MAINHACK

Viewing / Editing File: cssps-list.php

<?php 
 include("functions.php");
 //error_reporting(0);
 if(!isset($_SESSION['dbmail_Xw211qAAsq4'])){
     header("location:../auth-login");
 } else {
   $s_code = $_SESSION['s_code_Xw2119904'];
$stmt = $con->prepare("Select * from schools where school_code = ?");
$stmt->execute(array($s_code));
$row = $stmt->fetch();
$logo = $row['logo'];
    if(empty($logo)){
      header("Location:complete-process");
    } else {

function normalize_text($str) {
    $str = html_entity_decode($str, ENT_QUOTES | ENT_HTML5); // Decode HTML entities
    $str = preg_replace('/\s+/', ' ', $str);               // Collapse multiple spaces
    $str = trim($str);                                     // Remove leading/trailing spaces
    return $str;
}

if (isset($_POST['addnewbulk'])) {

// Normalize and validate inputs
    $fromcssps = isset($_POST['fromcssps']) ? normalize_text($_POST['fromcssps']) : '';
    $tocreatedprogram = isset($_POST['tocreatedprogram']) ? normalize_text($_POST['tocreatedprogram']) : '';
    $schoolcode = isset($_POST['schoolcode']) ? normalize_text($_POST['schoolcode']) : '';

// Validate inputs
    if (empty($fromcssps) || empty($tocreatedprogram) || empty($schoolcode)) {
        die("<p class='btn btn-danger'>Error: All fields are required.</p>");
    }

// Use prepared statements to prevent SQL injection
    $stmt = $new->prepare("UPDATE enrol_generic SET programme = ? WHERE programme = ? AND s_code = ?");
    if ($stmt === false) {
        die("<p class='btn btn-danger'>Error preparing query: " . htmlspecialchars($new->error) . "</p>");
    }

// Bind parameters
    $stmt->bind_param("sss", $tocreatedprogram, $fromcssps, $schoolcode);

// Execute the query
    if ($stmt->execute()) {
        // Check if any rows were affected
        if ($stmt->affected_rows > 0) {
            echo "<script>
                Swal.fire({
                    title: 'Success!',
                    text: 'Programme updated successfully.',
                    icon: 'success',
                    confirmButtonText: 'OK'
                });
            </script>";
        } else {
            echo "<script>
                Swal.fire({
                    title: 'No Changes!',
                    text: 'No records were updated. Please check your input.',
                    icon: 'warning',
                    confirmButtonText: 'OK'
                });
            </script>";
        }
    } else {
        echo "<script>
            Swal.fire({
                title: 'Error!',
                text: 'Failed to update programme: " . htmlspecialchars($stmt->error) . "',
                icon: 'error',
                confirmButtonText: 'OK'
            });
        </script>";
    }

// Close the statement
    $stmt->close();
}

if(isset($_POST['addnbystudent'])){
    if(!csrf_token_is_valid() || !csrf_token_is_recent()) {
        $message = "<p class='btn btn-danger'>Sorry, Token Authentication invalid.</p>";
    } else {

$indexNo = normalize_text($_POST['indexNo']);
$tocreatedprogram = normalize_text($_POST['tocreatedprogram']);
$schoolcode = normalize_text($_POST['schoolcode']);

$indexNo1 = mysqli_real_escape_string($new, $indexNo);
$tocreatedprogramw = mysqli_real_escape_string($new, $tocreatedprogram);
$schoolcode = mysqli_real_escape_string($new, $schoolcode);

if(!empty($indexNo)){
            $update = mysqli_query($new,
                "UPDATE enrol_generic 
                 SET programme = '$tocreatedprogramw'  
                 WHERE indexNo = '$indexNo1' AND s_code = '$schoolcode'"
            );

echo "<script>
            document.addEventListener('DOMContentLoaded', function() {
                Swal.fire({
                    title: 'Success!',
                    text: 'Programme updated successfully.',
                    icon: 'success',
                    confirmButtonText: 'OK'
                });
            });
            </script>";
        }
    }
}

if (isset($_GET['delete_id'])) {

$delete_id = $_GET['delete_id']; // Prevent SQL injection
$delete = mysqli_query($new, "DELETE FROM enrol_generic WHERE indexNo = '$delete_id' AND s_code = '$s_code'");

$delete = mysqli_query($new, "DELETE FROM enrol_details WHERE index_no = '$delete_id' AND s_code = '$s_code'");

//$delete = mysqli_query($new, "DELETE FROM stud_payment WHERE indexNumber = '$delete_id' AND s_code = '$s_code'");

if ($delete) {
    echo "<script>alert('Record deleted successfully');window.location='cssps-list';</script>";
} else {
    echo "Error deleting record: " . mysqli_error($new);
}

}

if (isset($_POST['update'])) {
    $aid   = intval($_POST['aid']);
    $indexNo = mysqli_real_escape_string($new, $_POST['indexNo']);
    $name  = mysqli_real_escape_string($new, $_POST['stud_name']);
    $gender = mysqli_real_escape_string($new, $_POST['gender']);
    $grade  = mysqli_real_escape_string($new, $_POST['grade']);
    $programme = mysqli_real_escape_string($new, $_POST['programme']);
    $form  = mysqli_real_escape_string($new, $_POST['form']);
    $thiscode  = mysqli_real_escape_string($new, $_POST['thiscode']);
    $resident  = mysqli_real_escape_string($new, $_POST['resident']);

$update = mysqli_query($new, "UPDATE enrol_generic SET indexNo='$indexNo', stud_name='$name', gender='$gender', grade='$grade', programme='$programme', form='$form', status='$resident' WHERE aid='$aid' AND s_code='$thiscode' LIMIT 1");

$update1 = mysqli_query($new, "UPDATE enrol_details 
            SET index_no='$indexNo'
            WHERE index_no='$indexNo' AND s_code='$thiscode' LIMIT 1");

if ($update) {
        echo "<script>alert('Record updated successfully');window.location='cssps-list';</script>";
    } else {
        echo "Error updating record: " . mysqli_error($new);
    }
}

?>
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<title>MANAGE CSSPS STUDENTS </title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta content="Premium Multipurpose Admin & Dashboard Template" name="description" />
<meta content="Themesbrand" name="author" />

<link href="assets/libs/datatables.net-bs4/css/dataTables.bootstrap4.min.css" rel="stylesheet" type="text/css" />
<link href="assets/libs/datatables.net-buttons-bs4/css/buttons.bootstrap4.min.css" rel="stylesheet" type="text/css" />

<link href="assets/libs/datatables.net-responsive-bs4/css/responsive.bootstrap4.min.css" rel="stylesheet" type="text/css" />

<link rel="stylesheet" href="assets/css/preloader.min.css" type="text/css" />

<link href="assets/css/bootstrap.min.css" id="bootstrap-style" rel="stylesheet" type="text/css" />

<link href="assets/css/icons.min.css" rel="stylesheet" type="text/css" />

<link href="assets/css/app.min.css" id="app-style" rel="stylesheet" type="text/css" />

<body>

<div id="layout-wrapper">

<?php include("includes/header.php");?>
<?php include("includes/sidebar.php");?>
<div class="main-content">

<div class="row">
<div class="col-12">
<div class="page-title-box d-sm-flex align-items-center justify-content-between">
<h4 class="mb-sm-0 font-size-18">MANAGE CSSPS LIST</h4>
<div class="page-title-right">
<ol class="breadcrumb m-0">
<li class="breadcrumb-item"><a href="javascript: void(0);">Home</a></li>
<li class="breadcrumb-item active">MANAGE CSSPS LIST</li>
</ol>
</div>

</div>
</div>
</div>
<center>
<button type="button" class="btn btn-primary btn-rounded waves-effect waves-light" data-bs-toggle="modal"
data-bs-target=".bs-example-modal-lg">Update programme</button>

<button type="button" class="btn btn-success btn-rounded waves-effect waves-light" data-bs-toggle="modal"
data-bs-target=".bs-example-modal-lgg">Update programme by index</button>
</center>
</center>

<div class="table-responsive" style="
            overflow-x: auto;
            -webkit-overflow-scrolling: touch;
            scrollbar-color: #888 #f1f1f1;
            scrollbar-width: thin;
        ">
          <table id="datatable-buttons" 
                 class="table table-bordered table-striped table-hover align-middle mb-0 w-100 text-nowrap">
            <thead class="table-dark">
              <tr>
                <th>#</th>
                <th>Index No</th>
                <th>Student</th>
                <th>Gender</th>
                <th>Grades</th>
                <th>Programme</th>
                <th>Form</th>
                <th>Action</th>
              </tr>
            </thead>

<tbody>
              <?php 
              $cnt = 1;
              $regis = mysqli_query($new, "SELECT * FROM enrol_generic WHERE s_code = '$s_code' ORDER BY aid DESC");
              while ($dothis = mysqli_fetch_array($regis)) {
              ?>
              <tr>
                <td><?= $cnt++; ?></td>
                <td>
                  <?= htmlspecialchars($dothis['indexNo']); ?><br/>
                  <small class="text-muted">Protocol: <?= ($dothis['protocol_code'] == "") ? "None" : htmlspecialchars($dothis['protocol_code']); ?></small>
                </td>
                <td>
                  <?= htmlspecialchars($dothis['stud_name']); ?><br/>
                  <small class="text-muted"><?= htmlspecialchars($dothis['status']); ?></small>
                </td>
                <td><?= htmlspecialchars($dothis['gender']); ?></td>
                <td><?= htmlspecialchars($dothis['grade']); ?></td>
                <td><?= htmlspecialchars($dothis['programme']); ?></td>
                <td><?= htmlspecialchars($dothis['form']); ?></td>
                <td>
                  <button type="button" 
                          class="btn btn-primary btn-sm editBtn"
                          data-id="<?= htmlspecialchars($dothis['aid'], ENT_QUOTES); ?>"
                          data-indexno="<?= htmlspecialchars($dothis['indexNo'], ENT_QUOTES); ?>"
                          data-name="<?= htmlspecialchars($dothis['stud_name'], ENT_QUOTES); ?>"
                          data-gender="<?= htmlspecialchars($dothis['gender'], ENT_QUOTES); ?>"
                          data-grade="<?= htmlspecialchars($dothis['grade'], ENT_QUOTES); ?>"
                          data-programme="<?= htmlspecialchars($dothis['programme'], ENT_QUOTES); ?>"
                          data-form="<?= htmlspecialchars($dothis['form'], ENT_QUOTES); ?>"
                          data-bs-toggle="modal" 
                          data-bs-target="#editModal">
                    Edit
                  </button>

<a href="?delete_id=<?= urlencode($dothis['indexNo']); ?>&s_code=<?= urlencode($s_code); ?>"
                     onclick="return confirm('Are you sure you want to delete this record?');"
                     class="btn btn-danger btn-sm">
                    Delete
                  </a>
                </td>
              </tr>
              <?php } ?>
            </tbody>
          </table>
        </div>

</div>
    </div>
  </div>
</div>

<div class="modal fade" id="editModal" tabindex="-1" aria-hidden="true">
  <div class="modal-dialog">
    <form method="POST">
      <div class="modal-content">
        <div class="modal-header">
          <h5 class="modal-title">Edit Student</h5>
          <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
        </div>
        <div class="modal-body">
          <input type="hidden" name="aid" id="editAid">

<div class="mb-3">
            <label>Student Name</label>
            <input type="text" name="stud_name" id="editName" class="form-control" required>
          </div>

<div class="mb-3">
            <label>Index Number</label>
            <input type="text" name="indexNo" id="editIndexNo" class="form-control" required>
          </div>

<input type="hidden" name="thiscode" value="<?php echo $s_code;?>">
      
          <div class="mb-3">
            <label>Gender</label>
            <select name="gender" id="editGender" class="form-control" required>
              <option value="Male">Male</option>
              <option value="Female">Female</option>
            </select>
          </div>

<div class="mb-3">
            <label>Residential status</label>
            <select name="resident" id="editresident" class="form-control">
              <option value="BOARDING">BOARDING</option>
              <option value="Day">Day</option>
            </select>
          </div>

<div class="mb-3">
            <label>Grade</label>
            <input type="text" name="grade" id="editGrade" class="form-control" required>
          </div>

<div class="mb-3">
            <label>Programme</label>
            <input type="text" name="programme" id="editProgramme" class="form-control" required>
          </div>

<div class="mb-3">
            <label>Form</label>
            <input type="text" name="form" id="editForm" class="form-control" required>
          </div>
        </div>
        <div class="modal-footer">
          <button type="submit" name="update" class="btn btn-success">Save Changes</button>
          <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Cancel</button>
        </div>
      </div>
    </form>
  </div>
</div>

<script>
document.querySelectorAll('.editBtn').forEach(btn => {
  btn.addEventListener('click', function () {
    document.getElementById('editAid').value = this.dataset.id;
    document.getElementById('editIndexNo').value = this.dataset.indexno;
    document.getElementById('editName').value = this.dataset.name;
    document.getElementById('editGender').value = this.dataset.gender;
    document.getElementById('editresident').value = this.dataset.resident;
    document.getElementById('editGrade').value = this.dataset.grade;
    document.getElementById('editProgramme').value = this.dataset.programme;
    document.getElementById('editForm').value = this.dataset.form;
  });
});
</script>
<?php include("includes/footer.php");?>
</div>

</div>

<div class="modal fade bs-example-modal-lg" tabindex="-1" role="dialog" aria-labelledby="myLargeModalLabel" aria-hidden="true">
  <div class="modal-dialog modal-lg">
    <div class="modal-content">
      <div class="modal-header">
        <h5 class="modal-title" id="myLargeModalLabel">Update programme</h5>
        <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
      </div>
      <div class="modal-body">
        
        <div class="container">
          <div class="row justify-content-center">
            <div class="col-md-8 col-lg-8"> 
              <form method="POST"  class="needs-validation mt-4 pt-2" novalidate>
                 <?php echo csrf_token_tag(); ?>
        
        <div class="mb-4">
        <label for="exampleInputEmail1" class="form-label">Update From CSSPS List </label>
        <select class="form-control" name="fromcssps" required>

<option value="">--- SELECT Programme ---</option>
                  <?php 
                    $select_index = mysqli_query($new,"SELECT DISTINCT programme FROM enrol_generic WHERE s_code = '$s_code'");
                    while ($row = mysqli_fetch_array($select_index)) { ?>
                      <option value="<?php echo $row['programme']; ?>"><?php echo $row['programme']; ?></option>
                    <?php } ?>
                  </select>
        </div>

<div class="mb-4">
          <label for="exampleInputEmail1" class="form-label">To Craeted Programme</label>
          <select class="form-control" name="tocreatedprogram" required>
          <option value="" >Select program</option>
          <?php 
          $select_program = mysqli_query($new,"SELECT program_name FROM programme WHERE s_code = '$s_code'");
          while ($prog = mysqli_fetch_array($select_program)) {
          ?>
          <option value="<?php echo $prog['program_name'] ;?>"><?php echo $prog['program_name'] ;?></option>
          <?php }?>
          </select>
          </div>

<button type="submit" name="addnewbulk" class="btn btn-primary">Update</button>
              </form>
            </div>
          </div>
        </div>
      </div>
    </div>
  </div>
</div>

<div class="modal fade bs-example-modal-lgg" tabindex="-1" role="dialog" aria-labelledby="myLargeModalLabel" aria-hidden="true">
  <div class="modal-dialog modal-lg">
    <div class="modal-content">
      <div class="modal-header">
        <h5 class="modal-title" id="myLargeModalLabel">Update programme</h5>
        <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
      </div>
      <div class="modal-body">
        
        <div class="container">
          <div class="row justify-content-center">
            <div class="col-md-8 col-lg-8"> 
              <form method="POST"  class="needs-validation mt-4 pt-2" novalidate>
                 <?php echo csrf_token_tag(); ?>
        
    <div class="mb-4">
  <label for="indexNo" class="form-label">Update From CSSPS List</label>

<input type="text" id="indexNoSearch" class="form-control mb-2" placeholder="Search index number...">

<select class="form-control" name="indexNo" id="indexNo" required>
    <option value="">---SELECT---</option>
    <?php 
    $selectt = mysqli_query($new,"SELECT indexNo FROM enrol_generic WHERE s_code = '$s_code'");
    while ($getdataa = mysqli_fetch_array($selectt)) {
    ?>
      <option value="<?php echo $getdataa['indexNo'];?>"><?php echo $getdataa['indexNo'];?></option>
    <?php } ?>
  </select>
</div>

for (let i = 0; i < options.length; i++) {
    let txtValue = options[i].textContent || options[i].innerText;
    if (txtValue.toLowerCase().indexOf(filter) > -1 || options[i].value === "") {
      options[i].style.display = "";  // show
    } else {
      options[i].style.display = "none"; // hide
    }
  }
});
</script>

<button type="submit" name="addnbystudent" class="btn btn-primary">Update</button>
              </form>
            </div>
          </div>
        </div>
      </div>
    </div>
  </div>
</div>

<link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />

<script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>

<script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>

<div class="right-bar">
<div data-simplebar class="h-100">
<div class="rightbar-title d-flex align-items-center p-3">

<h5 class="m-0 me-2">Theme Customizer</h5>

<hr class="m-0" />

<div class="p-4">
<h6 class="mb-3">Layout</h6>
<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout"
id="layout-vertical" value="vertical">
<label class="form-check-label" for="layout-vertical">Vertical</label>
</div>
<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout"
id="layout-horizontal" value="horizontal">
<label class="form-check-label" for="layout-horizontal">Horizontal</label>
</div>

<h6 class="mt-4 mb-3 pt-2">Layout Mode</h6>

<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout-mode"
id="layout-mode-light" value="light">
<label class="form-check-label" for="layout-mode-light">Light</label>
</div>
<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout-mode"
id="layout-mode-dark" value="dark">
<label class="form-check-label" for="layout-mode-dark">Dark</label>
</div>

<h6 class="mt-4 mb-3 pt-2">Layout Width</h6>

<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout-width"
id="layout-width-fuild" value="fuild" onchange="document.body.setAttribute('data-layout-size', 'fluid')">
<label class="form-check-label" for="layout-width-fuild">Fluid</label>
</div>
<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout-width"
id="layout-width-boxed" value="boxed" onchange="document.body.setAttribute('data-layout-size', 'boxed')">
<label class="form-check-label" for="layout-width-boxed">Boxed</label>
</div>

<h6 class="mt-4 mb-3 pt-2">Layout Position</h6>

<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout-position"
id="layout-position-fixed" value="fixed" onchange="document.body.setAttribute('data-layout-scrollable', 'false')">
<label class="form-check-label" for="layout-position-fixed">Fixed</label>
</div>
<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="layout-position"
id="layout-position-scrollable" value="scrollable" onchange="document.body.setAttribute('data-layout-scrollable', 'true')">
<label class="form-check-label" for="layout-position-scrollable">Scrollable</label>
</div>

<h6 class="mt-4 mb-3 pt-2">Topbar Color</h6>

<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="topbar-color"
id="topbar-color-light" value="light" onchange="document.body.setAttribute('data-topbar', 'light')">
<label class="form-check-label" for="topbar-color-light">Light</label>
</div>
<div class="form-check form-check-inline">
<input class="form-check-input" type="radio" name="topbar-color"
id="topbar-color-dark" value="dark" onchange="document.body.setAttribute('data-topbar', 'dark')">
<label class="form-check-label" for="topbar-color-dark">Dark</label>
</div>

<h6 class="mt-4 mb-3 pt-2 sidebar-setting">Sidebar Size</h6>

<div class="form-check sidebar-setting">
<input class="form-check-input" type="radio" name="sidebar-size"
id="sidebar-size-default" value="default" onchange="document.body.setAttribute('data-sidebar-size', 'lg')">
<label class="form-check-label" for="sidebar-size-default">Default</label>
</div>
<div class="form-check sidebar-setting">
<input class="form-check-input" type="radio" name="sidebar-size"
id="sidebar-size-compact" value="compact" onchange="document.body.setAttribute('data-sidebar-size', 'md')">
<label class="form-check-label" for="sidebar-size-compact">Compact</label>
</div>
<div class="form-check sidebar-setting">
<input class="form-check-input" type="radio" name="sidebar-size"
id="sidebar-size-small" value="small" onchange="document.body.setAttribute('data-sidebar-size', 'sm')">
<label class="form-check-label" for="sidebar-size-small">Small (Icon View)</label>
</div>

<h6 class="mt-4 mb-3 pt-2 sidebar-setting">Sidebar Color</h6>

<div class="form-check sidebar-setting">
<input class="form-check-input" type="radio" name="sidebar-color"
id="sidebar-color-light" value="light" onchange="document.body.setAttribute('data-sidebar', 'light')">
<label class="form-check-label" for="sidebar-color-light">Light</label>
</div>
<div class="form-check sidebar-setting">
<input class="form-check-input" type="radio" name="sidebar-color"
id="sidebar-color-dark" value="dark" onchange="document.body.setAttribute('data-sidebar', 'dark')">
<label class="form-check-label" for="sidebar-color-dark">Dark</label>
</div>
<div class="form-check sidebar-setting">
<input class="form-check-input" type="radio" name="sidebar-color"
id="sidebar-color-brand" value="brand" onchange="document.body.setAttribute('data-sidebar', 'brand')">
<label class="form-check-label" for="sidebar-color-brand">Brand</label>
</div>

<h6 class="mt-4 mb-3 pt-2">Direction</h6>

</div>

</div> 
</div>

<div class="rightbar-overlay"></div>

<script src="assets/libs/jquery/jquery.min.js"></script>
<script src="assets/libs/bootstrap/js/bootstrap.bundle.min.js"></script>
<script src="assets/libs/metismenu/metisMenu.min.js"></script>
<script src="assets/libs/simplebar/simplebar.min.js"></script>
<script src="assets/libs/node-waves/waves.min.js"></script>
<script src="assets/libs/feather-icons/feather.min.js"></script>

<script src="assets/libs/pace-js/pace.min.js"></script>

<script src="assets/libs/datatables.net/js/jquery.dataTables.min.js"></script>
<script src="assets/libs/datatables.net-bs4/js/dataTables.bootstrap4.min.js"></script>

<script src="assets/libs/datatables.net-buttons/js/dataTables.buttons.min.js"></script>
<script src="assets/libs/datatables.net-buttons-bs4/js/buttons.bootstrap4.min.js"></script>
<script src="assets/libs/jszip/jszip.min.js"></script>
<script src="assets/libs/pdfmake/build/pdfmake.min.js"></script>
<script src="assets/libs/pdfmake/build/vfs_fonts.js"></script>
<script src="assets/libs/datatables.net-buttons/js/buttons.html5.min.js"></script>
<script src="assets/libs/datatables.net-buttons/js/buttons.print.min.js"></script>
<script src="assets/libs/datatables.net-buttons/js/buttons.colVis.min.js"></script>

<script src="assets/libs/datatables.net-responsive/js/dataTables.responsive.min.js"></script>
<script src="assets/libs/datatables.net-responsive-bs4/js/responsive.bootstrap4.min.js"></script>
        <script src="assets/libs/sweetalert2/sweetalert2.min.js"></script>
        

<script src="assets/js/pages/datatables.init.js"></script>

myModal.addEventListener('shown.bs.modal', function () {
myInput.focus()
})
</script>

</body>
</html>
<?php } }?>

Cancel / Back

[ MAINHACK ]

Viewing / Editing File: cssps-list.php

Server Info

System Features

User Info