$max_size) { return false; } $extension = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION)); $filename = $prefix . '_' . time() . '_' . uniqid() . '.' . $extension; if (move_uploaded_file($file['tmp_name'], $upload_dir . $filename)) { return $filename; } return false; } // === DATABASE SCHEMA === try { $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $conn->exec("CREATE TABLE IF NOT EXISTS rental_admins ( id INT AUTO_INCREMENT PRIMARY KEY, username VARCHAR(50) UNIQUE NOT NULL, password VARCHAR(255) NOT NULL, full_name VARCHAR(150), email VARCHAR(100), avatar VARCHAR(255), created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); $conn->exec("CREATE TABLE IF NOT EXISTS rental_properties ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL DEFAULT 1, name VARCHAR(200) NOT NULL, type VARCHAR(50) NOT NULL, address TEXT, rent_amount DECIMAL(10,2) NOT NULL, deposit_amount DECIMAL(10,2) DEFAULT 0, property_image VARCHAR(255), tenant_name VARCHAR(150), tenant_email VARCHAR(100), tenant_phone VARCHAR(20), tenant_password VARCHAR(255), payment_status ENUM('paid','pending','overdue') DEFAULT 'pending', last_payment_date DATE, lease_start DATE, lease_end DATE, is_active TINYINT(1) DEFAULT 1, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); $conn->exec("CREATE TABLE IF NOT EXISTS rental_payments ( id INT AUTO_INCREMENT PRIMARY KEY, property_id INT NOT NULL, amount DECIMAL(10,2) NOT NULL, payment_date DATE NOT NULL, payment_method VARCHAR(50), reference_number VARCHAR(100), proof_filename VARCHAR(255), status ENUM('pending','approved','rejected') DEFAULT 'pending', verified_by INT DEFAULT NULL, verified_at TIMESTAMP NULL, notes TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); $conn->exec("CREATE TABLE IF NOT EXISTS rental_maintenance ( id INT AUTO_INCREMENT PRIMARY KEY, property_id INT NOT NULL, category VARCHAR(50), priority ENUM('low','medium','high','urgent') DEFAULT 'medium', description TEXT NOT NULL, photo_filename VARCHAR(255), status ENUM('pending','in_progress','completed') DEFAULT 'pending', estimated_cost DECIMAL(10,2), created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); $admin_count = $conn->query("SELECT COUNT(*) FROM rental_admins")->fetchColumn(); if ($admin_count == 0) { $default_password = password_hash('admin123', PASSWORD_DEFAULT); $conn->exec("INSERT INTO rental_admins (username, password, full_name) VALUES ('admin', '$default_password', 'Property Owner')"); } } catch (PDOException $e) { die("Database Setup Error: " . $e->getMessage()); } // === AUTHENTICATION === $user_type = $_SESSION['user_type'] ?? null; $user_id = $_SESSION['user_id'] ?? null; $msg = ""; $redirect_js = ""; if (isset($_POST['login'])) { $username = trim($_POST['username']); $password = $_POST['password']; $login_type = $_POST['login_type']; if ($login_type === 'admin') { $stmt = $conn->prepare("SELECT * FROM rental_admins WHERE username = ?"); $stmt->execute([$username]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && password_verify($password, $user['password'])) { $_SESSION['user_type'] = 'admin'; $_SESSION['user_id'] = $user['id']; $_SESSION['full_name'] = $user['full_name']; $redirect_js = ""; } else { $msg = "Invalid admin credentials."; } } else { $stmt = $conn->prepare("SELECT * FROM rental_properties WHERE tenant_email = ? AND is_active = 1"); $stmt->execute([$username]); $property = $stmt->fetch(PDO::FETCH_ASSOC); if ($property && $property['tenant_password'] === $password) { $_SESSION['user_type'] = 'tenant'; $_SESSION['user_id'] = $property['id']; $_SESSION['property_id'] = $property['id']; $_SESSION['full_name'] = $property['tenant_name']; $redirect_js = ""; } else { $msg = "Invalid tenant credentials."; } } } if (isset($_GET['logout'])) { session_destroy(); $redirect_js = ""; } // === ADMIN ACTIONS === if ($user_type === 'admin') { if (isset($_POST['add_property'])) { try { $tenant_password = $_POST['tenant_password'] ?: 'tenant123'; $full_address = trim($_POST['address'] ?? ''); if (!empty($_POST['city'])) { $full_address .= ($full_address ? ', ' : '') . trim($_POST['city']); } $stmt = $conn->prepare("INSERT INTO rental_properties ( user_id, name, type, address, rent_amount, deposit_amount, tenant_name, tenant_email, tenant_phone, tenant_password, lease_start, lease_end ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"); $stmt->execute([ $user_id, $_POST['property_name'], $_POST['property_type'], $full_address, $_POST['rent_amount'], $_POST['deposit_amount'] ?: 0, $_POST['tenant_name'] ?: null, $_POST['tenant_email'] ?: null, $_POST['tenant_phone'] ?: null, $tenant_password, $_POST['lease_start'] ?: null, $_POST['lease_end'] ?: null ]); $redirect_js = ""; } catch (PDOException $e) { $msg = "Error: " . $e->getMessage(); } } if (isset($_GET['approve_payment'])) { try { $payment_id = intval($_GET['approve_payment']); $stmt = $conn->prepare("UPDATE rental_payments SET status = 'approved', verified_by = ?, verified_at = NOW() WHERE id = ?"); $stmt->execute([$user_id, $payment_id]); $stmt = $conn->prepare("SELECT property_id FROM rental_payments WHERE id = ?"); $stmt->execute([$payment_id]); $payment = $stmt->fetch(PDO::FETCH_ASSOC); if ($payment) { $stmt = $conn->prepare("UPDATE rental_properties SET payment_status = 'paid', last_payment_date = NOW() WHERE id = ?"); $stmt->execute([$payment['property_id']]); } $redirect_js = ""; } catch (PDOException $e) { $msg = "Error: " . $e->getMessage(); } } if (isset($_GET['reject_payment'])) { try { $stmt = $conn->prepare("UPDATE rental_payments SET status = 'rejected' WHERE id = ?"); $stmt->execute([intval($_GET['reject_payment'])]); $redirect_js = ""; } catch (PDOException $e) { $msg = "Error: " . $e->getMessage(); } } if (isset($_GET['delete_property'])) { try { $stmt = $conn->prepare("UPDATE rental_properties SET is_active = 0 WHERE id = ? AND user_id = ?"); $stmt->execute([intval($_GET['delete_property']), $user_id]); $redirect_js = ""; } catch (PDOException $e) { $msg = "Error: " . $e->getMessage(); } } } // === TENANT ACTIONS === if ($user_type === 'tenant') { if (isset($_POST['upload_proof'])) { try { $property_id = $_SESSION['property_id']; $amount = floatval($_POST['amount']); $payment_date = $_POST['payment_date']; $reference = $_POST['reference'] ?: 'TENANT-' . time(); $proof_filename = premium_file_upload('proof_file', $upload_base, 'proof'); if ($proof_filename === false) { throw new Exception("Invalid file type or size."); } $stmt = $conn->prepare("INSERT INTO rental_payments ( property_id, amount, payment_date, payment_method, reference_number, proof_filename, status ) VALUES (?, ?, ?, 'Tenant Upload', ?, ?, 'pending')"); $stmt->execute([ $property_id, $amount, $payment_date, $reference, $proof_filename ]); $stmt = $conn->prepare("UPDATE rental_properties SET payment_status = 'pending' WHERE id = ?"); $stmt->execute([$property_id]); $redirect_js = ""; } catch (Exception $e) { $msg = "Error: " . $e->getMessage(); } } if (isset($_POST['submit_maintenance'])) { try { $property_id = $_SESSION['property_id']; $photo_filename = premium_file_upload('maintenance_photo', $upload_base, 'maintenance'); $stmt = $conn->prepare("INSERT INTO rental_maintenance ( property_id, category, priority, description, photo_filename ) VALUES (?, ?, ?, ?, ?)"); $stmt->execute([ $property_id, $_POST['category'], $_POST['priority'], $_POST['description'], $photo_filename ]); $redirect_js = ""; } catch (Exception $e) { $msg = "Error: " . $e->getMessage(); } } } // === DATA FETCHING === $properties = []; $payments = []; $maintenance_requests = []; $my_property = null; $analytics = []; if ($db_connected && $user_type === 'admin') { $stmt = $conn->prepare("SELECT * FROM rental_properties WHERE user_id = ? AND is_active = 1 ORDER BY created_at DESC"); $stmt->execute([$user_id]); $properties = $stmt->fetchAll(PDO::FETCH_ASSOC); $stmt = $conn->prepare("SELECT p.*, rp.name as property_name, rp.tenant_name FROM rental_payments p JOIN rental_properties rp ON p.property_id = rp.id WHERE rp.user_id = ? ORDER BY p.created_at DESC LIMIT 50"); $stmt->execute([$user_id]); $payments = $stmt->fetchAll(PDO::FETCH_ASSOC); $stmt = $conn->prepare("SELECT m.*, p.name as property_name FROM rental_maintenance m JOIN rental_properties p ON m.property_id = p.id WHERE p.user_id = ? ORDER BY m.created_at DESC"); $stmt->execute([$user_id]); $maintenance_requests = $stmt->fetchAll(PDO::FETCH_ASSOC); $total_revenue = array_sum(array_column($properties, 'rent_amount')); $occupied_count = count(array_filter($properties, function($p) { return !empty($p['tenant_name']); })); $occupancy_rate = count($properties) > 0 ? round(($occupied_count / count($properties)) * 100) : 0; $pending_payments = count(array_filter($payments, function($p) { return $p['status'] === 'pending'; })); $approved_payments = count(array_filter($payments, function($p) { return $p['status'] === 'approved'; })); $total_collected = array_sum(array_column(array_filter($payments, function($p) { return $p['status'] === 'approved'; }), 'amount')); $analytics = [ 'total_revenue' => $total_revenue, 'total_properties' => count($properties), 'occupied_properties' => $occupied_count, 'occupancy_rate' => $occupancy_rate, 'pending_payments' => $pending_payments, 'approved_payments' => $approved_payments, 'total_collected' => $total_collected, 'pending_maintenance' => count(array_filter($maintenance_requests, function($m) { return $m['status'] === 'pending'; })) ]; } elseif ($db_connected && $user_type === 'tenant') { $stmt = $conn->prepare("SELECT * FROM rental_properties WHERE id = ?"); $stmt->execute([$_SESSION['property_id']]); $my_property = $stmt->fetch(PDO::FETCH_ASSOC); $stmt = $conn->prepare("SELECT * FROM rental_payments WHERE property_id = ? ORDER BY created_at DESC"); $stmt->execute([$_SESSION['property_id']]); $payments = $stmt->fetchAll(PDO::FETCH_ASSOC); $stmt = $conn->prepare("SELECT * FROM rental_maintenance WHERE property_id = ? ORDER BY created_at DESC"); $stmt->execute([$_SESSION['property_id']]); $maintenance_requests = $stmt->fetchAll(PDO::FETCH_ASSOC); } ?> <?php echo htmlspecialchars($app_name); ?> - Premium Edition

Default: admin / admin123

Overview

Dashboard

Analytics

Properties

Payments 0): ?>

Maintenance 0): ?>

Management

Add Property

Account

Logout

Monthly Revenue

Total Properties

Occupancy Rate

Pending Payments

Recent Properties

No Properties Yet

Start building your property portfolio

Property	Type	Tenant	Rent	Status	Actions

Total Collected

Approved Payments

Active Tenants

Pending Maintenance

Revenue Distribution

Payment Status Overview

Build Your Property Empire

Add properties to start generating rental income

Property Details	Type	Tenant Information	Monthly Rent	Payment Status	Actions

No Payment Records

Tenant payment submissions will appear here

Date	Property	Tenant	Amount	Reference	Proof	Status	Actions
					View No proof		Processed

No Maintenance Requests

Tenant maintenance requests will appear here

View Photo

Priority

Property Information

Property Name *

Property Type

City

Full Address

Financial Details

Monthly Rent () *

Deposit Amount ()

Lease Start Date

Lease End Date

Tenant Access (Optional)

Tenant Name

Tenant Email (Portal Login)

Tenant Phone

Tenant Password (Portal Access)

My Property:

Logout

Property Dashboard

Recent Properties

No Properties Yet

Business Analytics

Revenue Distribution

Payment Status Overview

Property Portfolio

Build Your Property Empire

Payment Management

No Payment Records

Maintenance Management

No Maintenance Requests

Add New Property

Property Information

Financial Details

Tenant Access (Optional)

My Property:

Rent Status

Upload Proof of Payment