Initial commit with updated Auth and media ignored

ride/kazan/update.php

@@ -0,0 +1,38 @@
+<?php
+require_once __DIR__ . '/../../connect.php';
+
+$id = filterRequest("id");
+
+$allowedFields = [
+    "kazan", "comfortPrice", "speedPrice", "deliveryPrice",
+    "freePrice", "latePrice", "heavyPrice", "adminId", "createdAt", "naturePrice"
+];
+
+$setParts = [];
+$params = [];
+
+foreach ($allowedFields as $field) {
+    if (isset($_POST[$field])) {
+        $value = filterRequest($field);
+        $setParts[] = "`$field` = :$field";
+        $params[":$field"] = $value;
+    }
+}
+
+if (empty($setParts)) {
+    jsonError("No valid fields to update.");
+    exit;
+}
+
+$sql = "UPDATE `kazan` SET " . implode(", ", $setParts) . " WHERE `id` = :id";
+$params[":id"] = $id;
+
+$stmt = $con->prepare($sql);
+$stmt->execute($params);
+
+if ($stmt->rowCount() > 0) {
+    jsonSuccess(null, "Kazan data updated successfully");
+} else {
+    jsonError("Failed to update kazan data");
+}
+?>