Manage Students

requireRole(['super_admin', 'admin']); $db = DB(); $user = Auth()->getUser(); $action = $_GET['action'] ?? 'list'; $flash = getFlashMessage(); // Approve if ($action === 'approve' && isset($_GET['id'])) { // CSRF Protection if (!Auth()->verifyCSRFToken($_GET['csrf_token'] ?? '')) { redirectWithMessage('students.php', 'Security session expired. Please try again.', 'danger'); } $sid = intval($_GET['id']); $roll = generateRollNumber($sid); $db->update('students', [ 'roll_number' => $roll, 'status' => 'active', 'approval_status' => 'approved', 'approved_by' => $user['id'], 'approved_at' => date('Y-m-d H:i:s'), ], ['id' => $sid]); redirectWithMessage('students.php', "✅ Student approved. Roll No: $roll", 'success'); } // Reject if ($action === 'reject' && isset($_GET['id'])) { // CSRF Protection if (!Auth()->verifyCSRFToken($_GET['csrf_token'] ?? '')) { redirectWithMessage('students.php', 'Security session expired. Please try again.', 'danger'); } $db->update('students', [ 'status' => 'inactive', 'approval_status' => 'rejected', 'approved_by' => $user['id'], 'approved_at' => date('Y-m-d H:i:s'), ], ['id' => intval($_GET['id'])]); redirectWithMessage('students.php', '❌ Student admission rejected.', 'danger'); } // Search and Pagination $search = cleanInput($_GET['search'] ?? ''); $filter = $_GET['filter'] ?? ''; $page = max(1, intval($_GET['page'] ?? 1)); $perPage = 20; $offset = ($page - 1) * $perPage; $where = " WHERE 1=1 "; $params = []; if ($filter === 'pending') { $where .= " AND s.approval_status='pending'"; } if (!empty($search)) { $where .= " AND (s.full_name LIKE ? OR s.registration_number LIKE ? OR s.roll_number LIKE ? OR s.mobile LIKE ? OR u.institution_name LIKE ?)"; $searchParam = "%$search%"; $params = array_merge($params, array_fill(0, 5, $searchParam)); } // Count total $totalStudents = $db->fetchColumn(" SELECT COUNT(*) FROM students s LEFT JOIN users u ON s.institution_id = u.id $where ", $params); $totalPages = ceil($totalStudents / $perPage); $sql = "SELECT s.*, c.course_name, c.course_code, c.duration, u.institution_name, u.institution_code FROM students s LEFT JOIN courses c ON s.course_id = c.id LEFT JOIN users u ON s.institution_id = u.id $where ORDER BY FIELD(COALESCE(s.approval_status,'pending'),'pending','approved','rejected'), s.created_at DESC LIMIT $perPage OFFSET $offset"; $students = $db->fetchAll($sql, $params); $pendingCount = $db->fetchColumn("SELECT COUNT(*) FROM students WHERE COALESCE(approval_status,'pending')='pending'"); ?> Manage Students – <?= APP_SHORT_NAME ?>

0): ?> Pending Approval

'Approved', 'rejected' => 'Rejected', default => 'Pending', }; ?> >

Reg No	Student	College	Course	Fee	Approval	Date	Actions
No students found.
	Roll No: F: 📞			Rs			Approve

1): ?>