| .. | |||||
| uploads | |||||
| .htaccess | |||||
| .user.ini | |||||
| Notifications.php | |||||
| authenticate.php | |||||
| certificates.php | |||||
| config.php | |||||
| courses.php | |||||
| dashboard.php | |||||
| error_log | |||||
| home.php | |||||
| index.php | |||||
| login.php | |||||
| logout.php | |||||
| payments.php | |||||
| php.ini | |||||
| rewards.php | |||||
| script.js | |||||
| students.php | |||||
| style.css |
| Server IP : 139.59.11.189 / Your IP : 216.73.217.105 Web Server : LiteSpeed System : Linux Jupiter.hostitsmartserver.com 5.14.0-611.49.2.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Apr 30 09:05:08 EDT 2026 x86_64 User : xjlivlhf ( 1472) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/xjlivlhf/www/dm.hopewayindia.com/admin/ |
Upload File : |
<?php
session_start();
if (!isset($_SESSION['admin'])) {
// Optionally redirect to login.php
}
require_once __DIR__ . '/config.php';
// 1. Fetch Flash message from session so it survives the page reload
$flash = $_SESSION['flash'] ?? null;
unset($_SESSION['flash']);
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$action = $_POST['payment_action'] ?? '';
$withdrawId = (int)($_POST['withdraw_id'] ?? 0);
$adminNote = trim($_POST['admin_note'] ?? '');
if ($action !== '' && $withdrawId > 0) {
$stmt = mysqli_prepare($conn, "SELECT id, student_id, amount, status FROM withdraw_requests WHERE id = ? LIMIT 1");
mysqli_stmt_bind_param($stmt, 'i', $withdrawId);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
$withdraw = mysqli_fetch_assoc($result);
mysqli_stmt_close($stmt);
if (!$withdraw) {
$_SESSION['flash'] = ['type' => 'danger', 'message' => 'Withdraw request not found.'];
} elseif ($withdraw['status'] !== 'pending') {
$_SESSION['flash'] = ['type' => 'warning', 'message' => 'Only pending withdrawals can be updated.'];
} else {
mysqli_begin_transaction($conn);
try {
if ($action === 'approve') {
$status = 'approved';
$processedAt = date('Y-m-d H:i:s');
// Process Payment Proof Upload
$proofImagePath = null;
if (isset($_FILES['payment_proof']) && $_FILES['payment_proof']['error'] === UPLOAD_ERR_OK) {
$uploadDir = __DIR__ . '/../uploads/payments/';
if (!is_dir($uploadDir)) {
mkdir($uploadDir, 0755, true);
}
$ext = strtolower(pathinfo($_FILES['payment_proof']['name'], PATHINFO_EXTENSION));
$allowed = ['jpg', 'jpeg', 'png', 'webp'];
if (in_array($ext, $allowed)) {
$filename = 'proof_' . time() . '_' . rand(100, 999) . '.' . $ext;
if (move_uploaded_file($_FILES['payment_proof']['tmp_name'], $uploadDir . $filename)) {
$proofImagePath = '/uploads/payments/' . $filename;
}
}
}
$upd = mysqli_prepare($conn, "UPDATE withdraw_requests SET status = ?, admin_note = ?, payment_proof = COALESCE(?, payment_proof), processed_at = ?, updated_at = NOW() WHERE id = ?");
mysqli_stmt_bind_param($upd, 'ssssi', $status, $adminNote, $proofImagePath, $processedAt, $withdrawId);
mysqli_stmt_execute($upd);
mysqli_stmt_close($upd);
$walletInsert = mysqli_prepare($conn, "INSERT INTO wallet_transactions (student_id, type, source, amount, status, reference_type, reference_id, description) VALUES (?, 'debit', 'withdrawal', ?, 'completed', 'withdraw_request', ?, ?)");
$studentId = (int)$withdraw['student_id'];
$amount = (float)$withdraw['amount'];
$description = 'Withdrawal approved by admin';
mysqli_stmt_bind_param($walletInsert, 'idis', $studentId, $amount, $withdrawId, $description);
mysqli_stmt_execute($walletInsert);
mysqli_stmt_close($walletInsert);
// Sync student earnings
$credits = 0.0; $debits = 0.0;
$wStmt = mysqli_prepare($conn, "SELECT COALESCE(SUM(CASE WHEN type = 'credit' AND status = 'completed' THEN amount ELSE 0 END), 0) AS credits, COALESCE(SUM(CASE WHEN type = 'debit' AND status = 'completed' THEN amount ELSE 0 END), 0) AS debits FROM wallet_transactions WHERE student_id = ?");
if ($wStmt) {
mysqli_stmt_bind_param($wStmt, 'i', $studentId);
mysqli_stmt_execute($wStmt);
$wResult = mysqli_stmt_get_result($wStmt);
if ($row = mysqli_fetch_assoc($wResult)) { $credits = (float)$row['credits']; $debits = (float)$row['debits']; }
mysqli_stmt_close($wStmt);
}
$available = max(0, $credits - $debits);
$updUser = mysqli_prepare($conn, "UPDATE students SET earnings = ? WHERE id = ?");
if ($updUser) {
mysqli_stmt_bind_param($updUser, 'di', $available, $studentId);
mysqli_stmt_execute($updUser);
mysqli_stmt_close($updUser);
}
$_SESSION['flash'] = ['type' => 'success', 'message' => 'Withdrawal approved and wallet debited.'];
} elseif ($action === 'reject') {
$status = 'rejected';
$processedAt = date('Y-m-d H:i:s');
$upd = mysqli_prepare($conn, "UPDATE withdraw_requests SET status = ?, admin_note = ?, processed_at = ?, updated_at = NOW() WHERE id = ?");
mysqli_stmt_bind_param($upd, 'sssi', $status, $adminNote, $processedAt, $withdrawId);
mysqli_stmt_execute($upd);
mysqli_stmt_close($upd);
$_SESSION['flash'] = ['type' => 'warning', 'message' => 'Withdrawal request rejected.'];
}
mysqli_commit($conn);
} catch (Throwable $e) {
mysqli_rollback($conn);
$_SESSION['flash'] = ['type' => 'danger', 'message' => 'Action failed: ' . $e->getMessage()];
}
}
// 2. Redirect back to the page cleanly to prevent raw HTML output
echo "<script>window.location.href = window.location.href;</script>";
exit;
}
}
// Fetch only withdrawals now
$withdraws = [];
$wdRes = mysqli_query($conn, "
SELECT w.id, w.amount, w.upi_id, w.account_holder, w.notes, w.status, w.admin_note,
w.qr_image, w.payment_proof, w.processed_at, w.created_at,
s.id AS student_id, s.name AS student_name, s.email AS student_email,
(SELECT qr_image FROM withdraw_requests w2 WHERE w2.student_id = w.student_id AND w2.qr_image IS NOT NULL AND w2.qr_image != '' ORDER BY w2.id DESC LIMIT 1) as fallback_qr
FROM withdraw_requests w
LEFT JOIN students s ON s.id = w.student_id
ORDER BY FIELD(w.status, 'pending', 'approved', 'rejected'), w.created_at DESC, w.id DESC
");
if ($wdRes) {
while ($row = mysqli_fetch_assoc($wdRes)) {
$row['amount'] = (float)$row['amount'];
$withdraws[] = $row;
}
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Wallet Withdrawals</title>
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
<style>
:root {
--bg-dark: #0A0A0F;
--card-bg: #0E0E1C;
--border-color: #1A1A30;
--accent-purple: #7C4DFF;
--success-green: #10B981;
--warning-yellow: #FCD34D;
--danger-red: #EF4444;
--text-white: #FFFFFF;
--text-muted: #8F8FB6;
--row-hover: #1A1A2E;
--row-stripe: #12121F;
}
* { margin: 0; padding: 0; box-sizing: border-box; font-family: 'Inter', sans-serif; }
body { background-color: var(--bg-dark); color: var(--text-white); padding: 24px; animation: fadeIn 0.4s ease-out; }
@keyframes fadeIn { from { opacity: 0; transform: translateY(10px); } to { opacity: 1; transform: translateY(0); } }
.header-flex { display: flex; justify-content: space-between; align-items: flex-end; margin-bottom: 24px; flex-wrap: wrap; gap: 16px; }
.page-title { font-weight: 800; font-size: 28px; margin-bottom: 4px; }
.page-subtitle { color: var(--text-muted); font-size: 14px; }
.alert { padding: 14px 20px; border-radius: 8px; margin-bottom: 24px; font-weight: 500; display: flex; gap: 10px; align-items: center; }
.alert-success { background: rgba(16, 185, 129, 0.1); color: var(--success-green); border: 1px solid rgba(16, 185, 129, 0.2); }
.alert-danger { background: rgba(239, 68, 68, 0.1); color: var(--danger-red); border: 1px solid rgba(239, 68, 68, 0.2); }
.alert-warning { background: rgba(252, 211, 77, 0.1); color: var(--warning-yellow); border: 1px solid rgba(252, 211, 77, 0.2); }
.section-card { background: var(--card-bg); border: 1px solid var(--border-color); border-radius: 12px; margin-bottom: 32px; overflow: hidden; box-shadow: 0 4px 20px rgba(0,0,0,0.2); }
.section-header { padding: 18px 24px; border-bottom: 1px solid var(--border-color); display: flex; justify-content: space-between; align-items: center; background: var(--card-bg); }
.section-header h3 { font-size: 18px; font-weight: 700; color: var(--text-white); }
.badge-count { background: rgba(255,255,255,0.1); padding: 4px 10px; border-radius: 20px; font-size: 12px; font-weight: 700; }
.table-responsive { overflow-x: auto; width: 100%; }
.data-table { width: 100%; border-collapse: collapse; text-align: left; min-width: 900px; }
.data-table th { background: var(--row-stripe); padding: 14px 16px; font-size: 12px; font-weight: 600; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.5px; border-bottom: 1px solid var(--border-color); white-space: nowrap; }
.data-table td { padding: 16px; font-size: 14px; border-bottom: 1px solid var(--border-color); vertical-align: top; }
.data-table tbody tr:nth-child(even) { background: var(--row-stripe); }
.data-table tbody tr:hover { background: var(--row-hover); }
.fw-bold { font-weight: 700; }
.text-small { font-size: 12px; color: var(--text-muted); margin-top: 4px; }
.amount { font-weight: 800; font-size: 15px; }
.amount-blue { color: #3B82F6; }
.status-badge { padding: 4px 10px; border-radius: 20px; font-size: 11px; font-weight: 700; text-transform: uppercase; display: inline-block; }
.status-pending { background: rgba(252, 211, 77, 0.1); color: var(--warning-yellow); border: 1px solid rgba(252, 211, 77, 0.2); }
.status-approved, .status-completed { background: rgba(16, 185, 129, 0.1); color: var(--success-green); border: 1px solid rgba(16, 185, 129, 0.2); }
.status-rejected, .status-failed { background: rgba(239, 68, 68, 0.1); color: var(--danger-red); border: 1px solid rgba(239, 68, 68, 0.2); }
.pay-form { display: flex; flex-direction: column; gap: 8px; min-width: 220px; }
.compact-input { background: var(--bg-dark); border: 1px solid var(--border-color); color: var(--text-white); padding: 8px 10px; border-radius: 6px; font-size: 12px; width: 100%; outline: none; }
.compact-input:focus { border-color: var(--accent-purple); }
textarea.compact-input { resize: vertical; min-height: 40px; }
.btn-group { display: flex; gap: 8px; }
.btn { padding: 8px 14px; border-radius: 6px; font-size: 12px; font-weight: 600; border: none; cursor: pointer; flex: 1; transition: 0.2s; }
.btn-approve { background: var(--success-green); color: #000; }
.btn-approve:hover { background: #0EA5E9; filter: brightness(1.1); }
.btn-reject { background: rgba(239, 68, 68, 0.15); color: var(--danger-red); border: 1px solid rgba(239, 68, 68, 0.3); }
.btn-reject:hover { background: var(--danger-red); color: white; }
.img-thumb { width: 60px; height: 60px; object-fit: cover; border-radius: 8px; border: 1px solid var(--border-color); transition: 0.2s; }
.img-thumb:hover { transform: scale(1.1); border-color: var(--accent-purple); }
.img-label { font-size: 11px; color: var(--text-muted); margin-bottom: 4px; display: block; }
</style>
</head>
<body>
<div class="header-flex">
<div>
<h1 class="page-title">💸 Wallet Withdrawals</h1>
<p class="page-subtitle">Manage and process student wallet withdrawal requests.</p>
</div>
</div>
<?php if ($flash): ?>
<div class="alert alert-<?= $flash['type'] === 'success' ? 'success' : ($flash['type'] === 'warning' ? 'warning' : 'danger') ?>">
<i class="fa-solid fa-circle-info"></i> <?= htmlspecialchars($flash['message']) ?>
</div>
<?php endif; ?>
<div class="section-card">
<div class="section-header">
<h3>Wallet Withdraw Requests</h3>
<span class="badge-count"><?= count($withdraws) ?> Total</span>
</div>
<div class="table-responsive">
<table class="data-table">
<thead>
<tr>
<th>#</th><th>Student Details</th><th>Account Info (UPI)</th><th>Amount</th><th>Images / Proof</th><th>Status & Notes</th><th>Actions</th>
</tr>
</thead>
<tbody>
<?php if (empty($withdraws)): ?>
<tr><td colspan="7" style="text-align:center; padding: 30px; color: var(--text-muted);">No withdraw requests found.</td></tr>
<?php else: ?>
<?php foreach ($withdraws as $index => $withdraw): ?>
<tr>
<td><?= $index + 1 ?></td>
<td>
<div class="fw-bold"><?= htmlspecialchars($withdraw['student_name'] ?? 'Unknown') ?></div>
<div class="text-small"><?= htmlspecialchars($withdraw['student_email'] ?? '-') ?></div>
<div class="text-small" style="margin-top: 8px;">
<i class="fa-regular fa-clock"></i> <?= date('d M Y, h:i A', strtotime($withdraw['created_at'])) ?>
</div>
</td>
<td>
<div class="fw-bold" style="color: #E2E8F0;"><?= htmlspecialchars($withdraw['account_holder']) ?></div>
<div class="text-small" style="font-family: monospace; color: var(--accent-purple); font-size: 13px; margin-top: 4px;">
<?= htmlspecialchars($withdraw['upi_id']) ?>
</div>
</td>
<td class="amount amount-blue">₹<?= number_format($withdraw['amount'], 0) ?></td>
<td>
<div style="display: flex; gap: 12px;">
<?php
// DYNAMIC QR SELECTION
$displayQr = !empty($withdraw['qr_image']) ? $withdraw['qr_image'] : (!empty($withdraw['fallback_qr']) ? $withdraw['fallback_qr'] : null);
if ($displayQr):
?>
<div>
<span class="img-label">Student QR</span>
<a href="<?= htmlspecialchars('/' . ltrim($displayQr, '/')) ?>" target="_blank">
<img src="<?= htmlspecialchars('/' . ltrim($displayQr, '/')) ?>" class="img-thumb" alt="QR">
</a>
</div>
<?php endif; ?>
<?php if (!empty($withdraw['payment_proof'])): ?>
<div>
<span class="img-label">Admin Proof</span>
<a href="<?= htmlspecialchars('/' . ltrim($withdraw['payment_proof'], '/')) ?>" target="_blank">
<img src="<?= htmlspecialchars('/' . ltrim($withdraw['payment_proof'], '/')) ?>" class="img-thumb" style="border-color: var(--success-green);" alt="Proof">
</a>
</div>
<?php endif; ?>
</div>
<?php if(empty($displayQr) && empty($withdraw['payment_proof'])): ?>
<span class="text-small">No images</span>
<?php endif; ?>
</td>
<td>
<div style="margin-bottom: 8px;">
<span class="status-badge status-<?= strtolower($withdraw['status']) ?>">
<?= htmlspecialchars($withdraw['status']) ?>
</span>
</div>
<?php if (!empty($withdraw['notes'])): ?>
<div class="text-small"><strong>User:</strong> <?= nl2br(htmlspecialchars($withdraw['notes'])) ?></div>
<?php endif; ?>
<?php if (!empty($withdraw['admin_note'])): ?>
<div class="text-small" style="color: var(--accent-purple); margin-top: 4px;">
<strong>Admin:</strong> <?= nl2br(htmlspecialchars($withdraw['admin_note'])) ?>
</div>
<?php endif; ?>
<?php if($withdraw['processed_at']): ?>
<div class="text-small" style="margin-top: 4px;">Processed: <br><?= date('d M Y, H:i', strtotime($withdraw['processed_at'])) ?></div>
<?php endif; ?>
</td>
<td>
<?php if ($withdraw['status'] === 'pending'): ?>
<form method="POST" class="pay-form" enctype="multipart/form-data">
<input type="hidden" name="withdraw_id" value="<?= (int)$withdraw['id'] ?>">
<textarea name="admin_note" class="compact-input" placeholder="Optional admin note..."></textarea>
<div>
<label class="img-label" style="margin-bottom: 2px;">Attach Payment Proof</label>
<input type="file" name="payment_proof" class="compact-input" accept="image/*" style="padding: 4px;">
</div>
<div class="btn-group">
<button type="submit" name="payment_action" value="approve" class="btn btn-approve"><i class="fa-solid fa-check"></i> Approve</button>
<button type="submit" name="payment_action" value="reject" class="btn btn-reject"><i class="fa-solid fa-xmark"></i> Reject</button>
</div>
</form>
<?php else: ?>
<div class="text-small" style="text-align: center; padding: 10px; background: rgba(255,255,255,0.05); border-radius: 8px;">
<i class="fa-solid fa-lock" style="color: var(--text-muted); margin-bottom: 4px; font-size: 14px;"></i><br>
Action Completed
</div>
<?php endif; ?>
</td>
</tr>
<?php endforeach; ?>
<?php endif; ?>
</tbody>
</table>
</div>
</div>
</body>
</html>| .. | |||||
| uploads | |||||
| .htaccess | |||||
| .user.ini | |||||
| Notifications.php | |||||
| authenticate.php | |||||
| certificates.php | |||||
| config.php | |||||
| courses.php | |||||
| dashboard.php | |||||
| error_log | |||||
| home.php | |||||
| index.php | |||||
| login.php | |||||
| logout.php | |||||
| payments.php | |||||
| php.ini | |||||
| rewards.php | |||||
| script.js | |||||
| students.php | |||||
| style.css |