芝麻web文件管理V1.00

编辑当前文件:/home/pulsehostuk9/public_html/teafund.pulsehost.co.uk/api/bulk_update.php

<?php
require_once __DIR__ . '/../includes/auth.php';
require_once __DIR__ . '/../includes/db.php';
require_once __DIR__ . '/../includes/csrf.php';
require_manage();
verify_csrf();

$pdo = get_pdo();

$fund_id = (int)($_POST['fund_id'] ?? 0);
$year = (int)($_POST['year'] ?? 0);
$status = $_POST['status'] ?? 'unpaid';

if (!in_array($status, ['paid','unpaid','off'], true)) { die('Invalid status'); }

if (!empty($_POST['month'])) {
  $month = (int)$_POST['month'];
  $members = $pdo->query("SELECT id FROM members WHERE active=1")->fetchAll();
  $stmt = $pdo->prepare("INSERT INTO payments (member_id,fund_id,year,month,status) VALUES (?,?,?,?,?)
    ON DUPLICATE KEY UPDATE status=VALUES(status), updated_at=NOW()");
  foreach ($members as $m) {
    $stmt->execute([$m['id'], $fund_id, $year, $month, $status]);
  }
  if (!empty($_SESSION['user_id'])) {
    $log = $pdo->prepare("INSERT INTO activity_log (user_id, action, details) VALUES (?,?,?)");
    $log->execute([$_SESSION['user_id'], 'bulk_month', json_encode(['fund_id'=>$fund_id,'year'=>$year,'month'=>$month,'status'=>$status])]);
  }
} elseif (!empty($_POST['member_id'])) {
  $member_id = (int)$_POST['member_id'];
  $stmt = $pdo->prepare("INSERT INTO payments (member_id,fund_id,year,month,status) VALUES (?,?,?,?,?)
    ON DUPLICATE KEY UPDATE status=VALUES(status), updated_at=NOW()");
  for ($m=1;$m<=12;$m++) { $stmt->execute([$member_id,$fund_id,$year,$m,$status]); }
  if (!empty($_SESSION['user_id'])) {
    $log = $pdo->prepare("INSERT INTO activity_log (user_id, action, details) VALUES (?,?,?)");
    $log->execute([$_SESSION['user_id'], 'bulk_member', json_encode(['member_id'=>$member_id,'fund_id'=>$fund_id,'year'=>$year,'status'=>$status])]);
  }
}

header('Location: /admin/?bulk_ok=1&fund_id='.$fund_id.'&year='.$year);
exit;
?>