status'] = "Failed to Delete Banner";
        $_SESSION['status_code'] = "error";
        header('Location: banner.php');
    }
}

if (isset($_POST['change_status_btn'])) {
    // Get the ID from the form
    $id = $_POST['change_status'];

    $query = "SELECT status FROM banner WHERE id = ?";
    $stmt = $conn->prepare($query);
    $stmt->bind_param("i", $id);
    $stmt->execute();
    $result = $stmt->get_result();

    if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();
        $current_status = $row['status'];

        // Toggle the status
        $new_status = ($current_status == 1) ? 0 : 1;

        // Update the status in the database
        $update_query = "UPDATE banner SET status = ? WHERE id = ?";
        $update_stmt = $conn->prepare($update_query);
        $update_stmt->bind_param("ii", $new_status, $id);

        if ($update_stmt->execute()) {
            $_SESSION['status'] = "Status updated successfully.";
            $_SESSION['status_code'] = "success";
            header('Location: banner.php');
        } else {
            $_SESSION['status'] = "Failed to update status";
            $_SESSION['status_code'] = "error";
            header('Location: banner.php');
        }
    } 
}

/* Banner Backend End */

/* Director Message Backend Start */

if (isset($_POST['director_msg_save'])) {
    // Get form data
    $director_name = $_POST['director_name'];
    $message = $_POST['director_message'];

    // Check if a record already exists
    $query_check = "SELECT * FROM director_message WHERE id=1";
    $result_check = mysqli_query($conn, $query_check);

    if (mysqli_num_rows($result_check) > 0) {
        // Record exists, perform an update
        if ($_FILES['director_img']['name']) {
            $photo_name = $_FILES['director_img']['name'];
            $photo_tmp_name = $_FILES['director_img']['tmp_name'];
            $upload_dir = 'files/images/';
            $photo_path = $upload_dir . basename($photo_name);
            
    $photo_ext = strtolower(pathinfo($photo_name, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    
    if (!in_array($photo_ext, $allowed_ext)) {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed !";
        $_SESSION['status_code'] = "error";
        header('Location: director_message.php');
        exit();
    }

            if (move_uploaded_file($photo_tmp_name, $photo_path)) {
                $query = "UPDATE director_message SET director_name=?, director_img=?, director_message=? WHERE id=1";
                $stmt = $conn->prepare($query);
                $stmt->bind_param("sss", $director_name, $photo_path, $message);
                if ($stmt->execute()) {
                    $_SESSION['status'] = "Message updated successfully!";
                    $_SESSION['status_code'] = "success";
                } else {
                    $_SESSION['status'] = "Failed to update message!";
                    $_SESSION['status_code'] = "error";
                }
            } else {
                $_SESSION['status'] = "Failed to upload photo!";
                $_SESSION['status_code'] = "error";
            }
        } else {
            $query = "UPDATE director_message SET director_name=?, director_message=? WHERE id=1";
            $stmt = $conn->prepare($query);
            $stmt->bind_param("ss", $director_name, $message);
            if ($stmt->execute()) {
                $_SESSION['status'] = "Message updated successfully!";
                $_SESSION['status_code'] = "success";
            } else {
                $_SESSION['status'] = "Failed to update message!";
                $_SESSION['status_code'] = "error";
            }
        }
    } else {
        // Record does not exist, perform an insert
        if ($_FILES['director_img']['name']) {
            $photo_name = $_FILES['director_img']['name'];
            $photo_tmp_name = $_FILES['director_img']['tmp_name'];
            $upload_dir = 'files/images/';
            $photo_path = $upload_dir . basename($photo_name);
            
    $photo_ext = strtolower(pathinfo($photo_name, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    
    if (!in_array($photo_ext, $allowed_ext)) {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed !";
        $_SESSION['status_code'] = "error";
        header('Location: director_message.php');
        exit();
    }

            if (move_uploaded_file($photo_tmp_name, $photo_path)) {
                $query = "INSERT INTO director_message (director_name, director_img, director_message) VALUES (?, ?, ?)";
                $stmt = $conn->prepare($query);
                $stmt->bind_param("sss", $director_name, $photo_path, $message);
                if ($stmt->execute()) {
                    $_SESSION['status'] = "Message inserted successfully!";
                    $_SESSION['status_code'] = "success";
                } else {
                    $_SESSION['status'] = "Failed to insert message!";
                    $_SESSION['status_code'] = "error";
                }
            } else {
                $_SESSION['status'] = "Failed to upload photo!";
                $_SESSION['status_code'] = "error";
            }
        } else {
            $query = "INSERT INTO director_message (director_name, director_message) VALUES (?, ?)";
            $stmt = $conn->prepare($query);
            $stmt->bind_param("ss", $director_name, $message);
            if ($stmt->execute()) {
                $_SESSION['status'] = "Message inserted successfully!";
                $_SESSION['status_code'] = "success";
            } else {
                $_SESSION['status'] = "Failed to insert message!";
                $_SESSION['status_code'] = "error";
            }
        }
    }

    header('Location: director_message.php'); // Redirect to admin panel or a confirmation page
}


/* Director Message Backend End */


/* Announcement Backend Start */

if (isset($_POST['announcement_save_btn'])) {
    // Sanitize input
    $title = mysqli_real_escape_string($conn, $_POST['title']);
    $description = mysqli_real_escape_string($conn, $_POST['description']);

    // Handle file upload
    $file_path = null;
    if (isset($_FILES['file_path']['name'])) {
        
        $file_name = basename($_FILES["file_path"]["name"]);
              // Get extension
        $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
        
                // Allow only PDF
        if ($file_ext !== "pdf") {
            $_SESSION['status'] = "Invalid file format! Only PDF allowed.";
            $_SESSION['status_code'] = "error";
            header('Location: announcement.php');
            exit();
        }
        
        $target_dir = "files/announcements/";
        $target_file = $target_dir . basename($_FILES["file_path"]["name"]);
        
        if (move_uploaded_file($_FILES["file_path"]["tmp_name"], $target_file)) {
            $file_path = $target_file;
        } else {
            $_SESSION['status'] = "Sorry, there was an error uploading your file !";
            $_SESSION['status_code'] = "error";
        }
    }

    // Insert into the database
    $sql = "INSERT INTO announcements (title, description, file_path) VALUES ('$title', '$description', '$file_path')";
    if ($conn->query($sql) === TRUE) {
        $_SESSION['status'] = "Announcement added Successfully !";
        $_SESSION['status_code'] = "success";
    } else {
        $_SESSION['status'] = "Failed to add Announcement !";
        $_SESSION['status_code'] = "error";
    }
    
    header('Location: announcement.php');

}

if (isset($_POST['delete_announcement_btn'])) {
    $announcement_id = $_POST['announcement_id'];
    $sql = "DELETE FROM announcements WHERE id = ?";
    
    // Prepare statement to prevent SQL injection
    if ($stmt = $conn->prepare($sql)) {
        $stmt->bind_param("i", $announcement_id); // "i" means integer
        if ($stmt->execute()) {
            $_SESSION['status'] = "Announcement deleted successfully!";
            $_SESSION['status_code'] = "success";
        } else {
            $_SESSION['status'] = "Error deleting the announcement!";
            $_SESSION['status_code'] = "error";
        }
    } else {
        $_SESSION['status'] = "Error with the query!";
        $_SESSION['status_code'] = "error";
    }
    
    header('Location: announcement.php');
}

/* Announcement Backend End */


/* Toppers Backend Start */

if (isset($_POST['add_topper_btn'])) {
    // Retrieve form data
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    $class = mysqli_real_escape_string($conn, $_POST['class']);
    $percentage = floatval($_POST['percentage']);
    $session = intval($_POST['session']);

    // Handle photo upload
    $photo_path = null;
    if (isset($_FILES['photo']['name'])) {
        $upload_dir = "files/toppers/";
        if (!is_dir($upload_dir)) {
            mkdir($upload_dir, 0777, true); // Create directory if it doesn't exist
        }
        $photo_name = basename($_FILES['photo']['name']);
        $photo_tmp_name = $_FILES['photo']['tmp_name'];
        $photo_path = $upload_dir . $photo_name;
        
    $photo_ext = strtolower(pathinfo($photo_name, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    
    if (!in_array($photo_ext, $allowed_ext)) {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed !";
        $_SESSION['status_code'] = "error";
        header('Location: topper.php');
        exit();
    }


        if (!move_uploaded_file($photo_tmp_name, $photo_path)) {
            die("Error uploading the photo. Please try again.");
        }
    }

    // Insert into the database
    $sql = "INSERT INTO toppers (name, class, percentage, session, photo_path) 
            VALUES ('$name', '$class', $percentage, $session, '$photo_path')";

    if (mysqli_query($conn, $sql)) {
         $_SESSION['status'] = "Topper added Successfully !";
        $_SESSION['status_code'] = "success";
    } else {
        $_SESSION['status'] = "Failed to add Topper !";
        $_SESSION['status_code'] = "error";
    }
    header('Location: topper.php');
}

if (isset($_POST['topper_delete_btn'])) {
    // Get the topper ID from the form
    $topper_id = $_POST['toppper_id'];

    // Prepare the DELETE SQL query
    $delete_query = "DELETE FROM toppers WHERE id = ?";
    
    // Prepare the SQL statement
    if ($stmt = mysqli_prepare($conn, $delete_query)) {
        // Bind the parameter
        mysqli_stmt_bind_param($stmt, "i", $topper_id);
        
        // Execute the statement
        if (mysqli_stmt_execute($stmt)) {
            // Success: Redirect or display a success message
            $_SESSION['status'] = "Topper record deleted successfully!";
            $_SESSION['status_code'] = "success";
        } else {
            // Error: Redirect or display an error message
            $_SESSION['status'] = "Failed to delete the topper record!";
            $_SESSION['status_code'] = "error";
        }
        
    } 

    header("Location: topper.php");

}
/* Toppers Backend End */

/* User Backend Start */

if (isset($_POST['add_user_btn'])) {
    // Collect form data
    $name = $conn->real_escape_string($_POST['name']);
    $dob = $conn->real_escape_string($_POST['dob']);
    $email = $conn->real_escape_string($_POST['email']);
    $phone = $conn->real_escape_string($_POST['phone']);
    $role = $conn->real_escape_string($_POST['role']);

    // Handle file upload
    $image_path = "";
    if (isset($_FILES['photo']['name'])) {
        $target_dir = "files/users/"; // Folder to save uploaded files
        $file_name = basename($_FILES['photo']['name']);
        $target_file = $target_dir . time() . "_" . $file_name;

        // Check if the directory exists, if not create it
        if (!is_dir($target_dir)) {
            mkdir($target_dir, 0777, true);
        }
        
    $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    
    if (!in_array($file_ext, $allowed_ext)) {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed !";
        $_SESSION['status_code'] = "error";
        header('Location: add_user.php');
        exit();
    }

        // Move the uploaded file to the target directory
        if (move_uploaded_file($_FILES['photo']['tmp_name'], $target_file)) {
            $image_path = $target_file;
        } else {
            $_SESSION['status'] = "Sorry, there was an error uploading your file !";
            $_SESSION['status_code'] = "error";
             header('Location: add_user.php');
             exit();
        }
    }

    // Insert data into the users table
    $sql = "INSERT INTO users (name, dob, email, phone, role, image_path) 
            VALUES ('$name', '$dob', '$email', '$phone', '$role', '$image_path')";

    if ($conn->query($sql) === TRUE) {
        $_SESSION['status'] = "User added Successfully !";
        $_SESSION['status_code'] = "success";
    } else {
        $_SESSION['status'] = "Failed to add User !";
        $_SESSION['status_code'] = "error";
    }
    
    header('Location: add_user.php');
}

if (isset($_POST['user_delete_btn'])) {
    // Get the user ID from the form
    $user_id = intval($_POST['user_id']);

    // Check if the user exists and delete their associated photo
    $query = "SELECT image_path FROM users WHERE id = $user_id";
    $result = $conn->query($query);

    if ($result && $result->num_rows > 0) {
        $row = $result->fetch_assoc();
        $image_path = $row['image_path'];

        // Delete the file from the server
        if (!empty($image_path) && file_exists($image_path)) {
            unlink($image_path);
        }

        // Delete the user record from the database
        $delete_query = "DELETE FROM users WHERE id = $user_id";
        if ($conn->query($delete_query) === TRUE) {
            $_SESSION['status'] = "User Deleted Successfully !";
            $_SESSION['status_code'] = "success";
        } else {
            $_SESSION['status'] = "Failed to Delete User !";
            $_SESSION['status_code'] = "error";
        }
    } else {
        $_SESSION['status'] = "User Not Found !";
        $_SESSION['status_code'] = "error";
    }
    
    header('Location: add_user.php');
}

if (isset($_POST['action']) && $_POST['action'] == 'fetch_user') {
    // Fetch user details for modal
    $user_id = $_POST['user_id'];
    $query = "SELECT * FROM users WHERE id = $user_id";
    $result = mysqli_query($conn, $query);

    if ($result && mysqli_num_rows($result) > 0) {
        $user = mysqli_fetch_assoc($result);
        echo json_encode($user);
    } else {
        echo json_encode(['error' => 'User not found']);
    }
}

if (isset($_POST['user_update_btn'])) {
    // Collect form data
    $id = $conn->real_escape_string($_POST['user_id']); // Get the user ID
    $name = $conn->real_escape_string($_POST['name']);
    $dob = $conn->real_escape_string($_POST['dob']);
    $email = $conn->real_escape_string($_POST['email']);
    $phone = $conn->real_escape_string($_POST['phone']);
    $role = $conn->real_escape_string($_POST['role']);
    
    // Handle file upload (if new file uploaded)
    $image_path = ""; 
    if (isset($_FILES['photo']['name']) && $_FILES['photo']['name'] != "") {
        $target_dir = "files/users/"; // Folder to save uploaded files
        $file_name = basename($_FILES['photo']['name']);
        $target_file = $target_dir . time() . "_" . $file_name;

        // Check if the directory exists, if not create it
        if (!is_dir($target_dir)) {
            mkdir($target_dir, 0777, true);
        }
        
    $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));

    // Allowed extensions
    $allowed_ext = ["jpg", "jpeg", "png"];
    
    if (!in_array($file_ext, $allowed_ext)) {
        $_SESSION['status'] = "Invalid Image Format! Only JPG, JPEG, PNG allowed !";
        $_SESSION['status_code'] = "error";
        header('Location: add_user.php');
        exit();
    }

        // Move the uploaded file to the target directory
        if (move_uploaded_file($_FILES['photo']['tmp_name'], $target_file)) {
            $image_path = $target_file;
        } else {
            $_SESSION['status'] = "Sorry, there was an error uploading your file !";
            $_SESSION['status_code'] = "error";
                 header('Location: add_user.php');
        exit();
        }
    }

    // Update query for the users table
    $update_sql = "UPDATE users SET 
                    name='$name', 
                    dob='$dob', 
                    email='$email', 
                    phone='$phone', 
                    role='$role'";

    // Update image if a new one is uploaded
    if ($image_path != "") {
        $update_sql .= ", image_path='$image_path'"; // Include the image path in the query
    }

    // Add WHERE clause to target the specific user
    $update_sql .= " WHERE id='$id'";

    // Execute the update query
    if ($conn->query($update_sql) === TRUE) {
        $_SESSION['status'] = "User updated successfully!";
        $_SESSION['status_code'] = "success";
    } else {
        $_SESSION['status'] = "Failed to update user!";
        $_SESSION['status_code'] = "error";
    }

    // Redirect back to the form page
    header('Location: add_user.php');
}

if (isset($_POST['user_import_btn'])) {
    // File upload handling
    if ($_FILES['csv_file']['error'] == 0) {
        // Define the CSV file
        $file = $_FILES['csv_file']['tmp_name'];

        // Open the CSV file for reading
        if (($handle = fopen($file, "r")) !== FALSE) {
            // Skip the first row (header)
            fgetcsv($handle);

            // Loop through the CSV rows
            while (($data = fgetcsv($handle, 1000, ",")) !== FALSE) {
                // Get the data from each row
                $name = $conn->real_escape_string($data[0]);
                $dob = $conn->real_escape_string($data[1]);
                $email = $conn->real_escape_string($data[2]);
                $phone = $conn->real_escape_string($data[3]);
                $role = $conn->real_escape_string($data[4]);
                $status = isset($data[5]) ? $conn->real_escape_string($data[5]) : 'Active'; // Default to 'Active' if status not provided

                // Insert into the database
                $sql = "INSERT INTO users (name, dob, email, phone, role, status)
                        VALUES ('$name', '$dob', '$email', '$phone', '$role', '$status')";
                
                if ($conn->query($sql) !== TRUE) {
                    $_SESSION['status'] = "Error inserting record: " . $conn->error;
                    $_SESSION['status_code'] = "error";
                    break;
                }
            }

            fclose($handle);

            $_SESSION['status'] = "Data imported successfully!";
            $_SESSION['status_code'] = "success";
            header('Location: add_user.php');
        } else {
            $_SESSION['status'] = "Unable to open CSV file!";
            $_SESSION['status_code'] = "error";
            header('Location: add_user.php');
        }
    } else {
        $_SESSION['status'] = "File upload error!";
        $_SESSION['status_code'] = "error";
        header('Location: add_user.php');
    }

    // Redirect back to the import page
    header('Location: add_user.php');
}


/* User Backend End */

/* Facilities Backend Start */

if (isset($_POST['facility_save_btn'])) {
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    $description = mysqli_real_escape_string($conn, $_POST['description']);

    // Handle Image Upload
    $targetDir = "files/facilities/";
    $defaultImage = "img/default.jpg"; // Default image if no file is uploaded
    $photoName = $defaultImage;

    if (!empty($_FILES["photo"]["name"])) {
        $photoName = time() . "_" . basename($_FILES["photo"]["name"]);
        $targetFilePath = $targetDir . $photoName;
        $fileType = strtolower(pathinfo($targetFilePath, PATHINFO_EXTENSION));

        // Allowed file types
        $allowedTypes = ["jpg", "jpeg", "png", "gif"];

        if (in_array($fileType, $allowedTypes)) {
            if (move_uploaded_file($_FILES["photo"]["tmp_name"], $targetFilePath)) {
                // File uploaded successfully
            } else {
                $_SESSION['status'] = "Error uploading file !";
                $_SESSION['status_code'] = "error";
                header('Location: facilities.php');
                exit();
            }
        } else {
            $_SESSION['status'] = "Invalid file type. Only JPG, JPEG, PNG & GIF are allowed !";
            $_SESSION['status_code'] = "error";
            header('Location: facilities.php');
            exit();
        }
    }
    $query = "INSERT INTO facilities (name, description, image_path) VALUES ('$name', '$description', '$photoName')";
    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        $_SESSION['status'] = "Facility added successfully!";
        $_SESSION['status_code'] = "success";
        header('Location: facilities.php');
    } else {
        $_SESSION['status'] = "Connection Error !";
        $_SESSION['status_code'] = "error";
        header('Location: facilities.php');
    }
}

if (isset($_POST['action']) && $_POST['action'] == 'fetch_facility') {
    // Fetch Facilities for modal
    $facility_id = $_POST['facility_id'];
    $query = "SELECT * FROM facilities WHERE id = $facility_id";
    $result = mysqli_query($conn, $query);

    if ($result && mysqli_num_rows($result) > 0) {
        $user = mysqli_fetch_assoc($result);
        echo json_encode($user);
    } else {
        echo json_encode(['error' => 'Facilitie not found']);
    }
}

if (isset($_POST['facility_update_btn'])) {
    $facility_id = mysqli_real_escape_string($conn, $_POST['facility_id']);
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    $description = mysqli_real_escape_string($conn, $_POST['description']);

    // Fetch existing image path
    $query = "SELECT image_path FROM facilities WHERE id = '$facility_id'";
    $result = mysqli_query($conn, $query);
    $row = mysqli_fetch_assoc($result);
    $existingImage = $row['image_path'];

    // Handle Image Upload
    $targetDir = "files/facilities/";
    $photoName = $existingImage; // Keep the existing image if no new image is uploaded

    if (!empty($_FILES["photo"]["name"])) {
        $photoName = time() . "_" . basename($_FILES["photo"]["name"]);
        $targetFilePath = $targetDir . $photoName;
        $fileType = strtolower(pathinfo($targetFilePath, PATHINFO_EXTENSION));

        // Allowed file types
        $allowedTypes = ["jpg", "jpeg", "png", "gif"];

        if (in_array($fileType, $allowedTypes)) {
            if (move_uploaded_file($_FILES["photo"]["tmp_name"], $targetFilePath)) {
                // Delete old image (if not default)
                if ($existingImage !== "img/default.jpg" && file_exists($targetDir . $existingImage)) {
                    unlink($targetDir . $existingImage);
                }
            } else {
                $_SESSION['status'] = "Error uploading file!";
                $_SESSION['status_code'] = "error";
                header('Location: facilities.php');
                exit();
            }
        } else {
            $_SESSION['status'] = "Invalid file type. Only JPG, JPEG, PNG & GIF are allowed !";
            $_SESSION['status_code'] = "error";
            header('Location: facilities.php');
            exit();
        }
    }

    // Update Facility Data
    $updateQuery = "UPDATE facilities SET name='$name', description='$description', image_path='$photoName' WHERE id='$facility_id'";
    $updateQueryRun = mysqli_query($conn, $updateQuery);

    if ($updateQueryRun) {
        $_SESSION['status'] = "Facility updated successfully!";
        $_SESSION['status_code'] = "success";
        header('Location: facilities.php');
    } else {
        $_SESSION['status'] = "Update failed!";
        $_SESSION['status_code'] = "error";
        header('Location: facilities.php');
    }
}
// Facility Status Update
if (isset($_POST['facility_status_update_btn'])) {
    $facility_id = mysqli_real_escape_string($conn, $_POST['id']);

    // Fetch current status
    $query = "SELECT status FROM facilities WHERE id = '$facility_id'";
    $result = mysqli_query($conn, $query);
    $row = mysqli_fetch_assoc($result);
    $currentStatus = $row['status'];

    // Toggle status
    $newStatus = ($currentStatus === "Available") ? "Not Available" : "Available";

    // Update the database
    $updateQuery = "UPDATE facilities SET status='$newStatus' WHERE id='$facility_id'";
    $updateQueryRun = mysqli_query($conn, $updateQuery);

    if ($updateQueryRun) {
        $_SESSION['status'] = "Facility status updated to $newStatus!";
        $_SESSION['status_code'] = "success";
        header('Location: facilities.php');
    } else {
        $_SESSION['status'] = "Failed to update status!";
        $_SESSION['status_code'] = "error";
        header('Location: facilities.php');
    }
}

// Facility Delete
if (isset($_POST['facility_delete_btn'])) {
    $facility_id = mysqli_real_escape_string($conn, $_POST['id']);

    // Fetch facility image path
    $query = "SELECT image_path FROM facilities WHERE id = '$facility_id'";
    $result = mysqli_query($conn, $query);
    $row = mysqli_fetch_assoc($result);
    $imagePath = $row['image_path'];

    // Delete image (if it's not the default one)
    $targetDir = "files/facilities/";
    if ($imagePath !== "img/default.jpg" && file_exists($targetDir . $imagePath)) {
        unlink($targetDir . $imagePath);
    }

    // Delete facility from the database
    $deleteQuery = "DELETE FROM facilities WHERE id='$facility_id'";
    $deleteQueryRun = mysqli_query($conn, $deleteQuery);

    if ($deleteQueryRun) {
        $_SESSION['status'] = "Facility deleted successfully!";
        $_SESSION['status_code'] = "success";
        header('Location: facilities.php');
    } else {
        $_SESSION['status'] = "Failed to delete facility!";
        $_SESSION['status_code'] = "error";
        header('Location: facilities.php');
    }
}
/* Facilities Backend End */

/* Event Backend Start */
if (isset($_POST['event_save_btn'])) {
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    $description = mysqli_real_escape_string($conn, $_POST['description']);
    $event_date = $_POST['event_date'];
    $start_time = $_POST['start_time'];
    $end_time = $_POST['end_time'];
    $location = mysqli_real_escape_string($conn, $_POST['location']);

    // Image Upload Handling
    $image_name = '';
    if (isset($_FILES['photo']) && $_FILES['photo']['error'] == 0) {
        $target_dir = "files/events/"; // Make sure this directory exists
        $image_name = basename($_FILES['photo']['name']);
        $target_file = $target_dir . $image_name;

        $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));
        $allowed_types = ['jpg', 'jpeg', 'png', 'gif'];

        if (in_array($imageFileType, $allowed_types)) {
            if (!move_uploaded_file($_FILES['photo']['tmp_name'], $target_file)) {
                $_SESSION['status'] = "Error uploading file !";
                $_SESSION['status_code'] = "error";
                header('Location: event.php');
                exit();
            }
        } else {
            $_SESSION['status'] = "Invalid file type. Only JPG, JPEG, PNG & GIF are allowed. !";
            $_SESSION['status_code'] = "error";
            header('Location: event.php');
            exit();
        }
    }

    // Insert into Database
    $sql = "INSERT INTO events (name, description, event_date, start_time, end_time, location, image) VALUES (?, ?, ?, ?, ?, ?, ?)";
    $stmt = $conn->prepare($sql);
    $stmt->bind_param("sssssss", $name, $description, $event_date, $start_time, $end_time, $location, $image_name);

    if ($stmt->execute()) {
        $_SESSION['status'] = "Event added successfully!";
        $_SESSION['status_code'] = "success";
        header('Location: event.php');
    } else {
        $_SESSION['status'] = "Connection Error !";
        $_SESSION['status_code'] = "error";
        header('Location: event.php');
    }

}

if (isset($_POST['action']) && $_POST['action'] == 'fetch_event') {
    // Fetch Facilities for modal
    $event_id = $_POST['event_id'];
    $query = "SELECT * FROM events WHERE id = $event_id";
    $result = mysqli_query($conn, $query);

    if ($result && mysqli_num_rows($result) > 0) {
        $user = mysqli_fetch_assoc($result);
        echo json_encode($user);
    } else {
        echo json_encode(['error' => 'Event not found']);
    }
}

if (isset($_POST['event_update_btn'])) {
    $id = intval($_POST['event_id']); // Hidden field in form to get the event ID
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    $description = mysqli_real_escape_string($conn, $_POST['description']);
    $event_date = $_POST['event_date'];
    $start_time = $_POST['start_time'];
    $end_time = $_POST['end_time'];
    $location = mysqli_real_escape_string($conn, $_POST['location']);

    // Image Upload Handling
    $image_name = '';
    if (isset($_FILES['photo']) && $_FILES['photo']['error'] == 0) {
        $target_dir = "files/events/"; 
        $image_name = basename($_FILES['photo']['name']);
        $target_file = $target_dir . $image_name;

        $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));
        $allowed_types = ['jpg', 'jpeg', 'png', 'gif'];

        if (in_array($imageFileType, $allowed_types)) {
            if (!move_uploaded_file($_FILES['photo']['tmp_name'], $target_file)) {
                $_SESSION['status'] = "Error uploading file!";
                $_SESSION['status_code'] = "error";
                header('Location: event.php');
                exit();
            }
        } else {
            $_SESSION['status'] = "Invalid file type. Only JPG, JPEG, PNG & GIF are allowed!";
            $_SESSION['status_code'] = "error";
            header('Location: event.php');
            exit();
        }
    } else {
        // Retain the old image if no new image is uploaded
        $result = $conn->query("SELECT image FROM events WHERE id = $id");
        $row = $result->fetch_assoc();
        $image_name = $row['image'];
    }

    // Update the Event
    $sql = "UPDATE events 
            SET name = ?, description = ?, event_date = ?, start_time = ?, end_time = ?, location = ?, image = ? 
            WHERE id = ?";
    $stmt = $conn->prepare($sql);
    $stmt->bind_param("sssssssi", $name, $description, $event_date, $start_time, $end_time, $location, $image_name, $id);

    if ($stmt->execute()) {
        $_SESSION['status'] = "Event updated successfully!";
        $_SESSION['status_code'] = "success";
        header('Location: event.php');
    } else {
        $_SESSION['status'] = "Error updating event!";
        $_SESSION['status_code'] = "error";
        header('Location: event.php');
    }
}

if (isset($_POST['event_delete_btn'])) {
    $id = intval($_POST['id']); // Hidden field in the form to get the event ID

    // Fetch the event to get the image path for deletion
    $result = $conn->query("SELECT image FROM events WHERE id = $id");
    if ($result && $result->num_rows > 0) {
        $row = $result->fetch_assoc();
        $image_path = "files/events/" . $row['image'];

        // Delete the image file if it exists
        if (file_exists($image_path) && !empty($row['image'])) {
            unlink($image_path);
        }
    }

    // Delete the event from the database
    $sql = "DELETE FROM events WHERE id = ?";
    $stmt = $conn->prepare($sql);
    $stmt->bind_param("i", $id);

    if ($stmt->execute()) {
        $_SESSION['status'] = "Event deleted successfully!";
        $_SESSION['status_code'] = "success";
        header('Location: event.php');
    } else {
        $_SESSION['status'] = "Error deleting event!";
        $_SESSION['status_code'] = "error";
        header('Location: event.php');
    }
}

/* Event Backend End */

/* Contact  Backend Start */

if (isset($_POST['contact_details_save_btn'])) {
    $phone1 = $_POST['phone1'];
    $phone2 = $_POST['phone2'];
    $email1 = $_POST['email1'];
    $email2 = $_POST['email2'];
    $address = $_POST['address'];
    $instagram = $_POST['instagram'];
    $facebook = $_POST['facebook'];
    $twitter = $_POST['twitter'];
    $linkedin = $_POST['linkedin'];
    $map_link = $_POST['map_link'];
    $id = $_POST['id'];
    // Check if any record exists
    $checkQuery = "SELECT id FROM contact_details LIMIT 1";
    $result = $conn->query($checkQuery);

    if (!empty($_POST['id'])) {
        // Update existing record
        $sql = "UPDATE contact_details 
                SET phone1='$phone1', phone2='$phone2', email1='$email1', email2='$email2', 
                    address='$address', instagram_username='$instagram', 
                    facebook_username='$facebook', twitter_username='$twitter', 
                    linkedin_username='$linkedin', map_link='$map_link'
                WHERE id = '$id'";

        if ($conn->query($sql) === TRUE) {
            $_SESSION['status'] = "Contact details updated successfully!";
            $_SESSION['status_code'] = "success";
            header('Location: contact_details.php');
        } else {
            $_SESSION['status'] = "Error updating record!";
            $_SESSION['status_code'] = "error";
            header('Location: contact_details.php');
        }
    } else {
        // Insert new record
        $sql = "INSERT INTO contact_details (phone1, phone2, email1, email2, address, instagram_username, 
                    facebook_username, twitter_username, linkedin_username, map_link) 
                VALUES ('$phone1', '$phone2', '$email1', '$email2', '$address', '$instagram', 
                        '$facebook', '$twitter', '$linkedin', '$map_link')";

        if ($conn->query($sql) === TRUE) {
            $_SESSION['status'] = "Contact details updated successfully!";
            $_SESSION['status_code'] = "success";
            header('Location: contact_details.php');
        } else {
            $_SESSION['status'] = "Error updating record!";
            $_SESSION['status_code'] = "error";
            header('Location: contact_details.php');
        }
    }
}

if (isset($_POST['delete_contact_us_message_btn'])) {
    $id = $_POST['contact_us_message_id'];

    // Sanitize the ID to prevent SQL injection
    $id = $conn->real_escape_string($id);

    // SQL query to delete the record
    $sql = "DELETE FROM contact_us WHERE id = '$id'";

    if ($conn->query($sql) === TRUE) {
        $_SESSION['status'] = "Message deleted successfully!";
        $_SESSION['status_code'] = "success";
    } else {
        $_SESSION['status'] = "Error deleting message!";
        $_SESSION['status_code'] = "error";
    }

    // Redirect back to the contact messages page
    header('Location: contact_us_messages.php');
}


/* Contact  Backend End */

/* General Settings Backend Start */
// File upload function
function uploadFile($fileInputName, $uploadDir) {
    if (!empty($_FILES[$fileInputName]['name'])) {
        $fileName = basename($_FILES[$fileInputName]["name"]);
        $targetFilePath = $uploadDir . $fileName;
        $fileType = strtolower(pathinfo($targetFilePath, PATHINFO_EXTENSION));
        $allowedTypes = ['jpg', 'jpeg', 'png', 'ico'];

        // Check file type & size (max 2MB)
        if (in_array($fileType, $allowedTypes) && $_FILES[$fileInputName]['size'] <= 2 * 1024 * 1024) {
            if (move_uploaded_file($_FILES[$fileInputName]["tmp_name"], $targetFilePath)) {
                return $targetFilePath; // Return file path if uploaded
            }
        }
    }
    return null; // Return null if no file uploaded or invalid
}

// Process form submission
if (isset($_POST['general_settings_save_btn'])) {
    $uploadDir = "img/"; // Folder where images will be stored
    if (!is_dir($uploadDir)) {
        mkdir($uploadDir, 0777, true); // Create directory if not exists
    }

    // Upload images
    $header_logo = uploadFile('header_logo', $uploadDir);
    $favicon_icon = uploadFile('favicon_icon', $uploadDir);

    $banner_message = $_POST['banner_message'];
    $site_title = $_POST['site_title'];
    $footer_text = $_POST['footer_text'];
    $timezone = 'UTC';
    $id = $_POST['id'];
    // Check if settings exist
    $check_sql = "SELECT id, header_logo, favicon_icon FROM general_settings WHERE id = '$id'";
    $result = $conn->query($check_sql);

    if ($result->num_rows > 0) {
        // Fetch existing paths to avoid overwriting if no new file is uploaded
        $row = $result->fetch_assoc();
        $header_logo = $header_logo ?: $row['header_logo']; 
        $favicon_icon = $favicon_icon ?: $row['favicon_icon']; 

        // Update existing record
        $sql = "UPDATE general_settings SET 
                header_logo = '$header_logo', 
                favicon_icon = '$favicon_icon', 
                banner_message = '$banner_message', 
                site_title = '$site_title',
                footer_text = '$footer_text',
                timezone = '$timezone', 
                updated_at = CURRENT_TIMESTAMP WHERE id='$id'";
    } else {
        // Insert new record
        $sql = "INSERT INTO general_settings (header_logo, favicon_icon, banner_message, site_title,footer_text, timezone) 
                VALUES ('$header_logo', '$favicon_icon', '$banner_message', '$site_title','$footer_text', '$timezone')";
    }

    if ($conn->query($sql) === TRUE) {
        $_SESSION['status'] = "Settings saved successfully!!";
        $_SESSION['status_code'] = "success";
        header('Location: general_settings.php');
    } else {
        $_SESSION['status'] = "Error updating Settings!";
        $_SESSION['status_code'] = "error";
        header('Location: general_settings.php');
        
    }
}

/* General Settings Backend End */

/* Enquiries Backend Start */
if (isset($_POST['delete_enquiries_btn'])) {
    $id = $_POST['enquiries_id'];

    // Delete enquiry from the database
    $sql = "DELETE FROM enquiries WHERE id = '$id'";

    if ($conn->query($sql) === TRUE) {
        $_SESSION['status'] = "Enquiry deleted successfully!";
        $_SESSION['status_code'] = "success";
    } else {
        $_SESSION['status'] = "Error deleting enquiry!";
        $_SESSION['status_code'] = "error";
    }

    header('Location: enquiries.php');
}

if (isset($_POST['change_enquiries_status_btn'])) {
    $id = mysqli_real_escape_string($conn, $_POST['change_enquiries_id']);
    $s = mysqli_real_escape_string($conn, $_POST['enquiries_status']);
    
    // Toggle status if needed
    $status = ($s == 'pending') ? 'resolved' : $s;

    // Validate status
    if ($status == 'pending' || $status == 'resolved') {
        // Update status of the enquiry
        $sql = "UPDATE enquiries SET status = '$status' WHERE id = '$id'";

        if ($conn->query($sql) === TRUE) {
            $_SESSION['status'] = "Enquiry status updated successfully!";
            $_SESSION['status_code'] = "success";
        } else {
            $_SESSION['status'] = "Error updating enquiry status!";
            $_SESSION['status_code'] = "error";
        }
    } else {
        $_SESSION['status'] = "Invalid status value!";
        $_SESSION['status_code'] = "error";
    }

    // Redirect back to the enquiries page
    header('Location: enquiries.php');
}

/* Enquiries Backend End */



?>