first commit

backend/Admin/adminUser/add.php

@@ -0,0 +1,46 @@
+<?php
+require_once __DIR__ . '/../../core/bootstrap.php';
+
+$deviceNumber = filterRequest("deviceNumber");
+$name = filterRequest("name");
+$password = filterRequest("password");
+$role = filterRequest("role") ?? 'admin';
+
+if (empty($name) || empty($password)) {
+    jsonError("Name and password are required.");
+    exit;
+}
+
+try {
+    $con = Database::get('main');
+    
+    // Hash the password for security
+    $hashedPassword = password_hash($password, PASSWORD_DEFAULT);
+
+    $sql = "INSERT INTO `adminUser`(`id`, `device_number`, `name`, `password`, `role`) VALUES (
+      UUID(),
+      :deviceNumber,
+      :name,
+      :password,
+      :role
+    )";
+
+    $stmt = $con->prepare($sql);
+    $stmt->execute([
+        ':deviceNumber' => $deviceNumber,
+        ':name' => $name,
+        ':password' => $hashedPassword,
+        ':role' => $role
+    ]);
+
+    if ($stmt->rowCount() > 0) {
+      jsonSuccess("Admin user data saved successfully");
+    } else {
+      jsonError("Failed to save admin user data");
+    }
+} catch (Exception $e) {
+    error_log("[Admin Add Error] " . $e->getMessage());
+    jsonError("Database error: " . $e->getMessage());
+}
+?>
+

backend/Admin/adminUser/add_invoice.php

@@ -0,0 +1,86 @@
+<?php
+
+// عرض كافة الأخطاء
+ini_set('display_errors', 1);
+ini_set('display_startup_errors', 1);
+error_reporting(E_ALL);
+
+require_once __DIR__ . '/../../connect.php';
+
+$driverID       = filterRequest("driverID");
+$invoiceNumber  = filterRequest("invoiceNumber");
+$amount         = filterRequest("amount");
+$date           = filterRequest("date");
+$name           = filterRequest("name");
+
+$linkImage  = null;
+$uploadDate = date("Y-m-d H:i:s");
+
+// ✅ طباعة بيانات الإدخال للتأكد
+error_log("[add_invoice.php] 📥 Data received | driverID: $driverID, invoiceNumber: $invoiceNumber, amount: $amount, date: $date");
+
+// التحقق من وجود ملف الصورة
+if (isset($_FILES['image']) && $_FILES['image']['error'] === UPLOAD_ERR_OK) {
+    $image_file       = $_FILES['image'];
+    $image_name       = $image_file['name'];
+    $image_extension  = strtolower(pathinfo($image_name, PATHINFO_EXTENSION));
+    $allowed_extensions = ['jpg', 'jpeg', 'png'];
+
+    if (!in_array($image_extension, $allowed_extensions)) {
+        error_log("[add_invoice.php] ❌ Invalid image extension: .$image_extension");
+        echo json_encode(['status' => 'error', 'message' => 'Invalid file type.']);
+        exit;
+    }
+
+    $finfo = finfo_open(FILEINFO_MIME_TYPE);
+    $mime_type = finfo_file($finfo, $image_file['tmp_name']);
+    finfo_close($finfo);
+
+    $allowed_mime_types = ['image/jpeg', 'image/png', 'image/jpg'];
+    if (!in_array($mime_type, $allowed_mime_types)) {
+        error_log("[add_invoice.php] ❌ Invalid MIME type: $mime_type");
+        echo json_encode(['status' => 'error', 'message' => 'Invalid file type (MIME mismatch).']);
+        exit;
+    }
+
+    $new_filename = $invoiceNumber . "_" . $driverID . '.' . $image_extension;
+    $target_dir   = "invoice_images/";
+    $target_file  = $target_dir . $new_filename;
+
+    if (!is_dir($target_dir)) {
+        if (!mkdir($target_dir, 0755, true)) {
+            error_log("[add_invoice.php] ❌ Failed to create directory: $target_dir");
+        }
+    }
+
+    if (!move_uploaded_file($image_file['tmp_name'], $target_file)) {
+        error_log("[add_invoice.php] ❌ Failed to move uploaded file.");
+        echo json_encode(['status' => 'error', 'message' => 'Failed to upload image.']);
+        exit;
+    }
+
+    $linkImage = 'https://intaleq.xyz/intaleq/Admin/adminUser/invoice_images/' . $new_filename;
+    error_log("[add_invoice.php] ✅ Image uploaded successfully: $linkImage");
+}
+
+try {
+    $stmt = $con->prepare("INSERT INTO invoice_records (driverID, invoice_number,name, amount, date, image_link, created_at)
+                           VALUES (?, ?, ?,?, ?, ?, ?)");
+    $stmt->execute([$driverID, $invoiceNumber,$name, $amount, $date, $linkImage, $uploadDate]);
+
+    echo json_encode([
+        'status' => 'success',
+        'message' => 'Invoice data saved.',
+        'image' => $linkImage
+    ]);
+
+    error_log("[add_invoice.php] ✅ Invoice saved successfully.");
+} catch (PDOException $e) {
+    $errorMsg = $e->getMessage();
+    error_log("[add_invoice.php] 🛑 PDO ERROR: $errorMsg");
+
+    echo json_encode([
+        'status' => 'error',
+        'message' => "Database error: $errorMsg"
+    ]);
+}

backend/Admin/adminUser/get.php

@@ -0,0 +1,24 @@
+<?php
+require_once __DIR__ . '/../../connect.php';
+
+$device_number = filterRequest("device_number"); 
+
+$sql = "SELECT
+    *
+FROM
+    `adminUser`
+WHERE
+    `device_number` = '$device_number'";
+
+$stmt = $con->prepare($sql);
+$stmt->execute();
+$result = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+if (count($result) === 1) {
+    // Print the first record as a success message
+    jsonSuccess($result[0]);
+} else {
+    // Print a failure message
+    jsonError($message = "Failed to retrieve Password or user name incorrect");
+}
+?>

backend/Admin/adminUser/invoice_total.php

@@ -0,0 +1,28 @@
+<?php
+require_once __DIR__ . '/../../connect.php';
+
+// ✅ استرجاع كل الفواتير من قاعدة البيانات
+try {
+    $stmt = $con->prepare("SELECT * FROM invoice_records ORDER BY date DESC");
+    $stmt->execute();
+    $invoices = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+    // ✅ حساب عدد الفواتير ومجموع المبالغ
+    $count = count($invoices);
+    $totalAmount = array_sum(array_column($invoices, 'amount'));
+
+    echo json_encode([
+        "status" => "success",
+        "data" => $invoices,
+        "summary" => [
+            "count" => $count,
+            "total" => $totalAmount
+        ]
+    ]);
+} catch (PDOException $e) {
+    echo json_encode([
+        "status" => "error",
+        "message" => "Database error: " . $e->getMessage()
+    ]);
+}
+?>