Update: 2026-07-12 05:40:28

2026-07-12 05:40:28 +03:00
parent 1fa517acc9
commit 24fb56f08f
75 changed files with 5051 additions and 9 deletions
@@ -0,0 +1,66 @@
+<?php
+// transit/enrollment/activate.php — الراكب يفعّل عضويته بالرقم الجامعي
+
+require_once __DIR__ . '/../../transit/connect_app.php';
+
+if ($transit_user_role !== 'passenger') jsonError('Only passengers can enroll', 403);
+
+requireTransitFields(['org_id', 'student_id']);
+
+$orgId     = filterRequest('org_id', 'int');
+$studentId = trim(filterRequest('student_id'));
+
+$chkOrg = $transit_con->prepare(
+    "SELECT id, name_ar, contract_status FROM transit_orgs WHERE id=? LIMIT 1"
+);
+$chkOrg->execute([$orgId]);
+$org = $chkOrg->fetch();
+if (!$org) jsonError('Organization not found', 404);
+if ($org['contract_status'] === 'terminated') jsonError('Organization account inactive', 403);
+
+$chkEnroll = $transit_con->prepare(
+    "SELECT id, status FROM transit_enrollments WHERE org_id=? AND passenger_id=? LIMIT 1"
+);
+$chkEnroll->execute([$orgId, $transit_user_id]);
+$existing = $chkEnroll->fetch();
+if ($existing && in_array($existing['status'], ['active', 'pending'])) {
+    jsonError('Enrollment already exists', 409);
+}
+
+$encryptedId = $encryptionHelper->encryptData($studentId);
+
+// مطابقة الكشف: هل الرقم موجود في كشف مستورد بدون passenger_id؟
+$stRoster = $transit_con->prepare(
+    "SELECT id, member_name FROM transit_enrollments
+     WHERE org_id=? AND student_id=? AND passenger_id IS NULL LIMIT 1"
+);
+$stRoster->execute([$orgId, $encryptedId]);
+$rosterRow = $stRoster->fetch();
+
+if ($rosterRow) {
+    $transit_con->prepare(
+        "UPDATE transit_enrollments
+         SET passenger_id=?, status='active', verified_at=NOW(), verify_method='roster_phone_match'
+         WHERE id=?"
+    )->execute([$transit_user_id, $rosterRow['id']]);
+
+    jsonSuccess([
+        'enrollment_id' => (int)$rosterRow['id'],
+        'org_name'      => $org['name_ar'],
+        'status'        => 'active',
+        'verify_method' => 'roster_phone_match',
+    ], 'تم التحقق من عضويتك بنجاح!');
+}
+
+// طلب يدوي ينتظر موافقة المشرف
+$transit_con->prepare(
+    "INSERT INTO transit_enrollments
+     (org_id, passenger_id, student_id, verify_method, status)
+     VALUES (?,?,?,'manual_admin','pending')"
+)->execute([$orgId, $transit_user_id, $encryptedId]);
+
+jsonSuccess([
+    'enrollment_id' => (int)$transit_con->lastInsertId(),
+    'org_name'      => $org['name_ar'],
+    'status'        => 'pending',
+], 'طلبك قيد المراجعة. سيتم إشعارك عند التفعيل.');
@@ -0,0 +1,39 @@
+<?php
+// transit/enrollment/approve.php — المشرف يوافق على طلب عضوية أو يرفضه
+
+require_once __DIR__ . '/../../transit/connect_admin.php';
+
+requireTransitFields(['enrollment_id', 'action']);
+
+$enrollId  = filterRequest('enrollment_id', 'int');
+$action    = filterRequest('action');
+$expiresAt = filterRequest('expires_at');
+
+if (!in_array($action, ['approve', 'reject'])) jsonError('Invalid action. Use: approve or reject', 400);
+
+$st = $transit_con->prepare(
+    "SELECT id, passenger_id, status FROM transit_enrollments WHERE id=? AND org_id=? LIMIT 1"
+);
+$st->execute([$enrollId, $transit_org_id]);
+$enroll = $st->fetch();
+
+if (!$enroll) jsonError('Enrollment not found', 404);
+if ($enroll['status'] !== 'pending') jsonError('Enrollment is not pending', 409);
+
+$newStatus = ($action === 'approve') ? 'active' : 'suspended';
+$transit_con->prepare(
+    "UPDATE transit_enrollments
+     SET status=?, verified_at=NOW(), verify_method='manual_admin', expires_at=?
+     WHERE id=?"
+)->execute([$newStatus, $expiresAt, $enrollId]);
+
+if ($action === 'approve' && $enroll['passenger_id']) {
+    transitSendTopicNotification(
+        'passenger_' . $enroll['passenger_id'],
+        'تم تفعيل عضويتك',
+        'يمكنك الآن متابعة باصات جامعتك عبر مواصلاتي',
+        ['type' => 'transit_enrollment_approved']
+    );
+}
+
+jsonSuccess(['enrollment_id' => $enrollId, 'status' => $newStatus]);
@@ -0,0 +1,79 @@
+<?php
+// transit/enrollment/import_roster.php — المشرف يرفع كشف الطلاب (CSV)
+// POST: file (CSV: student_id, name), semester?, notes?
+
+require_once __DIR__ . '/../../transit/connect_admin.php';
+
+if (!isset($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK) {
+    jsonError('No valid file uploaded', 400);
+}
+
+$ext = strtolower(pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION));
+if (!in_array($ext, ['csv', 'txt'])) jsonError('Only CSV files are supported', 400);
+
+$semester = filterRequest('semester') ?: date('Y') . '-S1';
+$notes    = filterRequest('notes');
+
+$rows = [];
+if (($handle = fopen($_FILES['file']['tmp_name'], 'r')) !== false) {
+    $headers = null;
+    while (($line = fgetcsv($handle, 0, ',')) !== false) {
+        if ($headers === null) { $headers = array_map('strtolower', array_map('trim', $line)); continue; }
+        $row = array_combine($headers, $line);
+        if ($row) $rows[] = $row;
+    }
+    fclose($handle);
+}
+
+if (empty($rows)) jsonError('CSV file is empty or invalid', 400);
+
+$totalRows = count($rows);
+$transit_con->prepare(
+    "INSERT INTO transit_rosters (org_id, uploaded_by, filename, total_rows, semester, notes)
+     VALUES (?,?,?,?,?,?)"
+)->execute([$transit_org_id, $transit_admin_id, $_FILES['file']['name'], $totalRows, $semester, $notes]);
+$rosterId = (int)$transit_con->lastInsertId();
+
+$insertSt = $transit_con->prepare(
+    "INSERT IGNORE INTO transit_enrollments
+     (org_id, passenger_id, student_id, member_name, verify_method, status, roster_id)
+     VALUES (?,NULL,?,?,'roster_manual','pending',?)"
+);
+
+$matchedRows = 0;
+$newEnroll   = 0;
+
+foreach ($rows as $row) {
+    $sid  = trim($row['student_id'] ?? $row['id'] ?? '');
+    $name = trim($row['name'] ?? $row['full_name'] ?? '');
+    if (!$sid) continue;
+
+    $encSid = $encryptionHelper->encryptData($sid);
+
+    $chk = $transit_con->prepare(
+        "SELECT id, passenger_id FROM transit_enrollments WHERE org_id=? AND student_id=? LIMIT 1"
+    );
+    $chk->execute([$transit_org_id, $encSid]);
+    $existing = $chk->fetch();
+
+    if ($existing) {
+        $transit_con->prepare(
+            "UPDATE transit_enrollments SET member_name=?, roster_id=? WHERE id=?"
+        )->execute([$name, $rosterId, $existing['id']]);
+        if ($existing['passenger_id']) $matchedRows++;
+    } else {
+        $insertSt->execute([$transit_org_id, $encSid, $name, $rosterId]);
+        $newEnroll++;
+    }
+}
+
+$transit_con->prepare(
+    "UPDATE transit_rosters SET matched_rows=?, new_enrollments=? WHERE id=?"
+)->execute([$matchedRows, $newEnroll, $rosterId]);
+
+jsonSuccess([
+    'roster_id'       => $rosterId,
+    'total_rows'      => $totalRows,
+    'new_enrollments' => $newEnroll,
+    'matched'         => $matchedRows,
+], 'Roster imported successfully');
@@ -0,0 +1,36 @@
+<?php
+// transit/enrollment/list.php — قائمة عضويات المؤسسة (للمشرف)
+
+require_once __DIR__ . '/../../transit/connect_admin.php';
+
+$status  = filterRequest('status') ?: 'all';
+$page    = max(1, (int)(filterRequest('page', 'int') ?? 1));
+$perPage = min(100, max(10, (int)(filterRequest('per_page', 'int') ?? 50)));
+$offset  = ($page - 1) * $perPage;
+
+$allowed = ['all', 'pending', 'active', 'suspended', 'expired'];
+if (!in_array($status, $allowed)) $status = 'all';
+
+$where  = "org_id = ?";
+$params = [$transit_org_id];
+if ($status !== 'all') { $where .= " AND status = ?"; $params[] = $status; }
+
+$countSt = $transit_con->prepare("SELECT COUNT(*) FROM transit_enrollments WHERE $where");
+$countSt->execute($params);
+$total = (int)$countSt->fetchColumn();
+
+$params[] = $perPage;
+$params[] = $offset;
+$st = $transit_con->prepare(
+    "SELECT id, passenger_id, member_name, status, verify_method,
+            verified_at, expires_at, created_at
+     FROM transit_enrollments
+     WHERE $where ORDER BY created_at DESC LIMIT ? OFFSET ?"
+);
+$st->execute($params);
+$enrollments = $st->fetchAll();
+
+jsonSuccess([
+    'enrollments' => $enrollments,
+    'pagination'  => ['total' => $total, 'page' => $page, 'per_page' => $perPage],
+]);
@@ -0,0 +1,18 @@
+<?php
+// transit/enrollment/my_enrollments.php — الراكب يستعرض عضوياته في كل المؤسسات
+
+require_once __DIR__ . '/../../transit/connect_app.php';
+
+if ($transit_user_role !== 'passenger') jsonError('Only passengers can view enrollments', 403);
+
+$st = $transit_con->prepare(
+    "SELECT e.id, e.org_id, e.status, e.verify_method, e.expires_at, e.created_at,
+            o.name_ar AS org_name, o.name_en AS org_name_en, o.type AS org_type, o.logo_url
+     FROM transit_enrollments e
+     JOIN transit_orgs o ON o.id = e.org_id
+     WHERE e.passenger_id = ?
+     ORDER BY e.created_at DESC"
+);
+$st->execute([$transit_user_id]);
+
+jsonSuccess(['enrollments' => $st->fetchAll()]);