✏ EDIT: member_add.php

<?php
require_once __DIR__ . '/../includes/config.php';
header('Content-Type: application/json');
start_secure_session();

// Allow only admins
if (!is_logged_in('admin')) {
    echo json_encode(['success' => false, 'message' => 'Unauthorized']);
    exit;
}

// Retrieve and sanitize POST data
$name = trim($_POST['name'] ?? '');
$email = trim($_POST['email'] ?? '');
$phone = trim($_POST['phone'] ?? '');
$address = trim($_POST['address'] ?? '');
$username = trim($_POST['username'] ?? '');
$password = trim($_POST['password'] ?? '');
$status = $_POST['status'] ?? 'active';

// Validation
if ($name === '' || $email === '' || $phone === '' || $address === '' || $username === '' || $password === '') {
    echo json_encode(['success' => false, 'message' => 'All fields are required.']);
    exit;
}
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
    echo json_encode(['success' => false, 'message' => 'Invalid email format.']);
    exit;
}
// Validate phone (basic digits check)
if (!preg_match('/^[0-9]{6,15}$/', $phone)) {
    echo json_encode(['success' => false, 'message' => 'Invalid phone number.']);
    exit;
}

$conn = db_connect();

// Check duplicate username
$stmt = $conn->prepare('SELECT id FROM members WHERE username = ?');
$stmt->bind_param('s', $username);
$stmt->execute();
$stmt->store_result();
if ($stmt->num_rows > 0) {
    $stmt->close();
    $conn->close();
    echo json_encode(['success' => false, 'message' => 'Username already exists.']);
    exit;
}
$stmt->close();

// Hash password
$hashed = password_hash($password, PASSWORD_DEFAULT);

// Insert member
$stmt = $conn->prepare('INSERT INTO members (name, email, phone, address, username, password, status) VALUES (?, ?, ?, ?, ?, ?, ?)');
$stmt->bind_param('sssssss', $name, $email, $phone, $address, $username, $hashed, $status);
$success = $stmt->execute();
$stmt->close();
$conn->close();

if ($success) {
    echo json_encode(['success' => true]);
} else {
    echo json_encode(['success' => false, 'message' => 'Database error: unable to add member.']);
}

[✗] CANCEL