1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / nc6d095 / nisan.space / btc-now / admin / view /
Filename : users.php
back
<?php
include('../inc/config.php');
include('../inc/auth.php');

define('TITLE','Manage Users');
define('HEADER','Users');
define('BREADCRUMB','users');

if(isset($_GET['d'])){
    $d = $_GET['d'];
    if($d == "new-user"){ $crdTitle = "Add New User"; }
    if($d == "edit-user"){
        if(isset($_GET['id'])){ $id = $_GET['id']; }
        $dbUser = getDBVal('users','fname',$id);
        $crdTitle = "Edit User (<small>".strtolower($dbUser).")</small>";
    }
    if($d == "new-role"){ $crdTitle = "Add New Role"; }
    if($d == "edit-role"){
        if(isset($_GET['id'])){ $id = $_GET['id']; }
        $dbRole = getDBVal('roles','name',$id);
        $crdTitle = "Edit Role (<small>".strtolower($dbRole).")</small>";
    }
}

#logics
#save user
if(isset($_POST['saveUser'])){
    #data cleaning & scrutinization
    $userName = trim(stripslashes(mysqli_real_escape_string($db, $_POST['userName'])));
    $firstName = trim(stripslashes(mysqli_real_escape_string($db, $_POST['firstName'])));
    $lastName = trim(stripslashes(mysqli_real_escape_string($db, $_POST['lastName'])));
    $email = trim(stripslashes(mysqli_real_escape_string($db, $_POST['email'])));
    $role = trim(intval($_POST['role']));

    #data validation

    if(empty($userName)){
        $errs[] = $userNameErr = "please enter value";
    }
    if(empty($firstName)){
        $errs[] = $firstNameErr = "please enter value";
    }
    if(empty($lastName)){
        $errs[] = $lastNameErr = "please enter a value";
    }
    if(empty($email)){
        $errs[] = $emailErr = "please enter a value";
    }
    if($role == 0){
        $errs[] = $roleErr = "please select a value";
    }

    #prevent duplicates
    if(!empty($firstName) && !empty($lastName)){
        $rowCnt = checkDuplicates('users', "username = '$userName' ");
        $rowCnt2 = checkDuplicates('users', "email = '$email' ");
        if($rowCnt > 0){
            $errs[] = $userExistErr = "";
            $emsg = "Username '$userName' already exists";
        }
        if($rowCnt2 > 0){
            $errs[] = $userExistErr = "";
            $emsg = "Email '$email' already exists";
        }
    }

    $userID =  "BNA-".rand(0000,9999);
    #execute when errors have been solved
    if(count($errs) == 0){
        $q = dbInsert('users',['userID'=>$userID, 'username'=>$userName, 'fname'=>$firstName, 'lname'=>$lastName, 'email'=>$email, 'role'=>$role, 'dc'=>$now]);
        if($q){
            $smsg = "User '$firstName' saved successfully";
        }
        else{
           $emsg = "Action not successful. Try again later";
        }
    }
}

#update user
if(isset($_POST['updateUser'])){
    #data cleaning & scrutinization
    $firstName = trim(stripslashes(mysqli_real_escape_string($db, $_POST['firstName'])));
    $lastName = trim(stripslashes(mysqli_real_escape_string($db, $_POST['lastName'])));
    $phone = trim(stripslashes(mysqli_real_escape_string($db, $_POST['phone'])));

    #data validation
     if(empty($firstName)){
        $errs[] = $firstNameErr = "please enter value";
    }
    if(empty($lastName)){
        $errs[] = $lastNameErr = "please enter a value";
    }

     if(empty($phone)){
        $errs[] = $phoneErr = "please enter a value";
    }

    #prevent duplicates
    if(!empty($firstName)){
        $rowCnt = checkDuplicates('users', "fname='$firstName' AND id <> $id");
        $rowCnt2 = checkDuplicates('users', "fname='$firstName' AND id = $id");
        if($rowCnt > 0){
            $errs[] = $userExistErr = "";
            $emsg = "User '$firstName' already exists";
        }
        if($rowCnt2 > 0){
            $errs[] = $userExistErr = "";
            $emsg = "Modification is required to continue";
        }
    }


    #execute when errors have been solved
    if(count($errs) == 0){
        $q = mysqli_query($db, "UPDATE users SET fname='$firstName', lname = '$lastName', phone = '$phone', du=NOW() WHERE id=$id");
        if($q){
            $smsg = "'$dbUser' updated to '$firstName' successfully";
        }
        else{
           $emsg = "Action not successful. Try again later";
        }
    }
}

#save role
if(isset($_POST['saveRole'])){
    #data cleaning & scrutinization
    $roleName = trim(stripslashes(mysqli_real_escape_string($db, $_POST['roleName'])));

    #data validation
    if(empty($roleName)){
        $errs[] = $roleNameErr = "please enter a value";
    }

    #prevent duplicates
    if(!empty($roleName)){
        $rowCnt = checkDuplicates('roles', "name='$roleName'");
        if($rowCnt > 0){
            $errs[] = $roleExistErr = "";
            $emsg = "Role '$roleName' already exists";
        }
    }


    #execute when errors have been solved
    if(count($errs) == 0){
        $q = mysqli_query($db, "INSERT INTO roles(name, dc) VALUES('$roleName', NOW())");
        if($q){
            $smsg = "Role '$roleName' saved successfully";
        }
        else{
           $emsg = "Action not successful. Try again later";
        }
    }
}

#update role
if(isset($_POST['updateRole'])){
    #data cleaning & scrutinization
    $roleName = trim(stripslashes(mysqli_real_escape_string($db, $_POST['roleName'])));

    #data validation
    if(empty($roleName)){
        $errs[] = $roleNameErr = "please enter a value";
    }

    #prevent duplicates
    if(!empty($roleName)){
        $rowCnt = checkDuplicates('roles', "name='$roleName' AND id<>$id");
        $rowCnt2 = checkDuplicates('roles', "name='$roleName' AND id=$id");
        if($rowCnt > 0){
            $errs[] = $roleExistErr = "";
            $emsg = "Role '$roleName' already exists";
        }
        if($rowCnt2 > 0){
            $errs[] = $roleExistErr = "";
            $emsg = "Modification is required to continue";
        }
    }


    #execute when errors have been solved
    if(count($errs) == 0){
        $q = mysqli_query($db, "UPDATE roles SET name='$roleName', du=NOW() WHERE id=$id");
        if($q){
            $smsg = "'$dbRole' updated to '$roleName' successfully";
        }
        else{
           $emsg = "Action not successful. Try again later";
        }
    }
}

#manage user status
if(isset($_GET['d']) && isset($_GET['id'])){
    $d = $_GET['d'];
    $id = $_GET['id'];
    $dbUser = getDBVal('users','fname',$id);
    if($d == 'actv-user'){
        $q = changeStatus('users','active',$id);
        if($q){ $smsg = "user activated successfully"; }else{ $emsg = "something went wrong."; }
    }
    if($d == 'dactv-user'){
        $q = changeStatus('users','inactive',$id);
        if($q){ $smsg = "user deactivated successfully"; }else{ $emsg = "something went wrong."; }
    }
    if($d == 'dlt-user'){
        $dltItem = true;
        $dltmsg = "Are you sure you want to delete the user '$dbUser'";
        $url = $adminRoot."users";
        if(isset($_POST['doDlt'])){
            $dltItem = false;
            $q = dltRow('users',$id);
            if($q){ $smsg = "user deleted successfully"; }else{ $emsg = "something went wrong."; }
        }
    }
}

#manage role status
if(isset($_GET['d']) && isset($_GET['id'])){
    $d = $_GET['d'];
    $id = $_GET['id'];
    $dbRole = getDBVal('roles','name',$id);
    if($d == 'actv-role'){
        $q = changeStatus('roles','active',$id);
        if($q){ $smsg = "role activated successfully"; }else{ $emsg = "something went wrong."; }
    }
    if($d == 'dactv-role'){
        $q = changeStatus('roles','inactive',$id);
        if($q){ $smsg = "role deactivated successfully"; }else{ $emsg = "something went wrong."; }
    }
    if($d == 'dlt-role'){
        $dltItem = true;
        $dltmsg = "Are you sure you want to delete the role '$dbRole'";
        $url = $adminRoot."roles";
        if(isset($_POST['doDlt'])){
            $dltItem = false;
            $q = dltRow('roles',$id);
            if($q){ $smsg = "role deleted successfully"; }else{ $emsg = "something went wrong."; }
        }
    }
}


include("../inc/head.php");
?>

<body>

    <!--*******************
        Preloader start
    ********************-->
    <?php include("../inc/preloader.php"); ?>
    <!--*******************
        Preloader end
    ********************-->

    <!--**********************************
        Main wrapper start
    ***********************************-->
    <div id="main-wrapper">

        <!--**********************************
            Nav header start
        ***********************************-->
        <?php include("../inc/nav-header.php"); ?>
        <!--**********************************
            Nav header end
        ***********************************-->


        <!--**********************************
            Header start
        ***********************************-->
        <?php include("../inc/header.php"); ?>
        <!--**********************************
            Header end ti-comment-alt
        ***********************************-->

        <!--**********************************
            Sidebar start
        ***********************************-->
        <?php include("../inc/sidebar.php"); ?>
        <!--**********************************
            Sidebar end
        ***********************************-->

        <!--**********************************
            Content body start
        ***********************************-->
        <div class="content-body">
            <div class="container-fluid">
                <?php include("../inc/page-header.php"); ?>

                <div class="row">
                    <div class="col-md-12">
                        <div class="card">
                            <div class="card-body">
                                <div class="button-dropdown">
                                    <div class="btn-group" title="Add New">
                                        <button type="button" class="btn btn-sm btn-outline-primary"><i class="fa fa-plus-square fa-2x"></i></button>
                                        <button type="button" class="btn btn-sm btn-primary dropdown-toggle dropdown-toggle-split" data-toggle="dropdown" aria-expanded="false">
                                        </button>
                                        <div class="dropdown-menu" x-placement="bottom-start" style="position: absolute; will-change: transform; top: 0px; left: 0px; transform: translate3d(79px, 42px, 0px);">
                                            <a class="dropdown-item" href="<?= $adminRoot ?>users?d=new-user&sz=min&vw=users">User</a>
                                            <a class="dropdown-item" href="<?= $adminRoot ?>users?d=new-role&sz=min&vw=roles">Role</a>
                                        </div>
                                    </div>
                                    <div class="btn-group" title="Manage All">
                                        <button type="button" class="btn btn-sm btn-outline-primary"><i class="fa fa-list-alt fa-2x"></i></button>
                                        <button type="button" class="btn btn-sm btn-primary dropdown-toggle dropdown-toggle-split" data-toggle="dropdown" aria-expanded="false">
                                        </button>
                                        <div class="dropdown-menu" x-placement="bottom-start" style="position: absolute; will-change: transform; top: 0px; left: 0px; transform: translate3d(79px, 42px, 0px);">
                                            <a class="dropdown-item" href="<?= $adminRoot ?>users?vw=users">Users</a>
                                            <a class="dropdown-item" href="<?= $adminRoot ?>users?vw=roles">Roles</a>
                                        </div>
                                    </div>

                                    <a href="<?= $adminRoot ?>users" class="btn btn-sm btn-outline-primary float-right" title="Refresh Page"><i class="fa fa-refresh"></i></a>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>

                <div class="row">
                    <?php if(isset($_GET['sz'])): ?>
                    <div class="col-md-4">
                        <div class="card">
                            <div class="card-header">
                                <h4 class="card-title d-inline"><?php echo ($crdTitle != '' ? $crdTitle : 'Add New'); ?></h4>
                                <a href="<?= $adminRoot ?>users" class="float-right text-danger"><i class="fa fa-times"></i></a>
                            </div>
                            <div class="card-body">
                                <form action="" method="post" enctype="multipart/form-data">

                                    <?php if(isset($_GET['d']) && $_GET['d'] == "new-user"): ?>
                                    <div class="form-row" id="new-user">
                                        <div class="form-group col-md-12">
                                            <label>User Name</label>
                                            <input type="text" class="form-control" name="userName" value="<?php if(isset($_POST['userName'])){ echo $_POST['userName']; } ?>">
                                            <?php if(isset($userNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $userNameErr; ?></span><?php endif ?>
                                        </div>
                                        <div class="form-group col-md-6">
                                            <label>First Name</label>
                                            <input type="text" class="form-control" name="firstName" value="<?php if(isset($_POST['firstName'])){ echo $_POST['firstName']; } ?>">
                                            <?php if(isset($firstNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $firstNameErr; ?></span><?php endif ?>
                                        </div>
                                        <div class="form-group col-md-6">
                                            <label>Last Name</label>
                                            <input type="text" class="form-control" name="lastName" value="<?php if(isset($_POST['lastName'])){ echo $_POST['lastName']; } ?>">
                                            <?php if(isset($lastNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $lastNameErr; ?></span><?php endif ?>
                                        </div>
                                        <div class="form-group col-md-7">
                                            <label>Email Address</label>
                                            <input type="email" class="form-control" name="email" value="<?php if(isset($_POST['email'])){ echo $_POST['email']; } ?>">
                                            <?php if(isset($emailErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $emailErr; ?></span><?php endif ?>
                                        </div>
                                        <div class="form-group col-md-5">
                                            <div class="form-group">
                                                <label>Role</label>
                                                <select class="form-control default-select" id="sel1" name="role">
                                                    <option value="">Select Role</option>
                                                    <?php
                                                     $qRes = getRows('roles');
                                                     while($row = mysqli_fetch_array($qRes)){
                                                    ?>
                                                    <option value="<?php echo $row['id']?>"><?php echo $row['name']?></option>
                                                    <?php }?>
                                                </select>
                                                <?php if(isset($roleErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $roleErr; ?></span><?php endif ?>
                                            </div>
                                        </div>
                                    </div>
                                    <div class="form-row mt-3">
                                        <div class="col-md-12 text-center">
                                            <button type="submit" name="saveUser" class="btn btn-success mr-3">Add</button>
                                            <button type="reset" class="btn btn-danger">Cancel</button>
                                        </div>
                                    </div>
                                    <?php endif ?>

                                    <?php if(isset($_GET['d']) && $_GET['d'] == "edit-user"): ?>
                                    <div class="form-row" id="edit-user">
                                        <div class="form-group col-md-12">
                                            <label>User Name</label>
                                            <input type="text" class="form-control" name="userName" placeholder="User Name" value="<?php if(isset($_POST['userName'])){ echo $_POST['userName']; } ?>">
                                            <?php if(isset($userNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $userNameErr; ?></span><?php endif ?>
                                        </div>
                                        <div class="form-group col-md-12">
                                            <label>First Name</label>
                                            <input type="text" class="form-control" name="firstName" placeholder="First Name" value="<?php if(isset($_POST['firstName'])){ echo $_POST['firstName']; } ?>">
                                            <?php if(isset($firstNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $firstNameErr; ?></span><?php endif ?>
                                        </div>
                                        <div class="form-group col-md-12">
                                            <label>Last Name</label>
                                            <input type="text" class="form-control" name="lastName" placeholder="Last Name" value="<?php if(isset($_POST['lastName'])){ echo $_POST['lastName']; } ?>">
                                            <?php if(isset($lastNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $lastNameErr; ?></span><?php endif ?>
                                        </div>
                                        <div class="form-group col-md-12">
                                            <label>Phone Number</label>
                                            <input type="number" class="form-control" name="phone" placeholder="Phone Number" value="<?php if(isset($_POST['phone'])){ echo $_POST['phone']; } ?>">
                                            <?php if(isset($phoneErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $phoneErr; ?></span><?php endif ?>
                                        </div>
                                    </div>
                                    <div class="form-row mt-3">
                                        <div class="col-md-12 text-center">
                                            <button type="submit" name="updateUser" class="btn btn-success mr-3">Add</button>
                                            <button type="reset" class="btn btn-danger">Cancel</button>
                                        </div>
                                    </div>
                                    <?php endif ?>

                                    <?php if(isset($_GET['d']) && $_GET['d'] == "new-role"): ?>
                                    <div class="form-row" id="new-role">
                                        <div class="form-group col-md-12">
                                            <label>Role Name</label>
                                            <input type="text" class="form-control" name="roleName" placeholder="Role Name" value="<?php if(isset($_POST['roleName'])){ echo $_POST['roleName']; } ?>">
                                            <?php if(isset($roleNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $roleNameErr; ?></span><?php endif ?>
                                        </div>
                                    </div>
                                    <div class="form-row mt-3">
                                        <div class="col-md-12 text-center">
                                            <button type="submit" name="saveRole" class="btn btn-success mr-3">Add</button>
                                            <button type="reset" class="btn btn-danger">Cancel</button>
                                        </div>
                                    </div>
                                    <?php endif ?>

                                    <?php if(isset($_GET['d']) && $_GET['d'] == "edit-role"): ?>
                                    <div class="form-row" id="edit-role">
                                        <div class="form-group col-md-12">
                                            <label>Role Name</label>
                                            <input type="text" class="form-control" name="roleName" placeholder="Role Name" value="<?php if(isset($_POST['roleName'])){ echo $_POST['roleName']; }else{ echo $dbRole; } ?>">
                                            <?php if(isset($roleNameErr)): ?><span class="bg-danger text-white px-2 rounded"><?php echo $roleNameErr; ?></span><?php endif ?>
                                        </div>
                                    </div>
                                    <div class="form-row mt-3">
                                        <div class="col-md-12 text-center">
                                            <button type="submit" name="updateRole" class="btn btn-primary mr-3">Update</button>
                                            <button type="reset" class="btn btn-danger">Cancel</button>
                                        </div>
                                    </div>
                                    <?php endif ?>
                                </form>
                            </div>
                        </div>
                    </div>
                    <?php endif ?>
                    <div class="col-md-<?php if(isset($_GET['sz']) && $_GET['sz'] == "min"){echo 8;}else{echo 12;} ?>">
                        <div class="card">
                            <div class="card-header">
                                <h4 class="card-title">Manage All</h4>
                            </div>
                            <div class="card-body">
                                <?php if(isset($_GET['vw']) && $_GET['vw'] == "users"): ?>
                                <table class="table dtTable">
                                    <thead>
                                        <tr>
                                            <th scope="col">S/N</th>
                                            <th scope="col">Action</th>
                                            <th scope="col">Name</th>
                                            <th scope="col">Email</th>
                                            <th scope="col">Created</th>
                                            <th scope="col">Updated</th>
                                            <th scope="col" class="text-center">Status</th>
                                        </tr>
                                    </thead>
                                    <tbody>
                                        <?php
                                    $no = 1;
                                    $q = mysqli_query($db, "SELECT * FROM users");
                                    while($row = mysqli_fetch_array($q)){
                                        $id = $row['id']; $userName = $row['username']; $email =  $row['email'];  $role = $row['role'];
                                        $dc = $row['dc']; $du = $row['du']; $status = $row['status'];
                                    ?>
                                        <tr>
                                            <th scope="row"><?php echo $no++; ?></th>
                                            <td>
                                                <div class="btn-group">
                                                    <div class="dropdown">
                                                        <button type="button" class="btn btn-outline-primary btn-sm dropdown-toggle" data-toggle="dropdown" title="Add New">
                                                            <i class="fa fa-cogs"></i>
                                                        </button>
                                                        <ul class="dropdown-menu">
                                                            <?php if($status == 'active'): ?>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&sz=min&d=edit-user">Edit</a></li>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&d=dactv-user">Deactivate</a></li>
                                                            <?php else: ?>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&d=actv-user">Activate</a></li>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&d=dlt-user">Delete</a></li>
                                                            <?php endif ?>
                                                        </ul>
                                                    </div>
                                                </div>
                                            </td>
                                            <td><?php echo "$userName (".getDBVal('roles','name',$role).")"; ?></td>
                                            <td><?php echo $email; ?></td>
                                            <td><?php echo formatDate($dc); ?></td>
                                            <td><?php if($du != ""){ echo formatDate($du); } ?></td>
                                            <td class="text-center">
                                                <i class="fa fa-circle text-<?php echo getStatusColor($status); ?>"></i>
                                            </td>
                                        </tr>
                                        <?php } ?>
                                    </tbody>
                                </table>
                                <?php endif ?>
                                <?php if(isset($_GET['vw']) && $_GET['vw'] == "roles"): ?>
                                <table class="table dtTable">
                                    <thead>
                                        <tr>
                                            <th scope="col">S/N</th>
                                            <th scope="col">Action</th>
                                            <th scope="col">Name</th>
                                            <th scope="col">Created</th>
                                            <th scope="col">Updated</th>
                                            <th scope="col" class="text-center">Status</th>
                                        </tr>
                                    </thead>
                                    <tbody>
                                        <?php
                                    $no = 1;
                                    $q = mysqli_query($db, "SELECT * FROM roles");
                                    while($row = mysqli_fetch_array($q)){
                                        $id = $row['id']; $roleName = $row['name'];
                                        $dc = $row['dc']; $du = $row['du']; $status = $row['status'];
                                    ?>
                                        <tr>
                                            <th scope="row"><?php echo $no++; ?></th>
                                            <td>
                                                <div class="btn-group">
                                                    <div class="dropdown">
                                                        <button type="button" class="btn btn-outline-primary btn-sm dropdown-toggle" data-toggle="dropdown" title="Add New">
                                                            <i class="fa fa-cogs"></i>
                                                        </button>
                                                        <ul class="dropdown-menu">
                                                            <?php if($status == 'active'): ?>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&sz=min&d=edit-role">Edit</a></li>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&d=dactv-role">Deactivate</a></li>
                                                            <?php else: ?>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&d=actv-role">Activate</a></li>
                                                            <li><a class="dropdown-item" href="<?= $adminRoot ?>users?id=<?php echo $id; ?>&d=dlt-role">Delete</a></li>
                                                            <?php endif ?>
                                                        </ul>
                                                    </div>
                                                </div>
                                            </td>
                                            <td><?php echo $roleName; ?></td>
                                            <td><?php echo formatDate($dc); ?></td>
                                            <td><?php if($du != ""){ echo formatDate($du); } ?></td>
                                            <td class="text-center">
                                                <i class="fa fa-circle text-<?php echo getStatusColor($status); ?>"></i>
                                            </td>
                                        </tr>
                                        <?php } ?>
                                    </tbody>
                                </table>
                                <?php endif ?>
                            </div>
                        </div>
                    </div>
                </div>

            </div>
        </div>
        <!--**********************************
            Content body end
        ***********************************-->

        <!--**********************************
            Footer start
        ***********************************-->
        <?php include("../inc/footer.php"); ?>
        <!--**********************************
            Footer end
        ***********************************-->


    </div>
    <!--**********************************
        Main wrapper end
    ***********************************-->

    <?php include("../inc/foot.php"); ?>