✏ EDIT: application.php

<?php
require_once __DIR__ . '/../app/Core/Session.php';
require_once __DIR__ . '/../app/Core/Security.php';
require_once __DIR__ . '/../app/Core/Database.php';
require_once __DIR__ . '/../app/Core/Validator.php';
require_once __DIR__ . '/../app/Core/Upload.php';
Session::start();
if ($_SERVER['REQUEST_METHOD'] !== 'POST') Security::json(['status'=>'error','message'=>'Invalid request.'],405);
if (!Security::validateCsrf($_POST['csrf'] ?? null)) Security::json(['status'=>'error','message'=>'Security token expired. Refresh and try again.'],419);
$errors = Validator::required($_POST, ['name','phone']);
if (!Validator::email($_POST['email'] ?? '')) $errors['email'] = 'Invalid email address.';
if (!Validator::phone($_POST['phone'] ?? '')) $errors['phone'] = 'Invalid phone number.';
if ($errors) Security::json(['status'=>'error','message'=>implode(' ', $errors)],422);
$pdo = Database::tryConnection();
if (!$pdo) Security::json(['status'=>'error','message'=>'Database is not connected. Please configure config/database.php.'],500);
$resumePath = null;
if (!empty($_FILES['resume']['name'])) {
    $upload = (new Upload(['pdf','docx','jpg','jpeg','png'], 5))->save($_FILES['resume'], 'uploads/resumes');
    if (!$upload['ok']) Security::json(['status'=>'error','message'=>$upload['message']],422);
    $resumePath = $upload['path'];
}
$pdo->beginTransaction();
try {
    $code = 'APP-' . date('Ymd') . '-' . strtoupper(substr(bin2hex(random_bytes(3)), 0, 6));
    $stmt = $pdo->prepare('INSERT INTO applicants(applicant_code, name, phone, email, country, job_id, visa_status, resume_path, created_at) VALUES(?,?,?,?,?,?,"New",?,NOW())');
    $jobId = (int)($_POST['job_id'] ?? 0) ?: null;
    $stmt->execute([$code, Security::sanitize($_POST['name'] ?? ''), Security::sanitize($_POST['phone'] ?? ''), Security::sanitize($_POST['email'] ?? ''), Security::sanitize($_POST['country'] ?? ''), $jobId, $resumePath]);
    $applicantId = (int)$pdo->lastInsertId();
    $pdo->prepare('INSERT INTO enquiries(name, phone, email, country, service, message, status, created_at) VALUES(?,?,?,?,?,?,"New",NOW())')->execute([
        Security::sanitize($_POST['name'] ?? ''), Security::sanitize($_POST['phone'] ?? ''), Security::sanitize($_POST['email'] ?? ''), Security::sanitize($_POST['country'] ?? ''), Security::sanitize($_POST['service'] ?? ''), Security::sanitize($_POST['message'] ?? '')
    ]);
    if ($jobId) {
        $pdo->prepare('INSERT INTO applications(applicant_id, job_id, status, notes, created_at) VALUES(?,?,"Applied",?,NOW())')->execute([$applicantId, $jobId, 'Online application submitted.']);
    }
    $pdo->commit();
    Security::json(['status'=>'success','message'=>'Application submitted successfully. Your applicant code is '.$code.'.']);
} catch (Throwable $e) {
    $pdo->rollBack();
    Security::json(['status'=>'error','message'=>'Could not submit application.'],500);
}

[✗] CANCEL