prepare("
SELECT p.*, s.full_name
FROM payments p
JOIN students s ON p.student_id = s.id
WHERE p.id = ? AND p.student_id = ?
");
$stmt->execute([$payment_id, $student_id]);
$payment = $stmt->fetch();
if (!$payment) {
die(__('error_payment_not_found'));
}
$errors = [];
$success = false;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$amount_paid = $_POST['amount_paid'] ?? '';
$discount = $_POST['discount'] ?? '';
$payment_date = $_POST['payment_date'] ?? '';
$payment_method = $_POST['payment_method'] ?? '';
// التحقق من صحة البيانات
if (!is_numeric($amount_paid) || $amount_paid < 0) {
$errors[] = __('error_invalid_amount_paid');
}
if (!is_numeric($discount) || $discount < 0) {
$errors[] = __('error_invalid_discount');
}
if (empty($payment_date)) {
$errors[] = __('error_payment_date_required');
}
if (empty($errors)) {
$updateStmt = $conn->prepare("UPDATE payments SET amount_paid = ?, discount = ?, payment_date = ?, payment_method = ? WHERE id = ? AND student_id = ?");
$updated = $updateStmt->execute([$amount_paid, $discount, $payment_date, $payment_method, $payment_id, $student_id]);
if ($updated) {
$success = true;
$payment['amount_paid'] = $amount_paid;
$payment['discount'] = $discount;
$payment['payment_date'] = $payment_date;
$payment['payment_method'] = $payment_method;
} else {
$errors[] = __('error_update_failed');
}
}
}
?>