requireRole(['super_admin', 'admin']); $db = DB(); $admin = Auth()->getUser(); $flash = getFlashMessage(); $action = $_GET['action'] ?? 'list'; $id = intval($_GET['id'] ?? 0); // ── APPROVE ────────────────────────────────────────────────────────────────── if ($action === 'approve' && $id) { // CSRF Protection if (!Auth()->verifyCSRFToken($_GET['csrf_token'] ?? '')) { redirectWithMessage('affiliations.php', 'Security session expired. Please try again.', 'danger'); } $app = $db->fetchOne("SELECT * FROM affiliation_applications WHERE id = ?", [$id]); if ($app && $app['application_status'] !== 'approved') { $name = preg_replace('/[^A-Z0-9]/i', '', strtoupper($app['institution_name'])); $username = 'CLG' . substr($name, 0, 5) . rand(100, 999); $password = 'Ibvte@' . rand(1000, 9999); $passHash = password_hash($password, PASSWORD_DEFAULT); $instCode = 'IBVTE' . date('Y') . str_pad($id, 4, '0', STR_PAD_LEFT); $userId = null; try { $userId = $db->insert('users', [ 'role_id' => ROLE_COLLEGE, 'username' => $username, 'email' => $app['director_email'], 'password_hash' => $passHash, 'full_name' => $app['director_name'], 'mobile' => $app['director_mobile'], 'institution_name' => $app['institution_name'], 'institution_code' => $instCode, 'city' => $app['city'], 'state' => $app['state'], 'affiliation_status' => 'approved', 'is_active' => 1, 'created_at' => date('Y-m-d H:i:s'), ]); $db->insert('wallets', [ 'user_id' => $userId, 'wallet_type' => 'college', 'balance' => 0, 'created_at' => date('Y-m-d H:i:s'), ]); } catch (Exception $e) { error_log("Affiliation Approval Error: " . $e->getMessage()); } $db->update('affiliation_applications', [ 'application_status' => 'approved', 'approved_by' => $admin['id'], 'approved_at' => date('Y-m-d H:i:s'), 'approval_valid_from' => date('Y-m-d'), 'approval_valid_until'=> date('Y-m-d', strtotime('+3 years')), ], ['id' => $id]); $_SESSION['cred_modal'] = [ 'username' => $username, 'password' => $password, 'inst' => $app['institution_name'], 'code' => $instCode, ]; redirectWithMessage('affiliations.php', "✅ Approved! College account created: $username", 'success'); } } // ── REJECT ──────────────────────────────────────────────────────────────────── if ($action === 'reject' && $id) { // CSRF Protection if (!Auth()->verifyCSRFToken($_GET['csrf_token'] ?? '')) { redirectWithMessage('affiliations.php', 'Security session expired. Please try again.', 'danger'); } $db->update('affiliation_applications', [ 'application_status' => 'rejected', 'approved_by' => $admin['id'], 'approved_at' => date('Y-m-d H:i:s'), 'review_remarks' => trim($_GET['reason'] ?? 'Rejected by admin'), ], ['id' => $id]); redirectWithMessage('affiliations.php', '❌ Application rejected.', 'warning'); } // ── UNDER REVIEW ────────────────────────────────────────────────────────────── if ($action === 'review' && $id) { // CSRF Protection if (!Auth()->verifyCSRFToken($_GET['csrf_token'] ?? '')) { redirectWithMessage('affiliations.php', 'Security session expired. Please try again.', 'danger'); } $db->update('affiliation_applications', ['application_status' => 'under_review'], ['id' => $id]); redirectWithMessage('affiliations.php', '🔍 Marked as Under Review.', 'info'); } // ── SAVE EDIT ───────────────────────────────────────────────────────────────── if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['save_edit'])) { // CSRF Protection if (!Auth()->verifyCSRFToken($_POST['csrf_token'] ?? '')) { redirectWithMessage('affiliations.php', 'Security session expired. Please try again.', 'danger'); } $eid = intval($_POST['edit_id']); $app = $db->fetchOne("SELECT * FROM affiliation_applications WHERE id = ?", [$eid]); if (!$app) { redirectWithMessage('affiliations.php', 'Application not found.', 'danger'); } // Process Director Photo $directorPhoto = $app['director_photo'] ?? ''; if (isset($_POST['delete_director_photo']) && $_POST['delete_director_photo'] == '1') { $directorPhoto = ''; } if (isset($_FILES['director_photo_file']) && $_FILES['director_photo_file']['error'] === UPLOAD_ERR_OK) { $fileTmp = $_FILES['director_photo_file']['tmp_name']; $fileName = $_FILES['director_photo_file']['name']; $ext = strtolower(pathinfo($fileName, PATHINFO_EXTENSION)); if (in_array($ext, ['jpg', 'jpeg', 'png'])) { $destDir = __DIR__ . '/../uploads/affiliation'; if (!is_dir($destDir)) { mkdir($destDir, 0777, true); } $newFileName = 'photo_' . time() . '_' . rand(1000, 9999) . '.' . $ext; if (move_uploaded_file($fileTmp, $destDir . '/' . $newFileName)) { $directorPhoto = 'uploads/affiliation/' . $newFileName; } } } // Process Documents $uploadedDocs = json_decode($app['uploaded_documents'] ?? '[]', true); if (!is_array($uploadedDocs)) { $uploadedDocs = []; } $docsCheck = [ 0 => 'Registration Certificate of Trust/Society/Firm', 1 => "Director's ID Proof (Aadhar Card / PAN Card)", 2 => "Director's Address Proof", 3 => 'Building Ownership Proof / Rent Agreement', 4 => 'Staff & Faculty Qualification Documents', 5 => 'Center Infrastructure Photos (Inner & Outer View)', 6 => 'Processing Fee Receipt', 7 => 'Copy of Institution PAN Card', 8 => 'Other Documents' ]; for ($i = 0; $i <= 8; $i++) { // Check delete if (isset($_POST["delete_doc_$i"]) && $_POST["delete_doc_$i"] == '1') { unset($uploadedDocs[$i]); } // Check upload if (isset($_FILES["doc_file_$i"]) && $_FILES["doc_file_$i"]['error'] === UPLOAD_ERR_OK) { $fileTmp = $_FILES["doc_file_$i"]['tmp_name']; $fileName = $_FILES["doc_file_$i"]['name']; $ext = strtolower(pathinfo($fileName, PATHINFO_EXTENSION)); if (in_array($ext, ['pdf', 'jpg', 'jpeg', 'png'])) { $destDir = __DIR__ . '/../uploads/affiliation'; if (!is_dir($destDir)) { mkdir($destDir, 0777, true); } $newFileName = 'doc_' . $i . '_' . time() . '_' . rand(1000, 9999) . '.' . $ext; if (move_uploaded_file($fileTmp, $destDir . '/' . $newFileName)) { $uploadedDocs[$i] = 'uploads/affiliation/' . $newFileName; } } } } // Re-generate documents_attached string based on current keys in uploadedDocs $attachedNames = []; foreach ($uploadedDocs as $idx => $path) { if (isset($docsCheck[$idx])) { $attachedNames[] = $docsCheck[$idx]; } } $documentsAttachedStr = implode(', ', $attachedNames); // Process Faculty & Courses arrays $facultyDetailsJson = $_POST['faculty_details'] ?? '[]'; $coursesAppliedDetailsJson = $_POST['courses_applied_details'] ?? '[]'; // Parse courses to extract names for JSON CHECK constraint validation $coursesArr = json_decode($coursesAppliedDetailsJson, true); if (!is_array($coursesArr)) { $coursesArr = []; } $courseNames = array_column($coursesArr, 'name'); $coursesAppliedJson = json_encode($courseNames, JSON_UNESCAPED_UNICODE); // Process checkboxes for Applied For $appliedForArr = $_POST['applied_for_opts'] ?? []; $appliedForStr = implode(', ', $appliedForArr); $db->update('affiliation_applications', [ 'institution_name' => trim($_POST['institution_name']), 'proposed_center_name' => trim($_POST['proposed_center_name'] ?? ''), 'director_name' => trim($_POST['director_name']), 'father_guardian_name' => trim($_POST['father_guardian_name'] ?? ''), 'director_mobile' => trim($_POST['director_mobile']), 'whatsapp_no' => trim($_POST['whatsapp_no'] ?? ''), 'director_email' => trim($_POST['director_email']), 'director_photo' => $directorPhoto, 'registered_address' => trim($_POST['registered_address'] ?? ''), 'communication_address' => trim($_POST['communication_address'] ?? ''), 'city' => trim($_POST['city']), 'state' => trim($_POST['state']), 'pincode' => trim($_POST['pincode'] ?? ''), 'district' => trim($_POST['district'] ?? ''), 'registration_number' => trim($_POST['registration_number'] ?? ''), 'registration_date' => trim($_POST['registration_date'] ?? ''), 'pan_gst_no' => trim($_POST['pan_gst_no'] ?? ''), 'identity_proof_no' => trim($_POST['identity_proof_no'] ?? ''), 'bank_name' => trim($_POST['bank_name'] ?? ''), 'bank_account_no' => trim($_POST['bank_account_no'] ?? ''), 'bank_ifsc' => trim($_POST['bank_ifsc'] ?? ''), 'applied_for' => $appliedForStr, 'building_type' => trim($_POST['building_type'] ?? ''), 'total_area' => trim($_POST['total_area'] ?? ''), 'number_of_classrooms' => intval($_POST['number_of_classrooms'] ?? 0), 'library_facility' => isset($_POST['library_facility']) ? 1 : 0, 'computer_lab' => isset($_POST['computer_lab']) ? 1 : 0, 'internet_facility' => isset($_POST['internet_facility']) ? 1 : 0, 'total_staff' => intval($_POST['total_staff'] ?? 0), 'practical_lab_facility' => isset($_POST['practical_lab_facility']) ? 1 : 0, 'computer_systems_available' => isset($_POST['computer_systems_available']) ? 1 : 0, 'total_computers' => intval($_POST['total_computers'] ?? 0), 'power_backup_facility' => isset($_POST['power_backup_facility']) ? 1 : 0, 'clean_drinking_water' => isset($_POST['clean_drinking_water']) ? 1 : 0, 'furniture_available' => isset($_POST['furniture_available']) ? 1 : 0, 'washroom_facility' => isset($_POST['washroom_facility']) ? 1 : 0, 'safety_fire_extinguisher' => isset($_POST['safety_fire_extinguisher']) ? 1 : 0, 'faculty_details' => $facultyDetailsJson, 'courses_applied_details' => $coursesAppliedDetailsJson, 'courses_applied' => $coursesAppliedJson, 'uploaded_documents' => json_encode($uploadedDocs, JSON_UNESCAPED_SLASHES), 'documents_attached' => $documentsAttachedStr, 'review_remarks' => trim($_POST['review_remarks']), ], ['id' => $eid]); redirectWithMessage('affiliations.php', '✏️ Application updated successfully.', 'success'); } // ── FETCH DATA ──────────────────────────────────────────────────────────────── $statusFilter = $_GET['status'] ?? ''; $sql = "SELECT * FROM affiliation_applications"; $params = []; if ($statusFilter) { $sql .= " WHERE application_status = ?"; $params[] = $statusFilter; } $sql .= " ORDER BY created_at DESC"; $applications = $db->fetchAll($sql, $params); $counts = [ 'all' => $db->count('affiliation_applications'), 'submitted' => $db->count('affiliation_applications', ['application_status' => 'submitted']), 'under_review' => $db->count('affiliation_applications', ['application_status' => 'under_review']), 'approved' => $db->count('affiliation_applications', ['application_status' => 'approved']), 'rejected' => $db->count('affiliation_applications', ['application_status' => 'rejected']), ]; $viewApp = ($action === 'view' && $id) ? $db->fetchOne("SELECT * FROM affiliation_applications WHERE id = ?", [$id]) : null; $credModal = $_SESSION['cred_modal'] ?? null; unset($_SESSION['cred_modal']); ?> Affiliation Applications – <?= APP_SHORT_NAME ?>

Affiliation Applications

New Under Review
'bg-success', 'rejected' => 'bg-danger', 'under_review' => 'bg-info', 'submitted' => 'bg-warning text-dark', default => 'bg-secondary', }; $label = match($a['application_status']) { 'submitted' => 'New', 'under_review' => 'Under Review', 'approved' => 'Approved', 'rejected' => 'Rejected', default => ucfirst($a['application_status']), }; ?>
App No. Institution Contact Location Status Submitted Actions
No applications found.
View Details
 
✕ Close
SECTION 1: Institution & Director Details
Institution Name:
Director Name:
Father/Guardian:
Registered Address:
Communication Address:
PIN Code:
Mobile No:
WhatsApp No:
Email ID:
Website:
Director Photo
Director's Photo
No Photo
SECTION 2: Legal, Financial & Bank Details
Institution Type:
Registration No:
Registration Date:
PAN / GST No:
Identity Proof No:
Building Ownership:
Established Year:
Total Staff Count:
Institution Bank Details
Bank Name
Account No
IFSC Code
SECTION 3 & 4: Requirements & Infrastructure
Applied For:
Proposed Center Name:
Classrooms:
Covered Area (Sq Ft):
Practical Lab:Yes' : 'No' ?>
Computers Lab:Yes (Total: '.$viewApp['total_computers'].')' : 'No' ?>
Internet Facility:Yes' : 'No' ?>
Power Backup:Yes' : 'No' ?>
Clean Drinking Water:Yes' : 'No' ?>
Furniture Available:Yes' : 'No' ?>
Washrooms:Yes' : 'No' ?>
Fire Extinguishers:Yes' : 'No' ?>
SECTION 7 & 8: Documents & Declaration
No documents checked
'; else: foreach ($docs as $d): $idx = array_search($d, $docsCheckList); $uploadLink = ''; if ($idx !== false && !empty($uploadedDocsArr[$idx])) { $uploadLink = 'View File'; } ?>
Declaration Signed:Yes, confirmed online
Applicant Name:
Submission Date:
Payment Txn UTR/DD:
SECTION 5: Staff & Faculty Details Table
S.No. Name of Faculty Qualification Designation Experience (in Years)
No staff details filled
SECTION 6: Courses Applied For Table
S.No. Course Name Duration Eligibility Course Code
No courses details filled
[FOR BOARD OFFICE USE ONLY]
Application Received By:
Verification Status:
Inspection Date:
Affiliation Number Issued:
Authorized Signature with Seal: Authorized by IBVTE Board
Internal Remarks:
Approve Application Reject