payments.php

<?php
require_once 'config.php';

// Check if user is logged in and is super admin
if (!isLoggedIn()) {
    sendResponse(false, 'Authentication required');
}

if (!isSuperAdmin()) {
    sendResponse(false, 'Super admin access required');
}

$method = $_SERVER['REQUEST_METHOD'];

switch ($method) {
    case 'GET':
        if (isset($_GET['summary'])) {
            getPaymentSummary();
        } else {
            getAllPayments();
        }
        break;
    case 'POST':
        createPayment();
        break;
    case 'PUT':
        parse_str(file_get_contents("php://input"), $_PUT);
        updatePayment($_PUT);
        break;
    case 'DELETE':
        parse_str(file_get_contents("php://input"), $_DELETE);
        deletePayment($_DELETE['id'] ?? null);
        break;
    default:
        sendResponse(false, 'Method not allowed');
}

function getAllPayments() {
    global $pdo;
    
    try {
        $stmt = $pdo->query("SELECT * FROM payments ORDER BY created_at DESC");
        $payments = $stmt->fetchAll();
        
        sendResponse(true, 'Payments retrieved successfully', $payments);
    } catch(PDOException $e) {
        sendResponse(false, 'Database error: ' . $e->getMessage());
    }
}

function getPaymentSummary() {
    global $pdo;
    
    try {
        // Get total revenue
        $stmt = $pdo->query("SELECT SUM(amount) as total_revenue FROM payments WHERE status = 'completed'");
        $totalRevenue = $stmt->fetch()['total_revenue'] ?? 0;
        
        // Get total transactions
        $stmt = $pdo->query("SELECT COUNT(*) as total_transactions FROM payments WHERE status = 'completed'");
        $totalTransactions = $stmt->fetch()['total_transactions'] ?? 0;
        
        // Calculate average transaction
        $averageTransaction = $totalTransactions > 0 ? $totalRevenue / $totalTransactions : 0;
        
        sendResponse(true, 'Payment summary retrieved successfully', [
            'total_revenue' => number_format($totalRevenue, 2),
            'total_transactions' => $totalTransactions,
            'average_transaction' => number_format($averageTransaction, 2)
        ]);
    } catch(PDOException $e) {
        sendResponse(false, 'Database error: ' . $e->getMessage());
    }
}

function createPayment() {
    global $pdo;
    
    $donorName = trim($_POST['donor_name'] ?? '');
    $amount = $_POST['amount'] ?? 0;
    $type = trim($_POST['type'] ?? '');
    $status = trim($_POST['status'] ?? 'pending');
    
    if (empty($donorName) || $amount <= 0 || empty($type)) {
        sendResponse(false, 'Donor name, valid amount, and type are required');
    }
    
    try {
        $stmt = $pdo->prepare("INSERT INTO payments (donor_name, amount, type, status) VALUES (?, ?, ?, ?)");
        $stmt->execute([$donorName, $amount, $type, $status]);
        
        $paymentId = $pdo->lastInsertId();
        sendResponse(true, 'Payment record created successfully', ['id' => $paymentId]);
    } catch(PDOException $e) {
        sendResponse(false, 'Database error: ' . $e->getMessage());
    }
}

function updatePayment($data) {
    global $pdo;
    
    $id = $data['id'] ?? null;
    $donorName = trim($data['donor_name'] ?? '');
    $amount = $data['amount'] ?? 0;
    $type = trim($data['type'] ?? '');
    $status = trim($data['status'] ?? '');
    
    if (!$id || empty($donorName) || $amount <= 0 || empty($type) || empty($status)) {
        sendResponse(false, 'All fields are required');
    }
    
    try {
        $stmt = $pdo->prepare("UPDATE payments SET donor_name = ?, amount = ?, type = ?, status = ? WHERE id = ?");
        $stmt->execute([$donorName, $amount, $type, $status, $id]);
        
        if ($stmt->rowCount() > 0) {
            sendResponse(true, 'Payment updated successfully');
        } else {
            sendResponse(false, 'Payment not found or no changes made');
        }
    } catch(PDOException $e) {
        sendResponse(false, 'Database error: ' . $e->getMessage());
    }
}

function deletePayment($id) {
    global $pdo;
    
    if (!$id) {
        sendResponse(false, 'Payment ID is required');
    }
    
    try {
        $stmt = $pdo->prepare("DELETE FROM payments WHERE id = ?");
        $stmt->execute([$id]);
        
        if ($stmt->rowCount() > 0) {
            sendResponse(true, 'Payment deleted successfully');
        } else {
            sendResponse(false, 'Payment not found');
        }
    } catch(PDOException $e) {
        sendResponse(false, 'Database error: ' . $e->getMessage());
    }
}
?>