1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / kobilz.co.uk / management /
Filename : service-details.php
back
<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);
ini_set('session.cookie_httponly', 1);
// ini_set('session.cookie_secure', 1); // Enable for HTTPS

session_start();
session_regenerate_id(true);

include('../../config/xconfig.php');
include('include/checklogin.php');

// Check login
check_login();

$title = "Service Details";

// Generate CSRF token
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf_token = $_SESSION['csrf_token'];

$msg = '';
$msg_type = '';

// Validate service ID
$sid = filter_input(INPUT_GET, 'sid', FILTER_VALIDATE_INT);
if ($sid === false || $sid <= 0) {
    header('Location: services.php');
    exit();
}

// Fetch service details
$stmt = $con->prepare("
    SELECT id, name, description, price_2h, price_3h, price_4h, price_5h, price_6h, created_at
    FROM services
    WHERE id = ?
");
$stmt->bind_param('i', $sid);
if (!$stmt->execute()) {
    die('Fetch service failed: ' . $stmt->error);
}
$result = $stmt->get_result();
if ($result->num_rows === 0) {
    $msg = 'Service not found.';
    $msg_type = 'error';
    $service = null;
} else {
    $service = $result->fetch_assoc();
}
$stmt->close();

// Handle update form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'update') {
    if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $csrf_token) {
        $msg = 'Invalid CSRF token.';
        $msg_type = 'error';
    } else {
        // Collect inputs
        $name = filter_input(INPUT_POST, 'name', FILTER_SANITIZE_SPECIAL_CHARS);
        $description = filter_input(INPUT_POST, 'description', FILTER_SANITIZE_SPECIAL_CHARS);
        $price_2h = filter_input(INPUT_POST, 'price_2h', FILTER_VALIDATE_FLOAT);
        $price_3h = filter_input(INPUT_POST, 'price_3h', FILTER_VALIDATE_FLOAT);
        $price_4h = filter_input(INPUT_POST, 'price_4h', FILTER_VALIDATE_FLOAT);
        $price_5h = filter_input(INPUT_POST, 'price_5h', FILTER_VALIDATE_FLOAT);
        $price_6h = filter_input(INPUT_POST, 'price_6h', FILTER_VALIDATE_FLOAT);

        // Validation
        if (empty($name)) {
            $msg = 'Service name is required.';
            $msg_type = 'error';
        } elseif ($price_2h === false || $price_2h < 0) {
            $msg = 'Invalid price for 2 hours.';
            $msg_type = 'error';
        } elseif ($price_3h === false || $price_3h < 0) {
            $msg = 'Invalid price for 3 hours.';
            $msg_type = 'error';
        } elseif ($price_4h === false || $price_4h < 0) {
            $msg = 'Invalid price for 4 hours.';
            $msg_type = 'error';
        } elseif ($price_5h === false || $price_5h < 0) {
            $msg = 'Invalid price for 5 hours.';
            $msg_type = 'error';
        } elseif ($price_6h === false || $price_6h < 0) {
            $msg = 'Invalid price for 6 hours.';
            $msg_type = 'error';
        } else {
            // Check if name is unique (excluding current service)
            $stmt = $con->prepare("SELECT id FROM services WHERE name = ? AND id != ?");
            $stmt->bind_param('si', $name, $sid);
            $stmt->execute();
            $result = $stmt->get_result();
            if ($result->num_rows > 0) {
                $msg = "A service with the name '$name' already exists.";
                $msg_type = 'error';
            } else {
                // Update service
                $stmt = $con->prepare("
                    UPDATE services SET name = ?, description = ?, price_2h = ?, price_3h = ?, 
                                       price_4h = ?, price_5h = ?, price_6h = ?
                    WHERE id = ?
                ");
                $stmt->bind_param('ssdddddi', $name, $description, $price_2h, $price_3h, 
                                  $price_4h, $price_5h, $price_6h, $sid);
                if ($stmt->execute()) {
                    $msg = 'Service updated successfully.';
                    $msg_type = 'success';
                    // Refresh service data
                    $stmt = $con->prepare("
                        SELECT id, name, description, price_2h, price_3h, price_4h, price_5h, price_6h, created_at
                        FROM services
                        WHERE id = ?
                    ");
                    $stmt->bind_param('i', $sid);
                    $stmt->execute();
                    $result = $stmt->get_result();
                    $service = $result->fetch_assoc();
                } else {
                    $msg = 'Failed to update service: ' . $stmt->error;
                    $msg_type = 'error';
                }
            }
            $stmt->close();
        }
    }
}

// Handle delete action
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'delete') {
    if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $csrf_token) {
        $msg = 'Invalid CSRF token.';
        $msg_type = 'error';
    } else {
        $stmt = $con->prepare("DELETE FROM services WHERE id = ?");
        $stmt->bind_param('i', $sid);
        if ($stmt->execute()) {
            header('Location: services.php');
            exit();
        } else {
            $msg = 'Failed to delete service: ' . $stmt->error;
            $msg_type = 'error';
        }
        $stmt->close();
    }
}

include('include/header.php');
include('include/sidebar.php');
?>

<div class="content-wrapper">
    <div class="container-xxl flex-grow-1 container-p-y">
        <h4 class="fw-bold py-3 mb-4"><span class="text-muted fw-light">Service /</span> Edit Service</h4>

        <?php if ($service) { ?>
            <div class="card mb-4">
                <h5 class="card-header">Service Details</h5>
                <div class="card-body">
                    <?php if ($msg) { ?>
                        <div class="alert alert-<?php echo $msg_type === 'success' ? 'success' : 'danger'; ?>">
                            <h6 class="alert-heading fw-bold mb-1"><?php echo ucfirst($msg_type); ?></h6>
                            <p class="mb-0"><?php echo htmlspecialchars($msg); ?></p>
                        </div>
                    <?php } ?>
                    <form method="post" enctype="multipart/form-data">
                        <input type="hidden" name="action" value="update">
                        <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                        <div class="row">
                            <div class="mb-3 col-12">
                                <label class="form-label" for="name">Service Name</label>
                                <input type="text" class="form-control" id="name" name="name" 
                                       value="<?php echo htmlspecialchars($service['name']); ?>" required />
                            </div>
                            <div class="mb-3 col-12">
                                <label class="form-label" for="description">Description</label>
                                <textarea class="form-control" id="description" name="description" 
                                          rows="4"><?php echo htmlspecialchars($service['description'] ?: ''); ?></textarea>
                            </div>
                            <div class="mb-3 col-md-6">
                                <label class="form-label" for="price_2h">Price for 2 hours (£)</label>
                                <input type="number" class="form-control" id="price_2h" name="price_2h" 
                                       value="<?php echo htmlspecialchars($service['price_2h']); ?>" 
                                       step="0.01" min="0" required />
                            </div>
                            <div class="mb-3 col-md-6">
                                <label class="form-label" for="price_3h">Price for 3 hours (£)</label>
                                <input type="number" class="form-control" id="price_3h" name="price_3h" 
                                       value="<?php echo htmlspecialchars($service['price_3h']); ?>" 
                                       step="0.01" min="0" required />
                            </div>
                            <div class="mb-3 col-md-6">
                                <label class="form-label" for="price_4h">Price for 4 hours (£)</label>
                                <input type="number" class="form-control" id="price_4h" name="price_4h" 
                                       value="<?php echo htmlspecialchars($service['price_4h']); ?>" 
                                       step="0.01" min="0" required />
                            </div>
                            <div class="mb-3 col-md-6">
                                <label class="form-label" for="price_5h">Price for 5 hours (£)</label>
                                <input type="number" class="form-control" id="price_5h" name="price_5h" 
                                       value="<?php echo htmlspecialchars($service['price_5h']); ?>" 
                                       step="0.01" min="0" required />
                            </div>
                            <div class="mb-3 col-md-6">
                                <label class="form-label" for="price_6h">Price for 6 hours (£)</label>
                                <input type="number" class="form-control" id="price_6h" name="price_6h" 
                                       value="<?php echo htmlspecialchars($service['price_6h']); ?>" 
                                       step="0.01" min="0" required />
                            </div>
                            <div class="mb-3 col-md-6">
                                <label class="form-label" for="created_at">Created At</label>
                                <input type="text" class="form-control" id="created_at" 
                                       value="<?php echo htmlspecialchars(date('d-m-Y', strtotime($service['created_at']))); ?>" 
                                       disabled />
                            </div>
                        </div>
                        <div class="mt-2">
                            <button type="submit" class="btn btn-primary me-2">Save changes</button>
                        </div>
                    </form>
                </div>
            </div>
            <div class="card">
                <h5 class="card-header">Delete Service</h5>
                <div class="card-body">
                    <div class="mb-3 col-12 mb-0">
                        <div class="alert alert-warning">
                            <h6 class="alert-heading fw-bold mb-1">Are you sure you want to delete this service?</h6>
                            <p class="mb-0">Once you delete this service, there is no going back. Please be certain.</p>
                        </div>
                    </div>
                    <form action="" method="POST" onsubmit="return confirm('Are you sure you want to delete this service?');">
                        <input type="hidden" name="action" value="delete">
                        <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($csrf_token); ?>">
                        <button type="submit" class="btn btn-danger">Delete Service</button>
                    </form>
                </div>
            </div>
        <?php } else { ?>
            <div class="alert alert-danger">
                <h6 class="alert-heading fw-bold mb-1">Error</h6>
                <p class="mb-0"><?php echo htmlspecialchars($msg); ?></p>
            </div>
        <?php } ?>
    </div>
</div>

<?php include('include/footer.php'); ?>