LRR/Admin.php

<?php
include 'NoDirectPhpAcess.php';
?>

<?php
$page = "admin";
include 'Header.php';
?>

<?php
if ($_SESSION['user_type'] != "Lecturer") {
  $_SESSION["info_login"] = "You must log in first.";
  echo $_SESSION["info_login"];
  header("Location: index.php");
}
?>

<style>
  .col-md-4 {
    border-right: 1px solid skyblue;
  }
</style>

<br>
<div style="width: 80%;margin: auto;">
  <h2> Administration Panel </h2>
</div>

<hr>
<div class="row" style="width: 80%;margin: auto;">

  <!--<h4>General system Settings</h4><hr>
        <a href="" class="btn btn-lg btn-primary">View System Log </a>
        <hr>
     Lab Privacy Mode: (STUDENT VERIFICATION)
        <hr>
    -->
  <div class="col-md-6">
    <h4> User Account Management </h4>
    <hr>

    <b>Lecturer / TA Accounts </b><br>

    <div class="container">

      <!-- Nav tabs -->
      <ul class="nav nav-tabs" role="tablist">

        <li class="nav-item">
          <a class="nav-link active" data-toggle="tab" href="#home">Create New Account</a>
        </li>

        <li class="nav-item">
          <a class="nav-link" data-toggle="tab" href="#menu2">Batch Create New Student Accounts</a>
        </li>

        <li class="nav-item">
          <a class="nav-link" data-toggle="tab" href="#menu1">Existing Accounts</a>
        </li>

      </ul>

      <!-- Tab panes -->
      <div class="tab-content">

        <div id="home" class="container tab-pane active"><br>

          <b>Create Lecturer/TA Accounts </b>
          <form method="post" action="Script.php">
            <input type="hidden" name="frm_createlecturrer" value="true" required="" />
            Full_Name
            <input type="text" name="fullname" placeholder="Full Name" class="form-control" required="">
            Email
            <input type="text" name="email" placeholder="Email / Student Number" class="form-control" required="">

            Passport_Number / ID (Used as Intial Password)
            <input type="text" class="form-control" name="passport" placeholder="Passport No./ID" required="">
            <br> User Type :
            <input type="radio" name="type" value="Lecturer" required=""> Lecturer
            <input type="radio" name="type" value="TA" required=""> T/A
            <input type="submit" class="btn btn-primary" value="Create"><br>
            <?php

            error_reporting(E_ALL);
            if (isset($_SESSION['info_Admin_Users'])) {
              echo  '<hr><div class="alert alert-info" role="alert">' . $_SESSION['info_Admin_Users'] . '</div>';
              $_SESSION['info_Admin_Users'] = null;
            }
            if (isset($_SESSION['info_Admin_Users'])) {
              echo  '<hr><div class="alert alert-info" role="alert">' . $_SESSION['info_Admin_Users'] . '</div>';
              $_SESSION['info_Admin_Users'] = null;
            }

            ?>

          </form>

          <hr>

        </div>

        <div id="menu1" class="container tab-pane fade"><br>

          <table class="table-bordered" style="font-size: 10pt;">
            <tr style="font-size:10pt;">
              <th>ID</th>
              <th>Name</th>
              <th>Email</th>
              <th>Passport / ID </th>
              <th>Reset Password </th>
              <th>Block/Activate </th>
            </tr>
            <?php

            $result = mysqli_query(
              $con,
              "SELECT * FROM Users_Table  WHERE UserType in ('Lecturer','TA')"
            );
            while ($row = mysqli_fetch_assoc($result)) {
              $pass = $row['Passport_Number'];
              $btn = "<button class='btn-primary' onclick=\"updatePass(" . $row['User_ID'] . ",'$pass')\">Reset</button>";
              if ($row['Status'] == "Active") {
                $newstatus = "Blocked";
                $btnBlock = "<button class='btn-danger' onclick=\"blockUser(" . $row['User_ID'] . ",'$newstatus')\">Block</button>";
              } else {
                $newstatus = "Active";
                $btnBlock = "<button class='btn-success' onclick=\"blockUser(" . $row['User_ID'] . ",'$newstatus')\">Activate</button>";
              }

              echo "<tr><td>" . $row['User_ID'] . "</td><td>" . $row['Full_Name'] . "</td><td>" . $row['Email'] . "</td> <td>" . $row['Passport_Number'] . "</td><td>$btn</td><td>$btnBlock</td></tr>";
            }
            ?>
          </table>

        </div>

        <!-- code contributed by Xu Xiaopeng (https://github.com/xxp1999) -->

        <div id="menu2" class="container tab-pane fade" style="margin-top:10px">
          <b>Separate two student numbers with a space.</b><br>
          <form action="batch_insert.php" method="post">
            <p>
              <textarea cols="80" rows="16" name="users" required=""></textarea>
            </p>
            <input type="submit" class="btn btn-primary" value="Register Students"><br>
          </form>
        </div>

      </div>
    </div>

  </div>

  <div class="col-md-6">

    <div class="container">
      <!-- Nav tabs -->
      <ul class="nav nav-tabs" role="tablist">
        <li class="nav-item">
          <a class="nav-link active" data-toggle="tab" href="#menub">Existing Courses</a>
        </li>

      </ul>

      <!-- Tab panes -->

        </div>

        <div id="menub" class="container tab-pane active"><br>

          <b> Existing Course Portals </b>
          <hr>
          <table class="table-bordered" style="font-size: 10pt;">
            <tr>
              <th>Course Name </th>
              <th> Faculty </th>
              <th>Lecturer </th>
              <th>TAs</th>
              <th>Assign new TA </th>
            </tr>
            <?php
            $result = mysqli_query($con, "SELECT `Course_ID`, `Course_Name`, `Academic_Year`, `Faculty`, `Lecturer_User_ID`, `TA_User_ID`, `Course_Code`, `URL`, `Verify_New_Members`   , users_table.Full_Name  FROM `courses_table` INNER JOIN users_table ON users_table.User_ID=courses_table.Lecturer_User_ID");
            if (mysqli_num_rows($result) == 0) {
            } else {
              while ($row = mysqli_fetch_assoc($result)) {
                $name = $row['Course_Name'];
                $code = $row['Course_Code'];
                $faculty = $row['Faculty'];
                $lecturer = $row['Full_Name'];
                $academic = $row['Academic_Year'];
                $c_id = $row['Course_ID'];

                $resultTA = mysqli_query($con, "SELECT `Course_ID`, `TA`,users_table.Full_Name as TA_NAME FROM `course_ta`
INNER JOIN users_table on users_table.User_ID=course_ta.TA
where course_ta.Course_ID=$c_id");

                $ta = "";
                while ($rowTA = mysqli_fetch_assoc($resultTA)) {
                  $ta = $ta . "  - " . $rowTA['TA_NAME'];
                }

                echo "  
                          <tr> <td>$code - $name</td>  <td>$faculty </td> <td>$lecturer</td><td>$ta</td>  <td>";

                $resultx = mysqli_query($con, "SELECT * FROM Users_Table WHERE UserType='TA' AND User_ID NOT IN (SELECT `TA` FROM `course_ta`
INNER JOIN users_table on users_table.User_ID=course_ta.TA
where course_ta.Course_ID=$c_id);");
                if (mysqli_num_rows($resultx) == 0) {
                  echo "No free TA";
                } else {
                  echo "<form method='get' action='Script.php'> <select name='ta' class=''>";
                  while ($row = mysqli_fetch_assoc($resultx)) {
                    $id = $row['User_ID'];
                    $name = $row['Full_Name'];
                    echo "<option value='$id'> $name </option>";
                  }
                    echo "</select>  <input type='hidden' name='assignTA' value='true'> <input type='hidden' name='id' value='$c_id'>  <input type='submit' value='assign'></form>";
                }

                echo " </td></tr>
                         ";
              }
            } ?>

          </table>

        </div>

      </div>

    </div>

    <script>
      function updatePass(id, pass) {
        if (!confirm('Are you to Reset User Password')) {
          return;
        }

        window.location.href = "\Script.php\?action=passchange&uid=" + id + "&pass=" + pass;
      }

      function blockUser(id, status) {
        if (!confirm('Are you to change User Status')) {
          return;
        }
        window.location.href = "\Script.php\?action=statuschange&uid=" + id + "&status=" + status;
      }
    </script>