Tul xxx Tul

Viewing: admin_functions.php

<?php
// Prevenir que los errores PHP se muestren en respuestas JSON
ini_set('display_errors', 0);
error_reporting(E_ALL & ~E_NOTICE & ~E_WARNING);

include('../include/functions.php');

// ---------------------------------------User Actions----------------------------------------------

   // Adding New User into Database
    if(isset($_POST['firstname'])){
             
        $firstname = mysqli_real_escape_string($con, $_POST['firstname']);
        $lastname = mysqli_real_escape_string($con, $_POST['lastname']);
        $email = mysqli_real_escape_string($con, $_POST['email']);
        $contactno = mysqli_real_escape_string($con, $_POST['contactno']);  
        $gender = mysqli_real_escape_string($con, $_POST['gender']);
        $password = mysqli_real_escape_string($con, $_POST['password']);
        $confirmPassword = mysqli_real_escape_string($con, $_POST['conformPassword']);

    
        // profile image upload
        $profileImageName = $_FILES["profileImage"]["name"];
        $tempname = $_FILES["profileImage"]["tmp_name"];   
        $folder = "../assets/picture/profiles/".$profileImageName;
             
    
        // $re_pass = base64_encode(mysqli_real_escape_string($conn, $_POST['reg_pass']));
    
        $User_details="SELECT * FROM users_details WHERE Firstname='$firstname' OR Email='$email'";
        $result=mysqli_query($con,$User_details)or die("can't fetch");
        $num=mysqli_num_rows($result);
    
      
        $sendData = array();
        if ($firstname == "admin") {
            $error="Invalid Username (You cannot use the username as admin!)";
            $sendData = array(
                "msg"=>"",
                "error"=>$error
            );
            echo json_encode($sendData);
        } else if ($num>0) {
            $error="Username or email id is already taken!";
            $sendData = array(
                "msg"=>"",
                "error"=>$error
            );
            echo json_encode($sendData);
        } else {
    
            $number = preg_match('@[0-9]@', $password);
            $uppercase = preg_match('@[A-Z]@', $password);
            $lowercase = preg_match('@[a-z]@', $password);
            $specialChars = preg_match('@[^\w]@', $password);
           
            // if(strlen($password) < 3 || !$number || !$uppercase || !$lowercase || !$specialChars) {
    
             //password validation 
    
              if(strlen($password) < 3) {
                    $error = "Password must be at least 3 characters in length and must contain at least one number, one upper case letter, one lower case letter and one special character.";
                    $sendData = array(
                        "msg"=>"",
                        "error"=>$error
                    );
                    echo json_encode($sendData);
              }else{
    
                  if($password!=$confirmPassword){
                        $error = "Invalid password and confirm password !";
                        $sendData = array(
                            "msg"=>"",
                            "error"=>$error
                        );
                        echo json_encode($sendData);
                  }else{
    
                        // query validation
                        $insert="insert into users_details (FirstName,LastName,Email,Password,ContactNo,Gender,ProfileImage) values('$firstname','$lastname','$email','$password','$contactno','$gender','$profileImageName') " ;

    
                        if(mysqli_query($con,$insert))
                        {
                            if(!move_uploaded_file($tempname, $folder)){
                            //if(false){
                                $error ="Error in Registration ...! Try after sometime";
                                $sendData = array(
                                    "msg"=>"",
                                    "error"=>$error
                                );
                                echo json_encode($sendData);
                            }else{
                              $message = "User Added";
                              // message("user.php","User Added");
                              $sendData = array(
                                "msg"=>$message,
                                "error"=>""
                            );
                            echo json_encode($sendData);
                            }
                        }
                        else{
                              $error ="Error in Registration ...! Try after sometime";
                              $sendData = array(
                                "msg"=>"",
                                "error"=>$error
                            );
                            echo json_encode($sendData);
    
                      }
    
                  }
              }
            
       }

    }
    
// delete of user account
if(isset($_POST['deleteUser'])){
    $user_id = mysqli_real_escape_string($con, $_POST['userId']);
    $query_deleteUser = "Delete from users_details where UserId = '$user_id' ";
    $sendData = array();
    if(mysqli_query($con,$query_deleteUser)){
        $sendData = array(
            "msg"=>"User is Deleted",
            "error"=>""
        );
        echo json_encode($sendData);
    }else{
        $error = "User Has a booking";
        $sendData = array(
            "msg"=>"",
            "error"=>$error
        );
        echo json_encode($sendData);
    }
}

//update - getting the selected user details
if(isset($_POST['userUpdateId'])){
    $userID = $_POST['userUpdateId'];
   
    $query_selectUser = "select * from users_details where UserId = '$userID' ";
    $single_user = mysqli_query($con,$query_selectUser);
    $num_of_rows = mysqli_num_rows($single_user);
    $response = array();
    if($num_of_rows<1){
        $response['status'] = 200;
        $response['message'] = "invalid user id";
    }else{
        while($row = mysqli_fetch_assoc($single_user)){
            $response = $row;
        }
    }
    echo json_encode($response);
}


//update the datals of user table

if(isset($_POST['updateUserID'])){
             
    $user_id = mysqli_real_escape_string($con, $_POST['updateUserID']);
    $firstname = mysqli_real_escape_string($con, $_POST['firstName']);
    $lastname = mysqli_real_escape_string($con, $_POST['lastname']);
    $email = mysqli_real_escape_string($con, $_POST['email']);
    $contactno = mysqli_real_escape_string($con, $_POST['contactno']);  
    $gender = mysqli_real_escape_string($con, $_POST['gender']);
    $status = mysqli_real_escape_string($con, $_POST['status']);
   
    // profile image upload
    $profileImageName = $_FILES["profileImage"]["name"];
    $tempname = $_FILES["profileImage"]["tmp_name"];   
    $folder = "../assets/picture/profiles/".$profileImageName;
         

    // $re_pass = base64_encode(mysqli_real_escape_string($conn, $_POST['reg_pass']));

    $User_details="SELECT * FROM users_details WHERE (Firstname='$firstname' OR Email='$email') AND UserId <> ' $user_id '";
    $result=mysqli_query($con,$User_details)or die("can't fetch");
    $num=mysqli_num_rows($result);

  
    $sendData = array();
   
    
   if ($firstname == "admin") {
        $error="Invalid Username (You cannot use the username as admin!)";
        $sendData = array(
            "msg"=>"",
            "error"=>$error
        );
        echo json_encode($sendData);
    } 
   else if ($num>0) {
        $error="Username or email id is already taken!";
        $sendData = array(
            "msg"=>"",
            "error"=>$error
        );
        echo json_encode($sendData);
    } else {

                    // query validation
                    $update="UPDATE users_details SET  FirstName='$firstname', LastName ='$lastname',Email='$email',ContactNo='$contactno',Gender='$gender',Status='$status',ProfileImage='$profileImageName' where UserId = '$user_id'" ;


                    if(mysqli_query($con,$update))
                    {
                        if(!move_uploaded_file($tempname, $folder)){
                        //if(false){
                            $error ="Error in Updation ...! Try after sometime";
                            $sendData = array(
                                "msg"=>"",
                                "error"=>$error
                            );
                            echo json_encode($sendData);
                        }else{
                          $message = "User details updated";
                          // message("user.php","User Added");
                          $sendData = array(
                            "msg"=>$message,
                            "error"=>""
                        );
                        echo json_encode($sendData);
                        }
                    }
                    else{
                          $error ="Error in Updation ...! Try after sometime";
                          $sendData = array(
                            "msg"=>"",
                            "error"=>$error
                        );
                        echo json_encode($sendData);

                  }

             
        
   }

}

// ------------------------------------- Gallery Actions -----------------------------------------------------

if(isset($_FILES['galleryImage'])){
 
        $profileImageName = $_FILES["galleryImage"]["name"];
        $tempname = $_FILES["galleryImage"]["tmp_name"];   
        $folder = "../assets/picture/gallery/".$profileImageName;
        $sendData = array();

       if(!move_uploaded_file($tempname, $folder)){
        
            $error ="Error in Adding ...! Try after sometime";
            $sendData = array(
                "msg"=>"",
                "error"=>$error
            );
           
        }
        else{

          $message = "Image is Added";
            $sendData = array(
                "msg"=>$message,
                "error"=>""
            );
       
        }

        echo json_encode($sendData);
}


if(isset($_POST['deleteImage'])){

$filename = $_POST['Url'];
$sendData = array();
if (unlink($filename)) {
	$sendData = array(
        "msg"=>"Image is Deleted",
        "error"=>""
    );
} else {
    $sendData = array(
        "msg"=>"",
        "error"=>"Error in Deleting Images.."
    );
}
echo json_encode($sendData);
}

// --------------------------------------- Room Type Action ----------------------------------------

//add new type of room
if(isset($_POST['roomTypeName'])){

    $roomType = ucfirst($_POST['roomTypeName']);
    $roomCost =  $_POST['roomCost'];
    $desc =  $_POST['description'];
    $fileName = $_FILES['roomTypeImage']['name'];
    $tempname = $_FILES['roomTypeImage']['tmp_name'];
    $folder = "../assets/picture/RoomType/".$fileName;

    $sql_roomType = "select * from room_type where roomType like '$roomType'";
    $result_room = mysqli_query($con,$sql_roomType);
    $num_rooms = mysqli_num_rows($result_room);

    $sendData = array();
    if($num_rooms>=1){
        $sendData = array(
            "msg" => "",
            "error"  => "Room Type is already Exist"
        );
    }
    else{
       // Asegurarse de que el tipo de habitación tenga estado activo
       $insert_query = "insert into room_type(RoomType,RoomImage,Cost,Description,Status) values('$roomType','$fileName','$roomCost','$desc','active')";
       
       if(mysqli_query($con,$insert_query)){
            
            // Obtenemos el ID del tipo de habitación recién creado
            $newRoomTypeId = mysqli_insert_id($con);
            
            // Crear automáticamente una habitación de este tipo
            $roomNumber = strtoupper(substr($roomType, 0, 2)) . "-" . rand(100, 999);
            $insert_room = "INSERT INTO room_list(RoomTypeId, RoomNumber, Status, Booking_status) 
                         VALUES('$newRoomTypeId', '$roomNumber', 'active', 'Available')";
            
            // Ejecutar la inserción de la habitación
            mysqli_query($con, $insert_room);

            if(!move_uploaded_file($tempname, $folder)){
            
                $error ="Error in Adding ...! Try after sometime";
                $sendData = array(
                    "msg"=>"",
                    "error"=>$error
                );
               
            }
            else{
        
              $message = "Room Type is Added with a Room Number: " . $roomNumber;
                $sendData = array(
                    "msg"=>$message,
                    "error"=>""
                );
           
            }
        }
        else{

            $error ="Error in Adding ...! Try after sometime";
            $sendData = array(
                "msg"=>"",
                "error"=>$error
            );

        }
    }
    echo json_encode($sendData);
}

// deleting the room type

if(isset($_POST['deleteRoomType'])){
    $type_id = $_POST['typeId'];
    
    // Iniciar transacción
    mysqli_begin_transaction($con);
    
    try {
        // 1. Eliminar los pagos asociados a las reservas de todas las habitaciones de este tipo
        $query_delete_payments = "DELETE FROM room_payment WHERE BookingId IN (
            SELECT BookingId FROM room_booking WHERE RoomId IN (
                SELECT RoomId FROM room_list WHERE RoomTypeId = '$type_id'
            )
        )";
        mysqli_query($con, $query_delete_payments);
        
        // 2. Eliminar las reservas de todas las habitaciones de este tipo
        $query_delete_bookings = "DELETE FROM room_booking WHERE RoomId IN (
            SELECT RoomId FROM room_list WHERE RoomTypeId = '$type_id'
        )";
        mysqli_query($con, $query_delete_bookings);
        
        // 3. Eliminar todas las habitaciones de este tipo
        $query_delete_rooms = "DELETE FROM room_list WHERE RoomTypeId = '$type_id'";
        mysqli_query($con, $query_delete_rooms);
        
        // 4. Eliminar el tipo de habitación
        $query_delete_type = "DELETE FROM room_type WHERE RoomTypeId = '$type_id'";
        mysqli_query($con, $query_delete_type);
        
        // Si todo salió bien, confirmar la transacción
        mysqli_commit($con);
        
        $sendData = array(
            "msg"=>"Tipo de habitación y todos sus datos asociados han sido eliminados exitosamente",
            "error"=>""
        );
    } catch (Exception $e) {
        // Si algo salió mal, revertir la transacción
        mysqli_rollback($con);
        $sendData = array(
            "msg"=>"",
            "error"=>"Error al eliminar: " . $e->getMessage()
        );
    }
    
    echo json_encode($sendData);
}


//update - getting the selected room type details

if(isset($_POST['roomTypeUpdateId'])){
    $roomTypeUpdateId = $_POST['roomTypeUpdateId'];
   
    $query_type = "select * from room_type where RoomTypeId = '$roomTypeUpdateId' ";
    $single_type = mysqli_query($con,$query_type);
    $num_of_rows = mysqli_num_rows($single_type);
    $response = array();
    if($num_of_rows<1){
        $response['status'] = 200;
        $response['message'] = "invalid user id";
    }else{
        while($row = mysqli_fetch_assoc($single_type)){
            $response = $row;
        }
    }
    echo json_encode($response);
}



//update the datails of the room type

if(isset($_POST['roomTypeId'])){
             
    $updateId = $_POST['roomTypeId'];
    $roomType = ucfirst($_POST['editRoomTypeName']);
    $roomCost =  $_POST['editRoomCost'];
    $desc =  $_POST['editDescription'];
    $status =  $_POST['editStatus'];
    
    // Verificar si se subió una nueva imagen
    if(!empty($_FILES['editRoomTypeImage']['name'])) {
        $fileName = $_FILES['editRoomTypeImage']['name'];
        $tempname = $_FILES['editRoomTypeImage']['tmp_name'];
        $folder = "../assets/picture/RoomType/".$fileName;
        $imageUpdated = true;
    } else {
        // Si no hay una nueva imagen, mantener la actual
        $query_current = "SELECT RoomImage FROM room_type WHERE RoomTypeId = '$updateId'";
        $result_current = mysqli_query($con, $query_current);
        $row = mysqli_fetch_assoc($result_current);
        $fileName = $row['RoomImage'];
        $imageUpdated = false;
    }
    
    $sql_roomType = "select * from room_type where roomTypeId = '$updateId'";
    $result_room = mysqli_query($con,$sql_roomType);
    $num_rooms = mysqli_num_rows($result_room);
    
    
    $sendData = array();
    if ($num_rooms==0) {
        $error="Room Type is Not avaiable!";
        $sendData = array(
            "msg"=>"",
            "error"=>$error
        );
        echo json_encode($sendData);
    } else {
        
        // query validation
        $sql_duplicate = "select * from room_type where roomType like '$roomType' AND RoomTypeId <> '$updateId' ";
        $result_dup = mysqli_query($con,$sql_duplicate);
        $nums = mysqli_num_rows($result_dup);

        // already available room type 
        if($nums>0){
            $error ="Room Type Name is Already Available";
            $sendData = array(
                "msg"=>"",
                "error"=>$error
            );
            echo json_encode($sendData);
        }
        else{

            $update="UPDATE room_type SET RoomType='$roomType', RoomImage ='$fileName', Description='$desc', Status='$status', Cost='$roomCost' WHERE RoomTypeId = '$updateId'" ;
        
            if(mysqli_query($con,$update))
            {
                // Si se actualizó la imagen, intentar subir el archivo
                if($imageUpdated) {
                    if(!move_uploaded_file($tempname, $folder)){
                        $error ="Error al subir la nueva imagen. Los demás datos se actualizaron correctamente.";
                        $sendData = array(
                            "msg"=>"",
                            "error"=>$error
                        );
                        echo json_encode($sendData);
                        return;
                    }
                }
                
                $message = "Detalles del tipo de habitación actualizados correctamente";
                $sendData = array(
                    "msg"=>$message,
                    "error"=>""
                );
                echo json_encode($sendData);
            }
            else {
                $error ="Error en la actualización. Intente nuevamente más tarde.";
                $sendData = array(
                    "msg"=>"",
                    "error"=>$error
                );
                echo json_encode($sendData);
            }
        }
    }
}



// ---------------------------------------------Room Actions ---------------------------------------------
if(isset($_POST['roomNumber'])){
    $roomType = $_POST['roomType'];
    $roomNumber =  $_POST['roomNumber'];
    $validation = "select * from room_list where RoomNumber = '$roomNumber' ";
    $validation_result = mysqli_query($con,$validation);
    $validation_num = mysqli_num_rows($validation_result);
    $sendData = array();
    
if($validation_num>=1){
    $error ="The room number is already exists";
    $sendData = array(
        "msg"=>"",
        "error"=>$error
    );
}
else{
    $insert_query = "insert into room_list(RoomTypeId,RoomNumber) values('$roomType','$roomNumber')";
    
    if(mysqli_query($con,$insert_query)){
        
        $message = "Room is Added";
        $sendData = array(
            "msg"=>$message,
            "error"=>""
        );
   
        
    }
    
    else{

        $error ="Error in Adding ...! Try after sometime";
     $sendData = array(
         "msg"=>"",
         "error"=>$error
        );

    }
}
    

echo json_encode($sendData);
}

if(isset($_POST['deleteRoom'])){
    $roomId = $_POST['roomId'];
    
    // Iniciar transacción
    mysqli_begin_transaction($con);
    
    try {
        // 1. Eliminar los pagos asociados a las reservas
        $query_delete_payments = "DELETE FROM room_payment WHERE BookingId IN (
            SELECT BookingId FROM room_booking WHERE RoomId = '$roomId'
        )";
        mysqli_query($con, $query_delete_payments);
        
        // 2. Eliminar las reservas asociadas
        $query_delete_bookings = "DELETE FROM room_booking WHERE RoomId = '$roomId'";
        mysqli_query($con, $query_delete_bookings);
        
        // 3. Eliminar la habitación
        $query_delete_room = "DELETE FROM room_list WHERE RoomId = '$roomId'";
        mysqli_query($con, $query_delete_room);
        
        // Si todo salió bien, confirmar la transacción
        mysqli_commit($con);
        
        $sendData = array(
            "msg"=>"La habitación y todas sus reservas han sido eliminadas exitosamente",
            "error"=>""
        );
    } catch (Exception $e) {
        // Si algo salió mal, revertir la transacción
        mysqli_rollback($con);
        $sendData = array(
            "msg"=>"",
            "error"=>"Error al eliminar: " . $e->getMessage()
        );
    }
    
    echo json_encode($sendData);
}


//update - getting the selected room  details

if(isset($_POST['roomUpdateId'])){
    $roomUpdateId = $_POST['roomUpdateId'];
   
    $query_type =  "SELECT rt.RoomTypeId,rt.RoomType,rl.RoomNumber,rl.Status FROM room_list rl  inner join room_type rt on  rl.RoomTypeId = rt.RoomTypeId WHERE rl.RoomId like '$roomUpdateId' ";
    $single_type = mysqli_query($con,$query_type);
    $num_of_rows = mysqli_num_rows($single_type);
    $response = array();
    if($num_of_rows<1){
        $response['status'] = 200;
        $response['message'] = "invalid user id";
    }else{
        while($row = mysqli_fetch_assoc($single_type)){
            $response = $row;
        }
    }
    echo json_encode($response);
}




//update the datails of room table

if(isset($_POST['updateRoomId'])){
             
    $updateRoomId = $_POST['updateRoomId'];
    $editRoomType = $_POST['editRoomType'];
    $editRoomNumber = $_POST['editRoomNumber'];
    $editStatus =  $_POST['editStatus'];
   
  
    
    $validation = "select * from room_list where RoomNumber = '$editRoomNumber' AND RoomId <> '$updateRoomId'";
    $validation_result = mysqli_query($con,$validation);
    $validation_num = mysqli_num_rows($validation_result);
    
    $sendData = array();

    if($validation_num>=1){
    $error ="The room number is already exists";
    $sendData = array(
    "msg"=>"",
    "error"=>$error
    );

    } else {
        
        // query validation
        $update="UPDATE room_list SET  RoomTypeId='$editRoomType',RoomNumber='$editRoomNumber',Status='$editStatus' where roomId = '$updateRoomId'" ;
        
        
        if(mysqli_query($con,$update))
        {
                       
                            $message = "Room details updated";
                          // message("user.php","User Added");
                          $sendData = array(
                              "msg"=>$message,
                            "error"=>""
                        );
                     
                    
            }
            else{
                $error ="Error in Updation ...! Try after sometime update";
                $sendData = array(
                    "msg"=>"",
                    "error"=>$error
                );
                
            }

                    
                    
        }
        echo json_encode($sendData);

        
    }

    // -------------------------------------------- Booking Actions ------------------------------------- 
    //update - getting the selected room  details

if(isset($_POST['bookingDetail'])){
    $ID = $_POST['bookingId'];
   
    $selectBooking =   "SELECT rm.*,rt.RoomType,rl.RoomNumber,us.FirstName,us.ContactNo FROM room_booking rm 
                        inner join room_list rl on rl.RoomId = rm.RoomId
                        inner join room_type rt on rl.RoomTypeId = rt.RoomTypeId 
                        inner join users_details us on us.Userid = rm.User_id 
                        where rm.BookingId = $ID ";
                    

    $single_booking = mysqli_query($con,$selectBooking);
    $num_of_rows = mysqli_num_rows($single_booking);
    $response = array();
    if($num_of_rows<1){
        $response['status'] = 200;
        $response['message'] = "invalid booking id";
    }else{
        while($row = mysqli_fetch_assoc($single_booking)){
            $response = $row;
        }
    }
    echo json_encode($response);
}

// -------------------------------------- Event Type Actions ---------------------------------

//add new type of Event
if(isset($_POST['eventTypeName'])){

    $eventType =ucfirst($_POST['eventTypeName']);
    $eventCost =  $_POST['eventCost'];
    $desc =  $_POST['description'];
    $fileName = $_FILES['eventTypeImage']['name'];
    $tempname = $_FILES['eventTypeImage']['tmp_name'];
    $folder = "../assets/picture/EventType/".$fileName;

    $sql_eventType = "select * from event_type where eventType like '$eventType'";
    $result_room = mysqli_query($con,$sql_eventType);
    $num_events = mysqli_num_rows($result_room);

    $sendData = array();
    if($num_events>=1){
        $sendData = array(
            "msg" => "",
            "error"  => "Este tipo de evento ya existe"
        );
    }
    else{
       // Asegurarse de que el tipo de salón tenga estado activo
       $insert_query = "insert into event_type(EventType,EventImage,Cost,Description,Status) values('$eventType','$fileName','$eventCost','$desc','active')";
       
       if(mysqli_query($con,$insert_query)){
            
            // Obtenemos el ID del tipo de salón recién creado
            $newEventTypeId = mysqli_insert_id($con);
            
            // Crear automáticamente un salón de este tipo
            $hallNumber = strtoupper(substr($eventType, 0, 2)) . "-" . rand(100, 999);
            $insert_hall = "INSERT INTO event_list(EventTypeId, HallNumber, Status, Booking_status) 
                         VALUES('$newEventTypeId', '$hallNumber', 'active', 'Available')";
            
            // Ejecutar la inserción del salón
            mysqli_query($con, $insert_hall);

            if(!move_uploaded_file($tempname, $folder)){
            
                $error ="Error al añadir... Intente más tarde";
                $sendData = array(
                    "msg"=>"",
                    "error"=>$error
                );
               
            }
            else{
    
              $message = "Tipo de salón añadido correctamente con el salón: " . $hallNumber;
                $sendData = array(
                    "msg"=>$message,
                    "error"=>""
                );
           
            }
       }
       else{

        $error ="Error al añadir... Intente más tarde";
        $sendData = array(
            "msg"=>"",
            "error"=>$error
        );

       }
    }
    echo json_encode($sendData);
}


//update - getting the selected event type details

if(isset($_POST['eventTypeUpdateId'])){
    $eventTypeUpdateId = $_POST['eventTypeUpdateId'];
   
    $query_type = "select * from event_type where EventTypeId = '$eventTypeUpdateId' ";
    $single_type = mysqli_query($con,$query_type);
    $num_of_rows = mysqli_num_rows($single_type);
    $response = array();
    if($num_of_rows<1){
        $response['status'] = 200;
        $response['message'] = "ID de usuario inválido";
    }else{
        while($row = mysqli_fetch_assoc($single_type)){
            $response = $row;
        }
    }
    echo json_encode($response);
}

  //update the datals of event type table

  if(isset($_POST['editEventTypeName'])){
             
    $updateId = $_POST['eventTypeId'];
    $Type = ucfirst($_POST['editEventTypeName']);
    $Cost =  $_POST['editEventCost'];
    $desc =  $_POST['editDescription'];
    $status =  $_POST['editStatus'];
    
    // Verificar si se está utilizando la imagen actual
    $useCurrentImage = isset($_POST['useCurrentImage']) && $_POST['useCurrentImage'] === 'true';
    
    // Si no se está utilizando la imagen actual, obtenemos la nueva
    if (!$useCurrentImage && isset($_FILES['editEventTypeImage']) && $_FILES['editEventTypeImage']['size'] > 0) {
        $fileName = $_FILES['editEventTypeImage']['name'];
        $tempname = $_FILES['editEventTypeImage']['tmp_name'];
        $folder = "../assets/picture/EventType/".$fileName;
        $updateImage = true;
    } else {
        // Obtenemos la imagen actual de la base de datos
        $query_current_image = "SELECT EventImage FROM event_type WHERE EventTypeId = '$updateId'";
        $result_image = mysqli_query($con, $query_current_image);
        $row_image = mysqli_fetch_assoc($result_image);
        $fileName = $row_image['EventImage'];
        $updateImage = false;
    }
    
    $sql_Type = "select * from event_type where EventtypeId = '$updateId'";
    $result = mysqli_query($con,$sql_Type);
    $num_events = mysqli_num_rows($result);
    
    
    $sendData = array();
    if ($num_events==0) {
        $error="¡Este tipo de evento no está disponible!";
        $sendData = array(
            "msg"=>"",
            "error"=>$error
        );
        echo json_encode($sendData);
    } else {
        

        $sql_eventType = "select * from event_type where eventType like '$Type' AND EventTypeId <> '$updateId'";
        $result_dup = mysqli_query($con,$sql_eventType);
        $nums = mysqli_num_rows($result_dup);

        if($nums>0){
            $error ="¡Este tipo de evento ya existe!";
            $sendData = array(
                "msg"=>"",
                "error"=>$error
            );
            echo json_encode($sendData);
        }
        else{

        // query validation
        $update="UPDATE event_type SET EventType='$Type', EventImage ='$fileName', Description='$desc', Status='$status', Cost='$Cost' WHERE EventTypeId = '$updateId'";
        
        if(mysqli_query($con, $update)) {
            // Solo intentar mover el archivo si se cargó uno nuevo
            if($updateImage) {
                if(!move_uploaded_file($tempname, $folder)) {
                    $error = "Error al actualizar la imagen... Intente más tarde";
                    $sendData = array(
                        "msg" => "",
                        "error" => $error
                    );
                    echo json_encode($sendData);
                } else {
                    $message = "Detalles del tipo de evento actualizados correctamente";
                    $sendData = array(
                        "msg" => $message,
                        "error" => ""
                    );
                    echo json_encode($sendData);
                }
            } else {
                // Si no se actualizó la imagen, solo informamos éxito
                $message = "Detalles del tipo de evento actualizados correctamente";
                $sendData = array(
                    "msg" => $message,
                    "error" => ""
                );
                echo json_encode($sendData);
            }
        } else {
            $error = "Error al actualizar... Intente más tarde";
            $sendData = array(
                "msg" => "",
                "error" => $error
            );
            echo json_encode($sendData);
        }     
                }
                
        }


    }


    
if(isset($_POST['deleteEventType'])){
    $type_id = $_POST['typeId'];
    
    // Iniciar transacción
    mysqli_begin_transaction($con);
    
    try {
        // 1. Eliminar los pagos asociados a las reservas
        $query_delete_payments = "DELETE FROM event_payment WHERE BookingId IN (
            SELECT BookingId FROM event_booking WHERE EventId IN (
                SELECT EventId FROM event_list WHERE EventTypeId = '$type_id'
            )
        )";
        mysqli_query($con, $query_delete_payments);
        
        // 2. Eliminar las reservas de eventos asociadas
        $query_delete_bookings = "DELETE FROM event_booking WHERE EventId IN (
            SELECT EventId FROM event_list WHERE EventTypeId = '$type_id'
        )";
        mysqli_query($con, $query_delete_bookings);
        
        // 3. Eliminar los eventos asociados
        $query_delete_events = "DELETE FROM event_list WHERE EventTypeId = '$type_id'";
        mysqli_query($con, $query_delete_events);
        
        // 4. Eliminar el tipo de evento
        $query_delete_type = "DELETE FROM event_type WHERE EventTypeId = '$type_id'";
        mysqli_query($con, $query_delete_type);
        
        // Si todo salió bien, confirmar la transacción
        mysqli_commit($con);
        
        $sendData = array(
            "msg"=>"Tipo de salón y todos sus datos asociados han sido eliminados exitosamente",
            "error"=>""
        );
    } catch (Exception $e) {
        // Si algo salió mal, revertir la transacción
        mysqli_rollback($con);
        $sendData = array(
            "msg"=>"",
            "error"=>"Error al eliminar: " . $e->getMessage()
        );
    }
    
    echo json_encode($sendData);
}
        



// ---------------------------------------------Event Actions ---------------------------------------------
if(isset($_POST['hallNumber'])){
    $eventType = $_POST['eventType'];
    $hallNumber =  $_POST['hallNumber'];
    $validation = "select * from event_list where hallNumber = '$hallNumber' ";
    $validation_result = mysqli_query($con,$validation);
    $validation_num = mysqli_num_rows($validation_result);
    $sendData = array();
    
if($validation_num>=1){
    $error ="El número de salón ya existe";
    $sendData = array(
        "msg"=>"",
        "error"=>$error
    );
}
else{
    $insert_query = "insert into event_list(EventTypeId, HallNumber, Status, Booking_status) values('$eventType', '$hallNumber', 'active', 'Available')";
    
    if(mysqli_query($con,$insert_query)){
        
        $message = "Salón añadido exitosamente";
        $sendData = array(
            "msg"=>$message,
            "error"=>""
        );
   
        
    }
    
    else{

        $error ="Error al añadir... Intente más tarde";
     $sendData = array(
         "msg"=>"",
         "error"=>$error
        );

    }
}
    

echo json_encode($sendData);
}

// delete the event from the data base

if(isset($_POST['deleteEvent'])){
    $eventId = $_POST['eventId'];
    
    // Iniciar transacción
    mysqli_begin_transaction($con);
    
    try {
        // 1. Eliminar los pagos asociados a las reservas
        $query_delete_payments = "DELETE FROM event_payment WHERE BookingId IN (
            SELECT BookingId FROM event_booking WHERE EventId = '$eventId'
        )";
        mysqli_query($con, $query_delete_payments);
        
        // 2. Eliminar las reservas asociadas
        $query_delete_bookings = "DELETE FROM event_booking WHERE EventId = '$eventId'";
        mysqli_query($con, $query_delete_bookings);
        
        // 3. Eliminar el evento
        $query_delete_event = "DELETE FROM event_list WHERE EventId = '$eventId'";
        mysqli_query($con, $query_delete_event);
        
        // Si todo salió bien, confirmar la transacción
        mysqli_commit($con);
        
        $sendData = array(
            "msg"=>"El salón y todas sus reservas han sido eliminados exitosamente",
            "error"=>""
        );
    } catch (Exception $e) {
        // Si algo salió mal, revertir la transacción
        mysqli_rollback($con);
        $sendData = array(
            "msg"=>"",
            "error"=>"Error al eliminar: " . $e->getMessage()
        );
    }
    
    echo json_encode($sendData);
}


//update - getting the selected event  details

if(isset($_POST['eventUpdateId'])){
    $eventUpdateId = $_POST['eventUpdateId'];
   
    $query_type =  "SELECT et.EventTypeId,et.EventType,el.HallNumber,el.Status FROM event_list el  
                    inner join event_type et on  el.EventTypeId = et.EventTypeId
                    WHERE el.EventId like '$eventUpdateId' ";

    $single_type = mysqli_query($con,$query_type);
    $num_of_rows = mysqli_num_rows($single_type);
    $response = array();
    if($num_of_rows<1){
        $response['status'] = 200;
        $response['message'] = "invalid event id";
    }else{
        while($row = mysqli_fetch_assoc($single_type)){
            $response = $row;
        }
    }
    echo json_encode($response);
}




//update the datails of event table

if(isset($_POST['updateEventId'])){
             
    $updateEventId = $_POST['updateEventId'];
    $editEventType = $_POST['editEventType'];
    $editHallNumber = $_POST['editHallNumber'];
    $editStatus =  $_POST['editStatus'];
   
  
    
    $validation = "select * from event_list where HallNumber = '$editHallNumber' AND EventID <> '$updateEventId' ";
    $validation_result = mysqli_query($con,$validation);
    $validation_num = mysqli_num_rows($validation_result);
    
    $sendData = array();

    if($validation_num>=1){
    $error ="The Hall number is already exists";
    $sendData = array(
    "msg"=>"",
    "error"=>$error
    );

    } else {
        
        // query validation
        $update="UPDATE event_list SET  EventTypeId='$editEventType',HallNumber='$editHallNumber',Status='$editStatus' where EventId = '$updateEventId'" ;
        
        
        if(mysqli_query($con,$update))
        {
                       
                            $message = "Hall details updated";
                          // message("user.php","User Added");
                          $sendData = array(
                              "msg"=>$message,
                            "error"=>""
                        );
                     
                    
            }
            else{
                $error ="Error in Updation ...! Try after sometime update";
                $sendData = array(
                    "msg"=>"",
                    "error"=>$error
                );
                
            }

                    
                    
        }
        echo json_encode($sendData);

        
    }

        // -------------------------------------------- Event Booking Actions ------------------------------------- 
    // getting the selected Event Booking details

if(isset($_POST['eventBookingDetail'])){
    $ID = $_POST['bookingId'];
   
    $selectBooking = "SELECT em.*,et.EventType,el.HallNumber,us.FirstName,us.ContactNo FROM event_booking em 
                      inner join event_list el on el.EventId = em.EventId
                      inner join event_type et on el.EventTypeId = et.EventTypeId 
                      inner join users_details us on us.Userid = em.User_id 
                      where em.BookingId = '$ID'";



    $single_booking = mysqli_query($con,$selectBooking);
    $num_of_rows = mysqli_num_rows($single_booking);
    $response = array();
    if($num_of_rows<1){
        $response['status'] = 200;
        $response['message'] = "invalid booking id";
    }else{
        while($row = mysqli_fetch_assoc($single_booking)){
            $response = $row;
        }
    }
    echo json_encode($response);
}

// ---------------------------------------------- Contact Actions ------------------------------------

// delete of contact
if(isset($_POST['deleteContact'])){
    $id = mysqli_real_escape_string($con, $_POST['ID']);
    $query_deleteUser = "Delete from contact where ID = '$id' ";
    $sendData = array();
    if(mysqli_query($con,$query_deleteUser)){
        $sendData = array(
            "msg"=>"El mensaje ha sido eliminado",
            "error"=>""
        );
        echo json_encode($sendData);
    }else{
        $error = "Error al eliminar, inténtelo más tarde";
        $sendData = array(
            "msg"=>"",
            "error"=>$error
        );
        echo json_encode($sendData);
    }
}
// ----------------------------------- Account ---------------------------------------


//update the datals of user table

if(isset($_POST['updateAccount'])){
             
    $user_id = mysqli_real_escape_string($con, $_POST['updateAccount']);
    $lastname = mysqli_real_escape_string($con, $_POST['lastname']);
    $contactno = mysqli_real_escape_string($con, $_POST['contactno']);  
    $gender = mysqli_real_escape_string($con, $_POST['gender']);

    // profile image upload
    $profileImageName = $_FILES["profileImage"]["name"];
    $tempname = $_FILES["profileImage"]["tmp_name"];   
    $folder = "../assets/picture/profiles/".$profileImageName;
         

                    // query validation
                    $update="UPDATE users_details SET  LastName ='$lastname',ContactNo='$contactno',Gender='$gender',ProfileImage='$profileImageName' where UserId = '$user_id'" ;


                    if(mysqli_query($con,$update))
                    {
                        if(!move_uploaded_file($tempname, $folder)){
                        //if(false){
                            $error ="Error in Updation ...! Try after sometime";
                            $sendData = array(
                                "msg"=>"",
                                "error"=>$error
                            );
                            echo json_encode($sendData);
                        }else{
                          $message = "User details updated";
                          // message("user.php","User Added");
                          $sendData = array(
                            "msg"=>$message,
                            "error"=>""
                        );
                        echo json_encode($sendData);
                        }
                    }
                    else{
                          $error ="Error in Updation ...! Try after sometime";
                          $sendData = array(
                            "msg"=>"",
                            "error"=>$error
                        );
                        echo json_encode($sendData);

                  }

             
        
}

// -------------------------------- Change password -----------------------------------

if(isset($_POST["oldPassword"])){
    $old = $_POST['oldPassword'];
    $new = $_POST['newPassword'];
    $ID = $_POST['change_password'];

    $Q = "SELECT * FROM users_details Where UserId = '$ID'";
    $res = mysqli_query($con,$Q);
    $row = mysqli_fetch_assoc($res);
    $num = mysqli_num_rows($res);
  
   
    $sendData = array();
    if($num>0){

        if($old == $row['Password']){
            $Q_update = "UPDATE users_details us SET us.Password = '$new' Where UserId = '$ID'";
            $result = mysqli_query($con,$Q_update);
            $msg = "Password Changed";
            $sendData = array(
                "msg"=>$msg,
                "error"=>""
            );
        }else{
            $error ="Oops! Wrong Old Password";
            $sendData = array(
              "msg"=>"",
              "error"=>$error
          );
        }
    }else{

        $error ="Invalid User ID ";
        $sendData = array(
          "msg"=>"",
          "error"=>$error
      );
    }
 echo json_encode($sendData);
}

// -------------------------------- General Setting-----------------------------------------

if(isset($_POST["generalSettings"])){
   

    $Q = "SELECT * FROM general_settings ";
    $res = mysqli_query($con,$Q);
    $row = mysqli_fetch_assoc($res);

    $sendData =array();
    if($row){
        $sendData = $row;
    }else{
        $error ="Invalid User ID ";
        $sendData = array(
          "msg"=>"",
          "error"=>$error
      );
    }

    echo json_encode($sendData);
}

if(isset($_POST['companyName'])){
    $companyName = $_POST['companyName'];
    $address1 = $_POST['address1'];
    $address2 = $_POST['address2'];
    $City = $_POST['city'];
    $State = $_POST['state'];
    $Country = $_POST['country'];
    $zip = $_POST['zip'];
    $description = $_POST['description'];
    $email = $_POST['email'];
    $phoneNumber = strval($_POST['phoneNumber']);
    $teleNumber = strval($_POST['teleNumber']);
    $gs_id = $_POST['gs_id'];

   

    $Q = "SELECT * FROM general_settings Where ID = '$gs_id'";
    $res = mysqli_query($con,$Q);
    $row = mysqli_fetch_assoc($res);
    $num = mysqli_num_rows($res);
  
   
    $sendData = array();
    if($num>0){

        $Q_update = "UPDATE general_settings SET Name = '$companyName',Address_line1 = '$address1',Address_line2 = '$address2',
                     City = '$City', State = '$State', Country = '$Country', Zip_code = '$zip',Description = '$description',
                     Email = '$email',Phone_number = '$phoneNumber', Telephone_Number = '$teleNumber'
                     Where ID = '$gs_id'";
      
        if(mysqli_query($con,$Q_update)){
            $msg = "Company Details has been saved";
            $sendData = array(
                "msg"=>$msg,
                "error"=>""
            );
        }else{
            $error ="Oops! Error in Updation";
            $sendData = array(
              "msg"=>"",
              "error"=>$error
          );
        }
    }else{

        $error ="Invalid ID ";
        $sendData = array(
          "msg"=>"",
          "error"=>$error
      );
    }
 echo json_encode($sendData);

}
  
?>
User / IP	: 216.73.216.159
Host / Server	: 45.84.207.204 / aircan.me
System	: Linux lt-bnk-web1726.main-hosting.eu 5.14.0-611.36.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Mar 3 11:23:52 EST 2026 x86_64