Files
Siro/backend/transit/enrollment/activate.php
T

69 lines
2.5 KiB
PHP

<?php
// transit/enrollment/activate.php — الراكب يفعّل عضويته بالرقم الجامعي
require_once __DIR__ . '/../../transit/connect_app.php';
if ($transit_user_role !== 'passenger') jsonError('Only passengers can enroll', 403);
requireTransitFields(['org_id', 'student_id']);
$orgId = filterRequest('org_id', 'int');
$studentId = trim(filterRequest('student_id'));
$chkOrg = $transit_con->prepare(
"SELECT id, name_ar, contract_status FROM transit_orgs WHERE id=? LIMIT 1"
);
$chkOrg->execute([$orgId]);
$org = $chkOrg->fetch();
if (!$org) jsonError('Organization not found', 404);
if ($org['contract_status'] === 'terminated') jsonError('Organization account inactive', 403);
$chkEnroll = $transit_con->prepare(
"SELECT id, status FROM transit_enrollments WHERE org_id=? AND passenger_id=? LIMIT 1"
);
$chkEnroll->execute([$orgId, $transit_user_id]);
$existing = $chkEnroll->fetch();
if ($existing && in_array($existing['status'], ['active', 'pending'])) {
jsonError('Enrollment already exists', 409);
}
$encryptedId = $encryptionHelper->encryptData($studentId);
// مطابقة الكشف: هل الرقم موجود في كشف مستورد بدون passenger_id؟
$stRoster = $transit_con->prepare(
"SELECT id, member_name FROM transit_enrollments
WHERE org_id=? AND student_id=? AND passenger_id IS NULL LIMIT 1"
);
$stRoster->execute([$orgId, $encryptedId]);
$rosterRow = $stRoster->fetch();
if ($rosterRow) {
$transit_con->prepare(
"UPDATE transit_enrollments
SET passenger_id=?, status='active', verified_at=NOW(), verify_method='roster_phone_match'
WHERE id=?"
)->execute([$transit_user_id, $rosterRow['id']]);
transitCacheEnrollment($orgId, (string)$transit_user_id);
jsonSuccess([
'enrollment_id' => (int)$rosterRow['id'],
'org_name' => $org['name_ar'],
'status' => 'active',
'verify_method' => 'roster_phone_match',
], 'تم التحقق من عضويتك بنجاح!');
}
// طلب يدوي ينتظر موافقة المشرف
$transit_con->prepare(
"INSERT INTO transit_enrollments
(org_id, passenger_id, student_id, verify_method, status)
VALUES (?,?,?,'manual_admin','pending')"
)->execute([$orgId, $transit_user_id, $encryptedId]);
jsonSuccess([
'enrollment_id' => (int)$transit_con->lastInsertId(),
'org_name' => $org['name_ar'],
'status' => 'pending',
], 'طلبك قيد المراجعة. سيتم إشعارك عند التفعيل.');