<?= e(SITE_NAME); ?>

Order No
Customer
Worker
Status
Priority
Deadline
Description

ID	Permission	Description	Action
			Edit

Worker
Status
Priority
Deadline
Description

############################################################ # FILE : includes/layout/sidebar.php ############################################################

############################################################ # FILE : includes/log.php ############################################################ prepare(" INSERT INTO logs ( user_id, order_id, module, action, description, old_data, new_data, ip_address, user_agent, created_at ) VALUES ( ?,?,?,?,?,?,?,?, ?,NOW() ) "); $stmt->execute([ currentUserId(), $orderId, $module, $action, $description, $oldData ? json_encode($oldData,JSON_UNESCAPED_UNICODE) : null, $newData ? json_encode($newData,JSON_UNESCAPED_UNICODE) : null, clientIp(), userAgent() ]); } ############################################################ # FILE : includes/messages/message-form.php ############################################################ ############################################################ # FILE : includes/messages/message-list.php ############################################################ prepare(" SELECT m.id, m.message, m.created_at, m.sender_id, m.visible_customer, m.visible_worker, m.has_files, u.first_name, u.last_name, r.name role_name, r.color role_color FROM messages m INNER JOIN users u ON u.id=m.sender_id INNER JOIN roles r ON r.id=u.role_id WHERE m.order_id=? ORDER BY m.created_at ASC "); $stmt->execute([ $orderId ]); ?>

fetch()): ?>

● ()

prepare(" SELECT * FROM order_files WHERE message_id=? AND is_deleted=0 ORDER BY id "); $fileStmt->execute([ $row['id'] ]); while($file=$fileStmt->fetch()): ?>

############################################################ # FILE : includes/notification.php ############################################################ prepare(" INSERT INTO notifications ( user_id, order_id, sender_id, title, message, url, icon, color, created_at ) VALUES ( ?,?,?,?,?,?,?,?,NOW() ) "); $stmt->execute([ $userId, $orderId, $senderId ?: currentUserId(), $title, $message, $url, $icon, $color ]); } function notificationCount(int $userId):int{ global $pdo; $stmt=$pdo->prepare(" SELECT COUNT(*) FROM notifications WHERE user_id=? AND is_read=0 "); $stmt->execute([ $userId ]); return (int)$stmt->fetchColumn(); } function markNotificationRead(int $id):void{ global $pdo; $stmt=$pdo->prepare(" UPDATE notifications SET is_read=1, read_at=NOW() WHERE id=? LIMIT 1 "); $stmt->execute([ $id ]); } ############################################################ # FILE : includes/payments/payment-table.php ############################################################ prepare(" SELECT p.*, CONCAT(c.first_name,' ',c.last_name) customer_name, CONCAT(w.first_name,' ',w.last_name) worker_name, CONCAT(a.first_name,' ',a.last_name) confirmed_name FROM payments p LEFT JOIN users c ON c.id=p.customer_id LEFT JOIN users w ON w.id=p.worker_id LEFT JOIN users a ON a.id=p.confirmed_by WHERE p.order_id=? ORDER BY p.payment_date DESC,p.id DESC "); $stmt->execute([ $orderId ]); ?>

fetch()): ?>

#	Payment No	Type	Amount	Method	Status	Date	Confirmed By	Confirm

############################################################ # FILE : includes/permissions/permission.php ############################################################ prepare(" SELECT rp.id FROM role_permissions rp INNER JOIN permissions p ON p.id=rp.permission_id WHERE rp.role_id=? AND p.permission_key=? AND p.status='ACTIVE' LIMIT 1 "); $stmt->execute([ currentRoleId(), $permission ]); if(!$stmt->fetch()){ http_response_code(403); exit('403 Forbidden'); } } function can(string $permission):bool{ global $pdo; if(isSuperAdmin()){ return true; } $stmt=$pdo->prepare(" SELECT rp.id FROM role_permissions rp INNER JOIN permissions p ON p.id=rp.permission_id WHERE rp.role_id=? AND p.permission_key=? AND p.status='ACTIVE' LIMIT 1 "); $stmt->execute([ currentRoleId(), $permission ]); return (bool)$stmt->fetch(); } ############################################################ # FILE : includes/security.php ############################################################ '; } /* |-------------------------------------------------------------------------- | CSRF Validation |-------------------------------------------------------------------------- */ function csrf_validate(): void { if ($_SERVER['REQUEST_METHOD'] !== 'POST') { return; } $token = $_POST[CSRF_TOKEN] ?? ''; if ( empty($token) || empty($_SESSION[CSRF_TOKEN]) || !hash_equals($_SESSION[CSRF_TOKEN], $token) ) { http_response_code(403); exit('CSRF Token Mismatch'); } } /* |-------------------------------------------------------------------------- | Random String |-------------------------------------------------------------------------- */ function random_string(int $length = 32): string { return substr( bin2hex(random_bytes($length)), 0, $length ); } /* |-------------------------------------------------------------------------- | Request Method |-------------------------------------------------------------------------- */ function is_post(): bool { return $_SERVER['REQUEST_METHOD'] === 'POST'; } function is_get(): bool { return $_SERVER['REQUEST_METHOD'] === 'GET'; } /* |-------------------------------------------------------------------------- | Security Headers |-------------------------------------------------------------------------- */ header('X-Frame-Options: SAMEORIGIN'); header('X-Content-Type-Options: nosniff'); header('Referrer-Policy: strict-origin-when-cross-origin'); header('X-XSS-Protection: 1; mode=block'); /* |-------------------------------------------------------------------------- | Validate CSRF |-------------------------------------------------------------------------- */ csrf_validate(); ############################################################ # FILE : includes/timeline/timeline-table.php ############################################################ prepare(" SELECT t.*, u.first_name, u.last_name, r.name role_name, r.color role_color FROM timeline t LEFT JOIN users u ON u.id=t.user_id LEFT JOIN roles r ON r.id=u.role_id WHERE t.order_id=? ORDER BY t.created_at DESC "); $stmt->execute([ $orderId ]); ?> fetch()): ?>

●

()

############################################################ # FILE : includes/timeline.php ############################################################ prepare(" INSERT INTO timeline ( order_id, user_id, event_type, title, description, icon, color, ip_address, user_agent, created_at ) VALUES ( ?,?,?,?,?,?,?,?, ?,NOW() ) "); $stmt->execute([ $orderId, currentUserId(), $eventType, $title, $description, $icon, $color, clientIp(), userAgent() ]); } ############################################################ # FILE : includes/upload.php ############################################################ MAX_UPLOAD_SIZE){ return false; } $extension=strtolower( pathinfo( $file['name'], PATHINFO_EXTENSION ) ); if( !in_array( $extension, ALLOWED_EXTENSIONS, true ) ){ return false; } $folder= ORDER_UPLOAD_PATH. $orderNo. '/'; if(!is_dir($folder)){ mkdir( $folder, 0777, true ); } $originalName= pathinfo( $file['name'], PATHINFO_FILENAME ); $safeName=iconv( 'UTF-8', 'ASCII//TRANSLIT//IGNORE', $originalName ); $safeName=preg_replace( '/[^A-Za-z0-9_-]/', '_', $safeName ); $storedName= strtolower($safeName). '_'. time(). rand(1000,9999). '.'. $extension; $destination= $folder. $storedName; if( !move_uploaded_file( $file['tmp_name'], $destination ) ){ return false; } return [ 'real_name'=>$file['name'], 'stored_name'=>$storedName, 'extension'=>$extension, 'mime_type'=>mime_content_type($destination), 'file_size'=>$file['size'], 'folder'=>$folder ]; } function deleteUploadedFile( string $folder, string $storedName ):void{ $path= rtrim($folder,'/'). '/'. $storedName; if(file_exists($path)){ @unlink($path); } } ############################################################ # FILE : login.php ############################################################ prepare(" SELECT * FROM users WHERE username=? AND status='ACTIVE' LIMIT 1 "); $stmt->execute([ $username ]); $user=$stmt->fetch(); if( $user && password_verify( $password, $user['password'] ) ){ $_SESSION['user_id']=$user['id']; $_SESSION['role_id']=$user['role_id']; $pdo->prepare(" UPDATE users SET last_login_at=NOW(), last_login_ip=? WHERE id=? ") ->execute([ clientIp(), $user['id'] ]); switch($user['role_id']){ case ROLE_SUPER_ADMIN: case ROLE_ADMIN: redirect('admin/dashboard.php'); break; case ROLE_WORKER: redirect('worker/dashboard.php'); break; case ROLE_CUSTOMER: redirect('customer/dashboard.php'); break; } } error('Username və ya Password yanlışdır.'); } include 'includes/layout/header.php'; ?>

"; echo ""; echo ""; echo "Project Structure"; echo ""; echo ""; echo "

Project Structure

"; echo "

";

function tree($dir, $prefix = '')
{
    $items = array_diff(scandir($dir), ['.', '..']);

    natcasesort($items);

    $items = array_values($items);

    $count = count($items);

    foreach ($items as $index => $item) {

        $path = $dir . DIRECTORY_SEPARATOR . $item;

        $last = ($index == $count - 1);

        echo $prefix;

        echo $last ? "└── " : "├── ";

        if (is_dir($path)) {

            echo "{$item}/\n";

            tree(
                $path,
                $prefix . ($last ? "    " : "│   ")
            );

        } else {

            echo "{$item}\n";

        }

    }
}

echo basename($root) . "/\n";

tree($root);

echo "

"; echo ""; ############################################################ # FILE : worker/dashboard.php ############################################################ prepare(" SELECT COUNT(*) FROM orders WHERE worker_id=? "); $stmt->execute([ currentUserId() ]); $totalOrders=$stmt->fetchColumn(); $stmt=$pdo->prepare(" SELECT COUNT(*) FROM orders WHERE worker_id=? AND status='IN_PROGRESS' "); $stmt->execute([ currentUserId() ]); $inProgress=$stmt->fetchColumn(); $stmt=$pdo->prepare(" SELECT IFNULL(SUM(amount),0) FROM payments WHERE worker_id=? AND status='PAID' "); $stmt->execute([ currentUserId() ]); $totalPayments=$stmt->fetchColumn(); ?>

Total Orders

In Progress

Total Income

prepare(" SELECT o.*, CONCAT(c.first_name,' ',c.last_name) customer_name, CONCAT(w.first_name,' ',w.last_name) worker_name FROM orders o LEFT JOIN users c ON c.id=o.customer_id LEFT JOIN users w ON w.id=o.worker_id WHERE o.id=? AND o.worker_id=? LIMIT 1 "); $stmt->execute([ $id, currentUserId() ]); $order=$stmt->fetch(); if(!$order){ error('Order not found.'); redirect('orders.php'); } include '../includes/layout/header.php'; include '../includes/layout/sidebar.php'; ?>

Customer
Status
Priority
Deadline
Description

prepare(" SELECT COUNT(*) FROM orders o {$where} "); $stmt->execute($params); $totalRows=$stmt->fetchColumn(); $totalPages=max(1,ceil($totalRows/$limit)); $stmt=$pdo->prepare(" SELECT o.*, CONCAT( u.first_name, ' ', u.last_name ) customer_name FROM orders o INNER JOIN users u ON u.id=o.customer_id {$where} ORDER BY o.id DESC LIMIT {$offset},{$limit} "); $stmt->execute($params); $orders=$stmt->fetchAll(); include '../includes/layout/header.php'; include '../includes/layout/sidebar.php'; ?>

My Orders

#	Order No	Title	Customer	Status	Priority	Deadline	Open
							Open

1): ?>

System Backup

Database Tables

Change Password

System Logs

Notifications

Cancel Order

New Order

Update Deadline

Edit Order

Admin Notes

Update Price

Orders

Create Permission

Edit Permission

Permissions

My Profile

Customers Report

Files Report

Finance Report

Total Income

Pending Payments

Cancelled Payments

Orders Report

Payments Report

Timeline Report

Workers Report

Total Orders

Completed

In Progress

Cancelled

Customers

Workers

Total Files

Total Income

Create Role

Edit Role

Role Permissions

Roles

Mail Settings

Notification Settings

Security Settings

System Settings

Create User

Edit User

Users

Database Connection Error

Total Orders

Active Orders

Total Paid

My Orders

Project Structure

Total Orders

In Progress

Total Income

My Orders