<?php echo htmlspecialchars($store_name); ?>

exec("CREATE TABLE IF NOT EXISTS store_products ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(150) NOT NULL, description TEXT, category VARCHAR(50) NOT NULL, price DECIMAL(10,2) NOT NULL, sale_price DECIMAL(10,2) NULL, image_path VARCHAR(255) NOT NULL, sizes VARCHAR(100) DEFAULT 'One Size', colors VARCHAR(100) DEFAULT 'Standard', stock_quantity INT DEFAULT 999, is_featured TINYINT(1) DEFAULT 0, is_active TINYINT(1) DEFAULT 1, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); $conn->exec("CREATE TABLE IF NOT EXISTS store_categories ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(50) NOT NULL UNIQUE, icon VARCHAR(20) NOT NULL, color VARCHAR(7) NOT NULL, sort_order INT DEFAULT 0 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); $conn->exec("CREATE TABLE IF NOT EXISTS store_orders ( id INT AUTO_INCREMENT PRIMARY KEY, customer_name VARCHAR(100) NOT NULL, customer_phone VARCHAR(20) NOT NULL, customer_email VARCHAR(100), order_items TEXT NOT NULL, total_amount DECIMAL(10,2) NOT NULL, status ENUM('new', 'contacted', 'completed', 'cancelled') DEFAULT 'new', notes TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); // Insert default categories $stmt = $conn->query("SELECT COUNT(*) FROM store_categories"); if ($stmt->fetchColumn() == 0) { $categories = [ ['Tops', '👔', '#6366F1'], ['Bottoms', '👖', '#10B981'], ['Dresses', '👗', '#EC4899'], ['Shoes', '👠', '#F59E0B'], ['Accessories', '👜', '#EF4444'] ]; $stmt_insert = $conn->prepare("INSERT INTO store_categories (name, icon, color) VALUES (?, ?, ?)"); foreach ($categories as $cat) { $stmt_insert->execute($cat); } } } catch (PDOException $e) { die("Database Error: " . $e->getMessage()); } // --- AUTHENTICATION & SECURITY --- $is_admin = isset($_SESSION['store_admin']) && $_SESSION['store_admin'] === true; $msg = ""; $msg_type = "success"; if (isset($_POST['admin_login'])) { if ($_POST['password'] === $admin_password) { $_SESSION['store_admin'] = true; header("Location: " . $base_url . "&view=admin"); exit; } else { $msg = "❌ Incorrect password"; $msg_type = "error"; } } if (isset($_GET['logout'])) { unset($_SESSION['store_admin']); header("Location: " . $base_url); exit; } // --- ADMIN ACTIONS --- if ($is_admin) { if (isset($_POST['add_product'])) { $name = trim($_POST['name']); $description = trim($_POST['description']); $category = $_POST['category']; $price = floatval($_POST['price']); $sale_price = !empty($_POST['sale_price']) ? floatval($_POST['sale_price']) : null; $sizes = trim($_POST['sizes']); $colors = trim($_POST['colors']); $is_featured = isset($_POST['is_featured']) ? 1 : 0; if (isset($_FILES['image']) && $_FILES['image']['error'] === 0) { $upload_dir = "../public_html/uploads/store/"; if (!is_dir($upload_dir)) mkdir($upload_dir, 0755, true); $file_extension = strtolower(pathinfo($_FILES['image']['name'], PATHINFO_EXTENSION)); $allowed_types = ['jpg', 'jpeg', 'png', 'webp']; if (in_array($file_extension, $allowed_types)) { $file_name = uniqid('product_') . '.' . $file_extension; $target_path = $upload_dir . $file_name; $relative_path = "uploads/store/" . $file_name; if (move_uploaded_file($_FILES['image']['tmp_name'], $target_path)) { $stmt = $conn->prepare("INSERT INTO store_products (name, description, category, price, sale_price, image_path, sizes, colors, is_featured) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"); $stmt->execute([$name, $description, $category, $price, $sale_price, $relative_path, $sizes, $colors, $is_featured]); $msg = "✅ Product added successfully!"; } else { $msg = "❌ Failed to upload image"; $msg_type = "error"; } } else { $msg = "❌ Only JPG, PNG, and WebP images allowed"; $msg_type = "error"; } } else { $msg = "❌ Please select an image"; $msg_type = "error"; } } if (isset($_GET['delete_product'])) { $id = intval($_GET['delete_product']); $stmt = $conn->prepare("SELECT image_path FROM store_products WHERE id = ?"); $stmt->execute([$id]); $product = $stmt->fetch(PDO::FETCH_ASSOC); if ($product && file_exists("../public_html/" . $product['image_path'])) { @unlink("../public_html/" . $product['image_path']); } $stmt = $conn->prepare("DELETE FROM store_products WHERE id = ?"); $stmt->execute([$id]); $msg = "🗑️ Product deleted"; } if (isset($_GET['toggle_product'])) { $id = intval($_GET['toggle_product']); $stmt = $conn->prepare("UPDATE store_products SET is_active = NOT is_active WHERE id = ?"); $stmt->execute([$id]); $msg = "🔄 Status updated"; } if (isset($_GET['update_status']) && isset($_GET['order_id'])) { $new_status = $_GET['update_status']; $order_id = intval($_GET['order_id']); if (in_array($new_status, ['new', 'contacted', 'completed', 'cancelled'])) { $stmt = $conn->prepare("UPDATE store_orders SET status = ? WHERE id = ?"); $stmt->execute([$new_status, $order_id]); $msg = "✅ Order #$order_id updated"; header("Location: " . $base_url . "&view=orders"); exit; } } if (isset($_POST['save_notes'])) { $order_id = intval($_POST['order_id']); $notes = trim($_POST['notes']); $stmt = $conn->prepare("UPDATE store_orders SET notes = ? WHERE id = ?"); $stmt->execute([$notes, $order_id]); $msg = "📝 Notes saved"; header("Location: " . $base_url . "&view=orders"); exit; } if (isset($_GET['delete_order'])) { $order_id = intval($_GET['delete_order']); $stmt = $conn->prepare("DELETE FROM store_orders WHERE id = ?"); $stmt->execute([$order_id]); $msg = "🗑️ Order deleted"; header("Location: " . $base_url . "&view=orders"); exit; } } // --- CUSTOMER ORDER PROCESSING --- $whatsapp_redirect_url = ""; if (isset($_POST['submit_order'])) { $customer_name = trim($_POST['customer_name']); $customer_phone = trim($_POST['customer_phone']); $customer_email = trim($_POST['customer_email']); $cart_items = $_POST['cart_items']; $total_amount = floatval($_POST['total_amount']); if (!empty($customer_name) && !empty($customer_phone) && !empty($cart_items)) { $stmt = $conn->prepare("INSERT INTO store_orders (customer_name, customer_phone, customer_email, order_items, total_amount) VALUES (?, ?, ?, ?, ?)"); $stmt->execute([$customer_name, $customer_phone, $customer_email, $cart_items, $total_amount]); $order_id = $conn->lastInsertId(); $wa_message = "🛍️ *NEW ORDER #" . $order_id . "*%0A%0A"; $wa_message .= "👤 *Customer:* " . $customer_name . "%0A"; $wa_message .= "📱 *Phone:* " . $customer_phone . "%0A"; if (!empty($customer_email)) { $wa_message .= "📧 *Email:* " . $customer_email . "%0A"; } $wa_message .= "%0A🛒 *Items:*%0A" . str_replace(["\n", "\r"], "%0A", $cart_items) . "%0A"; $wa_message .= "%0A💰 *Total:* " . $currency . number_format($total_amount, 2); $wa_message .= "%0A%0A_Order from " . $store_name . "_"; $whatsapp_redirect_url = "https://wa.me/" . $whatsapp_number . "?text=" . $wa_message; $msg = "✅ Order submitted! Opening WhatsApp..."; } else { $msg = "❌ Please fill required fields"; $msg_type = "error"; } } // --- DATA RETRIEVAL --- $view = $_GET['view'] ?? 'store'; $category_filter = $_GET['category'] ?? 'all'; $categories = $conn->query("SELECT * FROM store_categories ORDER BY sort_order, name")->fetchAll(PDO::FETCH_ASSOC); $product_sql = "SELECT p.*, c.name as category_name, c.icon as category_icon, c.color as category_color FROM store_products p LEFT JOIN store_categories c ON p.category = c.name WHERE p.is_active = 1"; if ($category_filter !== 'all') { $product_sql .= " AND p.category = " . $conn->quote($category_filter); } $product_sql .= " ORDER BY p.is_featured DESC, p.created_at DESC"; $products = $conn->query($product_sql)->fetchAll(PDO::FETCH_ASSOC); $orders = []; if ($is_admin) { $orders = $conn->query("SELECT * FROM store_orders ORDER BY created_at DESC LIMIT 100")->fetchAll(PDO::FETCH_ASSOC); } ?> <?php echo htmlspecialchars($store_name); ?> - Modern Shopping Experience ">

Store View Add Products Orders

Add New Product

Product Name

Order Management Dashboard

No Orders Yet

Orders will appear here once customers start purchasing from your store.

0, 'contacted' => 0, 'completed' => 0, 'cancelled' => 0]; foreach ($orders as $order) { $stats[$order['status']]++; } ?>

New Orders

Contacted

Completed

Cancelled

Order #

Phone:

Email:

Order Items:

Notes:

WhatsApp Customer Email Customer Mark Contacted Mark Completed Cancel Order Delete

No Products Found

⭐ Featured

<?php echo htmlspecialchars($product['name']); ?>

🤖

Shopping Assistant

Online • Ready to help!

👋 Hi! I'm your shopping assistant. How can I help you today?

Shopping Cart

0 Items • 0.00

Checkout

Add New Product

Order Management Dashboard

No Orders Yet

Order Notes

No Products Found

Shopping Assistant

🔐 Owner Login

🛒 Complete Your Order

📋 Order Summary