✏ EDIT: payment_add.php

<?php
// Allows administrators to record payments for bookings. After
// inserting a payment, the booking's payment_status is recalculated
// based on the total amount due versus payments received.

require_once __DIR__ . '/bootstrap.php';

require_admin();

$input = json_decode(file_get_contents('php://input'), true);
if (!$input) {
    $input = $_POST;
}

$bookingId = isset($input['booking_id']) ? (int)$input['booking_id'] : 0;
$amount = isset($input['amount']) ? (float)$input['amount'] : 0.0;
$method = isset($input['method']) ? strtoupper(trim($input['method'])) : '';
$txnRef = isset($input['txn_ref']) ? trim($input['txn_ref']) : null;

if ($bookingId <= 0 || $amount <= 0 || $method === '') {
    respond(null, 'booking_id, amount and method are required');
}

// Validate payment method
$validMethods = ['CASH', 'UPI', 'ONLINE', 'CARD'];
if (!in_array($method, $validMethods)) {
    respond(null, 'Invalid payment method');
}

try {
    // Ensure booking exists
    $stmt = $pdo->prepare('SELECT total_amount FROM bookings WHERE id = ?');
    $stmt->execute([$bookingId]);
    $booking = $stmt->fetch();
    if (!$booking) {
        respond(null, 'Booking not found');
    }
    // Insert payment
    $stmt = $pdo->prepare('INSERT INTO payments (booking_id, amount, method, txn_ref, status, created_at) VALUES (?,?,?,?,?,NOW())');
    $stmt->execute([$bookingId, $amount, $method, $txnRef, 'SUCCESS']);
    // Recalculate payment status
    $stmt = $pdo->prepare('SELECT SUM(amount) AS paid FROM payments WHERE booking_id = ? AND status = "SUCCESS"');
    $stmt->execute([$bookingId]);
    $sum = $stmt->fetch();
    $paid = (float)($sum['paid'] ?? 0.0);
    $total = (float)$booking['total_amount'];
    $status = 'UNPAID';
    if ($paid >= $total) {
        $status = 'PAID';
    } elseif ($paid > 0) {
        $status = 'PARTIAL';
    }
    $stmt = $pdo->prepare('UPDATE bookings SET payment_status = ? WHERE id = ?');
    $stmt->execute([$status, $bookingId]);
    respond(['id' => $pdo->lastInsertId(), 'payment_status' => $status]);
} catch (PDOException $e) {
    respond(null, 'Database error');
}

[✗] CANCEL