connect_error) { http_response_code(500); echo "DB connect error: " . e($conn->connect_error); exit; } $conn->set_charset('utf8mb4'); // --- ensure tables exist --- $conn->query(" CREATE TABLE IF NOT EXISTS personalization ( id INT AUTO_INCREMENT PRIMARY KEY, `user` VARCHAR(255) NOT NULL, tracking_id VARCHAR(120), price DECIMAL(12,2) NOT NULL DEFAULT 0, status ENUM('pending','in_progress','ipe','successful','invalid') DEFAULT 'pending', admin_reply TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; "); $conn->query(" CREATE TABLE IF NOT EXISTS personalize_files ( id INT AUTO_INCREMENT PRIMARY KEY, personalization_id INT NOT NULL, filename VARCHAR(255) NOT NULL, uploaded_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (personalization_id) REFERENCES personalization(id) ON DELETE CASCADE ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; "); $conn->query(" CREATE TABLE IF NOT EXISTS personalize_price ( id INT AUTO_INCREMENT PRIMARY KEY, price DECIMAL(12,2) NOT NULL, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; "); // ensure there's at least one price row $res = $conn->query("SELECT COUNT(*) AS c FROM personalize_price"); if ($res) { $row = $res->fetch_assoc(); if (intval($row['c']) === 0) { $stmt = $conn->prepare("INSERT INTO personalize_price (price) VALUES (?)"); $defaultPrice = 400.00; $stmt->bind_param("d", $defaultPrice); $stmt->execute(); $stmt->close(); } $res->free(); } // --- POST handlers --- // Update global price if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_price'])) { $newPrice = floatval($_POST['price'] ?? 0); if ($newPrice <= 0) { flash_set('error', 'Invalid price value.'); } else { $stmt = $conn->prepare("INSERT INTO personalize_price (price) VALUES (?)"); $stmt->bind_param("d", $newPrice); if ($stmt->execute()) flash_set('success', 'Price updated to ₦' . number_format($newPrice,2)); else flash_set('error', 'Unable to update price: ' . $stmt->error); $stmt->close(); } header("Location: " . $_SERVER['PHP_SELF']); exit; } // Update status & admin reply for a personalization if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_request'])) { $id = intval($_POST['id'] ?? 0); $status = $_POST['status'] ?? 'pending'; $admin_reply = trim($_POST['admin_reply'] ?? ''); if ($id <= 0) { flash_set('error', 'Invalid request id.'); } else { $stmt = $conn->prepare("UPDATE personalization SET status = ?, admin_reply = ? WHERE id = ? LIMIT 1"); $stmt->bind_param("ssi", $status, $admin_reply, $id); if ($stmt->execute()) flash_set('success', "Request #$id updated."); else flash_set('error', "Update failed: " . $stmt->error); $stmt->close(); } header("Location: " . $_SERVER['PHP_SELF']); exit; } // Upload PDF for a personalization if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['upload_pdf'])) { $id = intval($_POST['id'] ?? 0); if ($id <= 0) { flash_set('error', 'Invalid request id for upload.'); header("Location: " . $_SERVER['PHP_SELF']); exit; } if (!isset($_FILES['pdf_file']) || $_FILES['pdf_file']['error'] !== UPLOAD_ERR_OK) { flash_set('error', 'No file uploaded or upload error.'); header("Location: " . $_SERVER['PHP_SELF']); exit; } $file = $_FILES['pdf_file']; $allowedMime = ['application/pdf']; $finfo = finfo_open(FILEINFO_MIME_TYPE); $mime = finfo_file($finfo, $file['tmp_name']); finfo_close($finfo); // check mime and extension $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION)); if (!in_array($mime, $allowedMime) || $ext !== 'pdf') { flash_set('error', 'Only PDF files are allowed.'); header("Location: " . $_SERVER['PHP_SELF']); exit; } // prepare upload folder $uploadDir = __DIR__ . '/uploads/personalize/'; if (!is_dir($uploadDir)) mkdir($uploadDir, 0755, true); $uniq = time() . '_' . bin2hex(random_bytes(6)); $safeName = 'personalize_' . intval($id) . '_' . $uniq . '.pdf'; $dest = $uploadDir . $safeName; if (!move_uploaded_file($file['tmp_name'], $dest)) { flash_set('error', 'Failed to move uploaded file.'); header("Location: " . $_SERVER['PHP_SELF']); exit; } // store file record $stmt = $conn->prepare("INSERT INTO personalize_files (personalization_id, filename) VALUES (?, ?)"); $stmt->bind_param("is", $id, $safeName); if ($stmt->execute()) { // also optionally set status to successful if desired flash_set('success', 'PDF uploaded for request #' . $id); } else { flash_set('error', 'Failed to record file: ' . $stmt->error); } $stmt->close(); header("Location: " . $_SERVER['PHP_SELF']); exit; } // Handle downloads (admin) if (isset($_GET['download']) && is_numeric($_GET['download'])) { $id = intval($_GET['download']); $stmt = $conn->prepare("SELECT filename FROM personalize_files WHERE personalization_id = ? ORDER BY id DESC LIMIT 1"); $stmt->bind_param("i", $id); $stmt->execute(); $res = $stmt->get_result(); if ($row = $res->fetch_assoc()) { $filename = $row['filename']; $path = __DIR__ . '/uploads/personalize/' . $filename; if (is_file($path)) { header('Content-Type: application/pdf'); header('Content-Disposition: attachment; filename="' . basename($filename) . '"'); header('Content-Length: ' . filesize($path)); readfile($path); exit; } else { flash_set('error', 'File not found on server.'); } } else { flash_set('error', 'No file associated with that request.'); } $stmt->close(); header("Location: " . $_SERVER['PHP_SELF']); exit; } // --- fetch current price --- $price = 0.00; if ($stmt = $conn->prepare("SELECT price FROM personalize_price ORDER BY id DESC LIMIT 1")) { $stmt->execute(); $res = $stmt->get_result(); if ($r = $res->fetch_assoc()) $price = (float)$r['price']; $stmt->close(); } // --- fetch requests --- $requests = []; $q = $conn->query("SELECT id, `user`, tracking_id, price, status, admin_reply, created_at FROM personalization ORDER BY id DESC LIMIT 200"); if ($q) { while ($row = $q->fetch_assoc()) $requests[] = $row; $q->free(); } $flash = flash_get_all(); // close connection later after output ?> Admin — Personalize Manager
Admin — Personalization Manager
Signed in as:

Requests (latest first)

No personalization requests yet.
prepare("SELECT filename FROM personalize_files WHERE personalization_id = ? ORDER BY id DESC LIMIT 1"); $stmtf->bind_param("i", $r['id']); $stmtf->execute(); $rf = $stmtf->get_result()->fetch_assoc(); $stmtf->close(); $hasFile = $rf ? true : false; $fileName = $rf['filename'] ?? ''; ?>
ID User Tracking ID Price Status Admin Reply Submitted At File Actions
₦
Download No file
close();