prepare("SELECT * FROM students WHERE id = ?");
$stmt->execute([$id]);
$student = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$student) {
header('Location: list.php?error=not_found');
exit;
}
} catch (PDOException $e) {
die("Database Error: " . $e->getMessage());
}
// جلب قائمة المسوقين
$marketers = [];
try {
$stmt = $conn->query("SELECT id, name FROM marketers ORDER BY name ASC");
$marketers = $stmt->fetchAll(PDO::FETCH_ASSOC);
} catch (PDOException $e) { }
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$full_name = trim($_POST['full_name'] ?? '');
$phone = trim($_POST['phone'] ?? '');
$guardian_phone = trim($_POST['guardian_phone'] ?? '');
$national_id = trim($_POST['national_id'] ?? '');
$nationality = $_POST['nationality'] ?? '';
$email = trim($_POST['email'] ?? '');
$gender = $_POST['gender'] ?? null;
$birth_date = $_POST['birth_date'] ?? null;
$address = trim($_POST['address'] ?? '');
$address_details = trim($_POST['address_details'] ?? '');
$study_system = trim($_POST['study_system'] ?? '');
$marketing_source_name = trim($_POST['marketing_source'] ?? '');
$marketer_id = null;
if ($marketing_source_name !== '') {
$found = false;
foreach ($marketers as $m) {
if ($m['name'] === $marketing_source_name) {
$marketer_id = $m['id'];
$found = true;
break;
}
}
if (!$found) { $marketing_source_name = null; }
} else {
$marketing_source_name = null;
}
// التحقق من صحة البيانات
if ($full_name === '') {
$error = $translations['error_name_required'] ?? "Name required";
} elseif ($phone === '') {
$error = $translations['error_phone_required'] ?? "Phone required";
} elseif (!preg_match('/^[0-9]{10}$/', $phone)) {
$error = $translations['error_phone_10_digits'] ?? "Phone must be 10 digits";
}
elseif ($national_id !== '' && !preg_match('/^[0-9]{5,15}$/', $national_id)) {
$error = $translations['error_national_id_invalid'] ?? "Invalid national ID";
} elseif ($birth_date !== null && $birth_date !== '' && strtotime($birth_date) > time()) {
$error = $translations['error_future_date'] ?? "Date cannot be in future";
}
if ($error === '' && $national_id !== '') {
$stmtCheck = $conn->prepare("SELECT id FROM students WHERE national_id = ? AND id != ?");
$stmtCheck->execute([$national_id, $id]);
if ($stmtCheck->fetch(PDO::FETCH_ASSOC)) {
$error = ($translations['error_national_id_exists'] ?? "National ID exists: ") . $national_id;
}
}
if ($error === '') {
try {
$stmt = $conn->prepare("
UPDATE students SET
full_name = ?, phone = ?, guardian_phone = ?, national_id = ?, nationality = ?, email = ?, gender = ?, birth_date = ?,
address = ?, address_details = ?, study_system = ?, marketing_source = ?, marketer_id = ?
WHERE id = ?
");
$updated = $stmt->execute([
$full_name, $phone, $guardian_phone ?: null, $national_id ?: null, $nationality,
$email ?: null, $gender ?: null, $birth_date ?: null, $address ?: null,
$address_details ?: null, $study_system ?: null, $marketing_source_name,
$marketer_id, $id
]);
if ($updated) {
$success = $translations['update_success'] ?? "Updated successfully";
$stmt = $conn->prepare("SELECT * FROM students WHERE id = ?");
$stmt->execute([$id]);
$student = $stmt->fetch(PDO::FETCH_ASSOC);
} else {
$error = $translations['update_no_changes'] ?? "No changes made";
}
} catch (PDOException $e) {
$error = "DB Error: " . $e->getMessage();
}
}
}
?>