added admin course creation

.htaccess

@@ -98,6 +98,9 @@ RewriteRule ^admin_transactions$ src/admin/admin_transactions.php [L]
 RewriteRule ^admin_trips$ src/admin/admin_trips.php [L]
 RewriteRule ^manage_events$ src/admin/manage_events.php [L]
 RewriteRule ^manage_trips$ src/admin/manage_trips.php [L]
+RewriteRule ^admin_courses$ /src/admin/admin_courses.php [L,QSA]
+RewriteRule ^manage_courses$ /src/admin/manage_courses.php [L,QSA]
+
 
 # === API/AJAX ENDPOINTS ===
 RewriteRule ^fetch_users$ src/api/fetch_users.php [L]
@@ -108,6 +111,8 @@ RewriteRule ^get_tab_total$ src/api/get_tab_total.php [L]
 RewriteRule ^google_validate_login$ src/api/google_validate_login.php [L]
 
 # === PROCESSORS ===
+RewriteRule ^process_course$ /src/processors/process_course.php [L,QSA]
+RewriteRule ^delete_course$ /src/processors/delete_course.php [L,QSA]
 RewriteRule ^validate_login$ src/processors/validate_login.php [L]
 RewriteRule ^register_user$ src/processors/register_user.php [L]
 RewriteRule ^process_application$ src/processors/process_application.php [L]

header.php

@@ -286,6 +286,7 @@ if ($headerStyle === 'light') {
                                                     <li><a href="admin_blogs">Manage Blogs</a></li>
                                                     <li><a href="admin_events">Manage Events</a></li>
                                                     <li><a href="admin_trips">Manage Trips</a></li>
+                                                    <li><a href="admin_courses">Manage Courses</a></li>
                                                     <li><a href="admin_trip_bookings">Trip Bookings</a></li>
                                                     <li><a href="admin_course_bookings">Course Bookings</a></li>
                                                     <li><a href="admin_transactions">iKhokha Payment History</a></li>

index.php

@@ -90,7 +90,7 @@ if (!empty($bannerImages)) {
             <div style="padding-top: 50px; padding-bottom: 50px;">
                 <img style="width: 250px; margin-bottom: 20px;" src="assets/images/logos/weblogo2.png" alt="Logo">
                 <h1 class="hero-title" data-aos="flip-up" data-aos-delay="50" data-aos-duration="1500" data-aos-offset="50">
-                    Welcome to<br>the 4 Wheel Drive Club<br>of Southern Africa
+                    Welcome to<br>the Four Wheel Drive Club<br>of Southern Africa
                 </h1>
                 <a href="membership.php" class="theme-btn style-two bgc-secondary" style="margin-top: 20px; background-color: #e90000; padding: 10px 20px; color: white; text-decoration: none; border-radius: 25px;">
                     <span data-hover="Become a Member">Become a Member</span>

src/admin/admin_courses.php

@@ -0,0 +1,161 @@
+<?php
+$rootPath = dirname(dirname(__DIR__));
+require_once($rootPath . "/src/config/env.php");
+require_once($rootPath . '/src/config/connection.php');
+require_once($rootPath . '/src/config/functions.php');
+require_once($rootPath . '/header.php');
+checkAdmin();
+checkUserSession();
+
+$pageTitle = 'Manage Courses';
+$breadcrumbs = [['Home' => 'index']];
+require_once($rootPath . '/components/banner.php');
+
+// Fetch all courses
+$courses_query = "
+    SELECT
+        course_id, course_type, date, capacity, booked, cost_members, cost_nonmembers, instructor, instructor_email, code
+    FROM courses
+    ORDER BY date DESC
+";
+
+$result = $conn->query($courses_query);
+$courses = [];
+if ($result && $result->num_rows > 0) {
+    while ($row = $result->fetch_assoc()) {
+        $courses[] = $row;
+    }
+}
+?>
+
+<!-- Courses Management Area start -->
+<section class="blog-list-page py-100 rel z-1">
+    <div class="container">
+        <div class="row">
+            <div class="col-lg-12">
+
+                <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 30px;">
+                    <h2 style="margin: 0;">Manage Courses</h2>
+                    <a href="manage_courses" class="theme-btn create-album-btn">
+                        <i class="far fa-plus"></i> New Course
+                    </a>
+                </div>
+
+                <?php if (isset($_SESSION['message'])): ?>
+                    <div class="alert alert-warning message-box">
+                        <?php echo $_SESSION['message']; ?>
+                        <span class="close-btn" onclick="this.parentElement.style.display='none'">&times;</span>
+                    </div>
+                    <?php unset($_SESSION['message']);
+                endif;?>
+
+                <?php if (count($courses) > 0): ?>
+                    <input type="text" class="filter-input" placeholder="Filter courses...">
+                    <div class="courses-container" data-aos="fade-up" data-aos-duration="1500" data-aos-offset="50">
+                        <?php foreach ($courses as $course):
+                            $available = intval($course['capacity']) - intval($course['booked']);
+                            $type_label = strtoupper($course['course_type']);
+                            if ($course['course_type'] == 'driver_training') {
+                                $type_label = 'Driver Training';
+                            } elseif ($course['course_type'] == 'bush_mechanics') {
+                                $type_label = 'Bush Mechanics';
+                            } elseif ($course['course_type'] == 'rescue_recovery') {
+                                $type_label = 'Rescue & Recovery';
+                            } elseif ($course['course_type'] == 'ladies_driver_training') {
+                                $type_label = 'Ladies Driver Training';
+                            }
+                        ?>
+                        <div class="destination-item style-three bgc-lighter booking" data-aos="fade-up" data-aos-duration="1500" data-aos-offset="50">
+                            <div class="content" style="width:100%;">
+                                <div class="destination-header d-flex align-items-start gap-3">
+                                    <div>
+                                        <h5 class="mb-0"><?php echo $type_label; ?></h5>
+                                        <small class="text-muted"><?php echo htmlspecialchars($course['course_type']); ?> — <?php echo date('M d, Y', strtotime($course['date'])); ?></small><br
+                                        <small class="text-muted"><?php echo $course['code'] ? 'Code: ' . htmlspecialchars($course['code']) : ''; ?></small>
+                                    </div>
+                                </div>
+                                <p style="margin: 10px 0;">
+                                    <strong>Instructor:</strong> <?php echo htmlspecialchars($course['instructor']); ?> (<?php echo htmlspecialchars($course['instructor_email']); ?>)<br>
+                                    <strong>Capacity:</strong> <?php echo intval($course['booked']); ?> / <?php echo intval($course['capacity']); ?> &nbsp; <strong>Available:</strong> <?php echo $available; ?><br>
+                                    <strong>Costs:</strong> Members: R <?php echo number_format($course['cost_members'],2); ?> | Non-Members: R <?php echo number_format($course['cost_nonmembers'],2); ?>
+                                </p>
+                                <div class="destination-footer">
+                                    <div class="btn-group" style="display:flex; justify-content:flex-end; gap:10px;">
+                                        <a href="manage_courses?course_id=<?php echo $course['course_id']; ?>" data-bs-toggle="tooltip" data-bs-placement="top" title="Edit"><span class="material-icons">edit</span></a>
+                                        <button type="button" class="delete-course" data-course-id="<?php echo $course['course_id']; ?>" data-bs-toggle="tooltip" data-bs-placement="top" title="Delete" style="background:none; border:none; cursor:pointer; color:inherit;"><span class="material-icons">delete</span></button>
+                                    </div>
+                                </div>
+                            </div>
+                        </div>
+                        <?php endforeach; ?>
+                    </div>
+                <?php else: ?>
+                    <div class="no-courses">
+                        <p>No courses found. <a href="manage_courses">Create one</a></p>
+                    </div>
+                <?php endif; ?>
+
+            </div>
+
+        </div>
+    </div>
+</section>
+<!-- Courses Management Area end -->
+
+<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
+<script>
+    document.addEventListener("DOMContentLoaded", function() {
+        const filterInput = document.querySelector('.filter-input');
+        const cards = document.querySelectorAll('.destination-item');
+
+        if (cards.length === 0 && filterInput) {
+            filterInput.style.display = "none";
+        } else if (filterInput) {
+            filterInput.addEventListener("input", function() {
+                const filterValue = filterInput.value.trim().toLowerCase();
+                cards.forEach(card => {
+                    const cardText = card.textContent.trim().toLowerCase();
+                    card.style.display = cardText.includes(filterValue) ? "" : "none";
+                });
+            });
+        }
+    });
+
+    // Handle delete button clicks
+    document.querySelectorAll('.delete-course').forEach(btn => {
+        btn.addEventListener('click', function() {
+            if (!confirm('Are you sure you want to delete this course? This action cannot be undone.')) {
+                return false;
+            }
+
+            const courseId = this.dataset.courseId;
+            const card = this.closest('.destination-item');
+
+            const formData = new FormData();
+            formData.append('course_id', courseId);
+
+            fetch('delete_course', {
+                    method: 'POST',
+                    body: formData
+                })
+                .then(response => response.json())
+                .then(data => {
+                    if (data.status === 'success') {
+                        alert('Course deleted successfully!');
+                        card.remove();
+                        if (document.querySelectorAll('.destination-item').length === 0) {
+                            location.reload();
+                        }
+                    } else {
+                        alert('Error: ' + data.message);
+                    }
+                })
+                .catch(err => {
+                    console.error('Error:', err);
+                    alert('Delete failed due to network error.');
+                });
+        });
+    });
+</script>
+
+<?php include_once($rootPath . '/components/insta_footer.php'); ?>

src/admin/manage_courses.php

@@ -0,0 +1,154 @@
+<?php
+$headerStyle = 'light';
+$rootPath = dirname(dirname(__DIR__));
+include_once($rootPath . '/header.php');
+checkAdmin();
+
+$course_id = $_GET['course_id'] ?? null;
+$course = null;
+
+// If editing an existing course, fetch its data
+if ($course_id) {
+    $stmt = $conn->prepare("SELECT * FROM courses WHERE course_id = ?");
+    $stmt->bind_param("i", $course_id);
+    $stmt->execute();
+    $result = $stmt->get_result();
+    if ($result->num_rows > 0) {
+        $course = $result->fetch_assoc();
+    }
+    $stmt->close();
+}
+?>
+
+<?php
+    $pageTitle = $course ? 'Edit Course' : 'Create New Course';
+    $breadcrumbs = [['Home' => 'index'], ['Admin' => 'admin_courses'], [$pageTitle => '']];
+    require_once($rootPath . '/components/banner.php');
+?>
+
+<!-- Course Manager Area start -->
+<section class="trip-manager-area py-100 rel z-1">
+    <div class="container">
+        <div class="row">
+            <div class="col-lg-12">
+                <div class="comment-form bgc-lighter z-1 rel mb-30 rmb-55">
+                    <form id="courseForm" method="POST" action="process_course">
+                        <input type="hidden" name="csrf_token" value="<?php echo generateCSRFToken(); ?>">
+                        <?php if ($course): ?>
+                            <input type="hidden" name="course_id" value="<?php echo $course['course_id']; ?>">
+                        <?php endif; ?>
+                        
+                        <div class="section-title py-20">
+                            <h2><?php echo $course ? 'Edit Course: ' . htmlspecialchars($course['code'] ?: $course['course_type']) : 'Create New Course'; ?></h2>
+                            <div id="responseMessage"></div>
+                        </div>
+
+                        <div class="row mt-35">
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="course_type">Course Type *</label>
+                                    <select id="course_type" name="course_type" class="form-control" required>
+                                        <?php
+                                        $types = ['driver_training' => 'Driver Training', 'bush_mechanics' => 'Bush Mechanics', 'rescue_recovery' => 'Rescue & Recovery', 'ladies_driver_training' => 'Ladies Driver Training'];
+                                        foreach ($types as $key => $label) {
+                                            $sel = ($course && $course['course_type'] === $key) ? 'selected' : '';
+                                            echo "<option value=\"$key\" $sel>$label</option>";
+                                        }
+                                        ?>
+                                    </select>
+                                </div>
+                            </div>
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="code">Course Code</label>
+                                    <input type="text" id="code" name="code" class="form-control" maxlength="12" value="<?php echo $course ? htmlspecialchars($course['code']) : ''; ?>" placeholder="Optional code e.g., CRSE001">
+                                </div>
+                            </div>
+
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="date">Date *</label>
+                                    <input type="date" id="date" name="date" class="form-control" value="<?php echo $course ? $course['date'] : ''; ?>" required>
+                                </div>
+                            </div>
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="capacity">Capacity *</label>
+                                    <input type="number" id="capacity" name="capacity" class="form-control" min="1" value="<?php echo $course ? intval($course['capacity']) : ''; ?>" required>
+                                </div>
+                            </div>
+
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="cost_members">Member Cost (R) *</label>
+                                    <input type="number" id="cost_members" name="cost_members" class="form-control" step="0.01" min="0" value="<?php echo $course ? $course['cost_members'] : ''; ?>" required>
+                                </div>
+                            </div>
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="cost_nonmembers">Non-Member Cost (R) *</label>
+                                    <input type="number" id="cost_nonmembers" name="cost_nonmembers" class="form-control" step="0.01" min="0" value="<?php echo $course ? $course['cost_nonmembers'] : ''; ?>" required>
+                                </div>
+                            </div>
+
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="instructor">Instructor *</label>
+                                    <input type="text" id="instructor" name="instructor" class="form-control" value="<?php echo $course ? htmlspecialchars($course['instructor']) : ''; ?>" required>
+                                </div>
+                            </div>
+                            <div class="col-md-6">
+                                <div class="form-group">
+                                    <label for="instructor_email">Instructor Email</label>
+                                    <input type="email" id="instructor_email" name="instructor_email" class="form-control" value="<?php echo $course ? htmlspecialchars($course['instructor_email']) : ''; ?>">
+                                </div>
+                            </div>
+
+                            <div class="col-md-12 mt-20">
+                                <div class="form-group mb-0">
+                                    <button type="submit" class="theme-btn style-two" style="width:100%;">
+                                        <?php echo $course ? 'Update Course' : 'Create Course'; ?>
+                                    </button>
+                                </div>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+        </div>
+    </div>
+</section>
+<!-- Course Manager Area end -->
+
+<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
+<script>
+    $(document).ready(function() {
+        $('#courseForm').on('submit', function(event) {
+            event.preventDefault();
+            var formData = $(this).serialize();
+
+            $.ajax({
+                url: 'process_course',
+                type: 'POST',
+                data: formData,
+                dataType: 'json',
+                success: function(response) {
+                    if (response.status === 'success') {
+                        $('#responseMessage').html('<div class="alert alert-success">' + response.message + '</div>');
+                        setTimeout(function() {
+                            window.location.href = 'admin_courses';
+                        }, 1200);
+                    } else {
+                        $('#responseMessage').html('<div class="alert alert-danger">' + response.message + '</div>');
+                    }
+                },
+                error: function(xhr, status, error) {
+                    console.error('AJAX Error:', error);
+                    $('#responseMessage').html('<div class="alert alert-danger">Error creating/updating course: ' + error + '</div>');
+                }
+            });
+        });
+    });
+</script>
+
+<?php include_once($rootPath . '/components/insta_footer.php'); ?>

src/processors/delete_course.php

@@ -0,0 +1,49 @@
+<?php
+ob_start();
+header('Content-Type: application/json');
+
+$rootPath = dirname(dirname(__DIR__));
+require_once($rootPath . "/src/config/env.php");
+require_once($rootPath . '/src/config/functions.php');
+require_once($rootPath . '/src/config/connection.php');
+
+// Check admin status
+session_start();
+if (empty($_SESSION['user_id'])) {
+    ob_end_clean();
+    echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
+    exit;
+}
+
+$user_role = getUserRole();
+if (!in_array($user_role, ['admin', 'superadmin'])) {
+    ob_end_clean();
+    echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
+    exit;
+}
+
+try {
+    $course_id = intval($_POST['course_id'] ?? 0);
+
+    if ($course_id <= 0) {
+        throw new Exception('Invalid course ID');
+    }
+
+    $stmt = $conn->prepare("DELETE FROM courses WHERE course_id = ?");
+    $stmt->bind_param("i", $course_id);
+
+    if (!$stmt->execute()) {
+        throw new Exception('Failed to delete course: ' . $stmt->error);
+    }
+
+    $stmt->close();
+
+    ob_end_clean();
+    echo json_encode(['status' => 'success', 'message' => 'Course deleted successfully']);
+
+} catch (Exception $e) {
+    ob_end_clean();
+    echo json_encode(['status' => 'error', 'message' => $e->getMessage()]);
+}
+
+?>

src/processors/process_course.php

@@ -0,0 +1,84 @@
+<?php
+ob_start();
+header('Content-Type: application/json');
+
+$rootPath = dirname(dirname(__DIR__));
+require_once($rootPath . "/src/config/env.php");
+require_once($rootPath . '/src/config/functions.php');
+require_once($rootPath . '/src/config/connection.php');
+
+// Check admin status
+session_start();
+if (empty($_SESSION['user_id'])) {
+    ob_end_clean();
+    echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
+    exit;
+}
+
+$user_role = getUserRole();
+if (!in_array($user_role, ['admin', 'superadmin'])) {
+    ob_end_clean();
+    echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
+    exit;
+}
+
+try {
+    $course_id = $_POST['course_id'] ?? null;
+    $course_type = trim($_POST['course_type'] ?? '');
+    $code = trim($_POST['code'] ?? '');
+    $date = trim($_POST['date'] ?? '');
+    $capacity = intval($_POST['capacity'] ?? 0);
+    $cost_members = floatval($_POST['cost_members'] ?? 0);
+    $cost_nonmembers = floatval($_POST['cost_nonmembers'] ?? 0);
+    $instructor = trim($_POST['instructor'] ?? '');
+    $instructor_email = trim($_POST['instructor_email'] ?? '');
+
+    $allowed_types = ['driver_training','bush_mechanics','rescue_recovery','ladies_driver_training'];
+
+    if (!in_array($course_type, $allowed_types)) {
+        throw new Exception('Invalid course type');
+    }
+
+    if (empty($date) || !preg_match('/^\d{4}-\d{2}-\d{2}$/', $date)) {
+        throw new Exception('Invalid date format');
+    }
+
+    if ($capacity <= 0) {
+        throw new Exception('Capacity must be greater than 0');
+    }
+
+    if (empty($instructor)) {
+        throw new Exception('Instructor name is required');
+    }
+
+    if ($course_id) {
+        // Update
+        $stmt = $conn->prepare("UPDATE courses SET course_type = ?, code = ?, date = ?, capacity = ?, cost_members = ?, cost_nonmembers = ?, instructor = ?, instructor_email = ? WHERE course_id = ?");
+        $stmt->bind_param("sssiddssi", $course_type, $code, $date, $capacity, $cost_members, $cost_nonmembers, $instructor, $instructor_email, $course_id);
+
+        if (!$stmt->execute()) {
+            throw new Exception('Failed to update course: ' . $stmt->error);
+        }
+        $stmt->close();
+    } else {
+        // Insert - booked defaults to 0
+        $stmt = $conn->prepare("INSERT INTO courses (course_type, code, date, capacity, booked, cost_members, cost_nonmembers, instructor, instructor_email) VALUES (?, ?, ?, ?, 0, ?, ?, ?, ?)");
+        $stmt->bind_param("sssiddss", $course_type, $code, $date, $capacity, $cost_members, $cost_nonmembers, $instructor, $instructor_email);
+
+        if (!$stmt->execute()) {
+            throw new Exception('Failed to create course: ' . $stmt->error);
+        }
+
+        $course_id = $conn->insert_id;
+        $stmt->close();
+    }
+
+    ob_end_clean();
+    echo json_encode(['status' => 'success', 'message' => $course_id ? 'Course saved successfully' : 'Course created successfully', 'course_id' => $course_id]);
+
+} catch (Exception $e) {
+    ob_end_clean();
+    echo json_encode(['status' => 'error', 'message' => $e->getMessage()]);
+}
+
+?>