requireRole(['super_admin', 'admin']); $db = DB(); $flash = getFlashMessage(); $action = $_GET['action'] ?? 'list'; // Handle login-as-college (Admin impersonation) if ($action === 'login_as' && isset($_GET['id'])) { // CSRF Protection if (!Auth()->verifyCSRFToken($_GET['csrf_token'] ?? '')) { redirectWithMessage('colleges.php', 'Security session expired. Please try again.', 'danger'); } $collegeId = intval($_GET['id']); $college = $db->fetchOne("SELECT username FROM users WHERE id = ?", [$collegeId]); if ($college) { $token = Auth()->generateImpersonationToken($collegeId); $loginUrl = APP_URL . "college/login.php?action=impersonate&user=" . urlencode($college['username']) . "&itoken=" . urlencode($token); header("Location: $loginUrl"); exit; } else { redirectWithMessage('colleges.php', 'College not found.', 'danger'); } } // Handle Actions (Approve/Reject/Suspend) if (isset($_GET['id']) && in_array($action, ['approve', 'reject', 'suspend'])) { // CSRF Protection if (!Auth()->verifyCSRFToken($_GET['csrf_token'] ?? '')) { redirectWithMessage('colleges.php', 'Security session expired. Please try again.', 'danger'); } $status = ''; if ($action === 'approve') $status = 'approved'; if ($action === 'reject') $status = 'rejected'; if ($action === 'suspend') $status = 'suspended'; if ($status) { $db->update('users', ['affiliation_status' => $status], ['id' => $_GET['id']]); redirectWithMessage('colleges.php', "College affiliation status updated to $status.", 'success'); } } // Fetch Colleges // role_id = 3 is College according to our roles table $colleges = $db->fetchAll(" SELECT u.*, w.balance FROM users u LEFT JOIN wallets w ON u.id = w.user_id WHERE u.role_id = 3 ORDER BY u.created_at DESC "); ?> Manage Colleges - <?= APP_SHORT_NAME ?>

Affiliated Colleges

Manage Wallets
Institution Details Code & Reg No. Contact Person Wallet Balance Affiliation Status Login Actions
No affiliated colleges found.
Reg:
₹
Valid till:
Login As