$max_size) { return false; } $extension = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION)); $filename = $prefix . '_' . time() . '_' . uniqid() . '.' . $extension; if (move_uploaded_file($file['tmp_name'], $upload_dir . $filename)) { return $filename; } return false; } // === DATABASE SCHEMA === try { $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); // Security companies table $conn->exec("CREATE TABLE IF NOT EXISTS security_companies ( id INT AUTO_INCREMENT PRIMARY KEY, company_name VARCHAR(200) NOT NULL, psira_number VARCHAR(50), owner_name VARCHAR(150) NOT NULL, phone VARCHAR(20) NOT NULL, email VARCHAR(100), address TEXT, username VARCHAR(50) UNIQUE NOT NULL, password VARCHAR(255) NOT NULL, is_active TINYINT(1) DEFAULT 1, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, INDEX(username) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); // Security guards table $conn->exec("CREATE TABLE IF NOT EXISTS security_guards ( id INT AUTO_INCREMENT PRIMARY KEY, company_id INT NOT NULL, guard_name VARCHAR(150) NOT NULL, psira_number VARCHAR(50), psira_grade VARCHAR(10), id_number VARCHAR(20), phone VARCHAR(20) NOT NULL, guard_pin VARCHAR(10), photo_filename VARCHAR(255), employment_status ENUM('active','suspended','terminated') DEFAULT 'active', hourly_rate DECIMAL(10,2) DEFAULT 35.00, psira_expiry DATE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, INDEX(company_id) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); // Security sites table $conn->exec("CREATE TABLE IF NOT EXISTS security_sites ( id INT AUTO_INCREMENT PRIMARY KEY, company_id INT NOT NULL, site_name VARCHAR(200) NOT NULL, client_name VARCHAR(150) NOT NULL, client_phone VARCHAR(20), client_email VARCHAR(100), client_password VARCHAR(255), site_address TEXT NOT NULL, contract_value DECIMAL(10,2), is_active TINYINT(1) DEFAULT 1, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, INDEX(company_id) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); // Digital OB (Occurrence Book) table $conn->exec("CREATE TABLE IF NOT EXISTS security_ob_entries ( id INT AUTO_INCREMENT PRIMARY KEY, company_id INT NOT NULL, site_id INT NOT NULL, guard_id INT, entry_type ENUM('patrol','incident','visitor','handover','maintenance','other') DEFAULT 'patrol', description TEXT NOT NULL, severity ENUM('low','medium','high','critical') DEFAULT 'low', photo_filename VARCHAR(255), gps_location VARCHAR(100), client_notified TINYINT(1) DEFAULT 0, status ENUM('open','investigating','resolved','closed') DEFAULT 'open', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, INDEX(company_id), INDEX(site_id), INDEX(entry_type) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); // Shifts table $conn->exec("CREATE TABLE IF NOT EXISTS security_shifts ( id INT AUTO_INCREMENT PRIMARY KEY, company_id INT NOT NULL, site_id INT NOT NULL, guard_id INT NOT NULL, shift_date DATE NOT NULL, start_time TIME NOT NULL, end_time TIME NOT NULL, shift_status ENUM('scheduled','active','completed','no_show','cancelled') DEFAULT 'scheduled', check_in_time DATETIME, check_out_time DATETIME, hours_worked DECIMAL(5,2) DEFAULT 0.00, notes TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, INDEX(company_id), INDEX(guard_id), INDEX(shift_date) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); // Patrol checkpoints table $conn->exec("CREATE TABLE IF NOT EXISTS security_patrols ( id INT AUTO_INCREMENT PRIMARY KEY, company_id INT NOT NULL, site_id INT NOT NULL, guard_id INT NOT NULL, checkpoint_name VARCHAR(100) NOT NULL, patrol_time DATETIME NOT NULL, gps_lat VARCHAR(50), gps_long VARCHAR(50), photo_filename VARCHAR(255), notes TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, INDEX(company_id), INDEX(site_id), INDEX(patrol_time) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"); // Create default company $company_count = $conn->query("SELECT COUNT(*) FROM security_companies")->fetchColumn(); if ($company_count == 0) { $default_password = password_hash('security123', PASSWORD_DEFAULT); $conn->exec("INSERT INTO security_companies ( company_name, psira_number, owner_name, phone, username, password ) VALUES ( 'Titan Security Services', 'PSIRA-123456', 'Security Manager', '0821234567', 'demo', '$default_password' )"); // Add demo guard $conn->exec("INSERT INTO security_guards ( company_id, guard_name, psira_number, psira_grade, phone, guard_pin ) VALUES ( 1, 'John Mthembu', 'PSR654321', 'C', '0823456789', '1234' )"); // Add demo site $conn->exec("INSERT INTO security_sites ( company_id, site_name, client_name, client_phone, site_address, contract_value, client_email, client_password ) VALUES ( 1, 'Sandton Corporate Plaza', 'ABC Properties', '0115551234', '123 Rivonia Road, Sandton, Johannesburg', 45000.00, 'client@abc.com', 'client123' )"); } } catch (PDOException $e) { die("Database Setup Error: " . $e->getMessage()); } // === AUTHENTICATION === $user_type = $_SESSION['security_user_type'] ?? null; $user_id = $_SESSION['security_user_id'] ?? null; $company_name = $_SESSION['security_company_name'] ?? null; $msg = ""; $redirect_js = ""; // Login handler if (isset($_POST['login'])) { $username = trim($_POST['username']); $password = $_POST['password']; $login_type = $_POST['login_type']; if ($login_type === 'admin') { $stmt = $conn->prepare("SELECT * FROM security_companies WHERE username = ? AND is_active = 1"); $stmt->execute([$username]); $company = $stmt->fetch(PDO::FETCH_ASSOC); if ($company && password_verify($password, $company['password'])) { $_SESSION['security_user_type'] = 'admin'; $_SESSION['security_user_id'] = $company['id']; $_SESSION['security_company_name'] = $company['company_name']; $_SESSION['security_owner_name'] = $company['owner_name']; $redirect_js = ""; } else { $msg = "Invalid admin credentials."; } } else { // Client login $stmt = $conn->prepare("SELECT * FROM security_sites WHERE client_email = ? AND is_active = 1"); $stmt->execute([$username]); $site = $stmt->fetch(PDO::FETCH_ASSOC); if ($site && $site['client_password'] === $password) { $_SESSION['security_user_type'] = 'client'; $_SESSION['security_user_id'] = $site['id']; $_SESSION['security_site_name'] = $site['site_name']; $_SESSION['security_client_name'] = $site['client_name']; $redirect_js = ""; } else { $msg = "Invalid client credentials."; } } } // Logout handler if (isset($_GET['logout'])) { unset($_SESSION['security_user_type']); unset($_SESSION['security_user_id']); unset($_SESSION['security_company_name']); unset($_SESSION['security_owner_name']); unset($_SESSION['security_site_name']); unset($_SESSION['security_client_name']); $redirect_js = ""; } // === BUSINESS ACTIONS === if ($user_type === 'admin') { // Add Guard if (isset($_POST['add_guard'])) { try { $photo_filename = premium_file_upload('guard_photo', $upload_base, 'guard'); $stmt = $conn->prepare("INSERT INTO security_guards ( company_id, guard_name, psira_number, psira_grade, id_number, phone, guard_pin, photo_filename, hourly_rate, psira_expiry ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"); $stmt->execute([ $user_id, $_POST['guard_name'], $_POST['psira_number'], $_POST['psira_grade'], $_POST['id_number'] ?: null, $_POST['phone'], $_POST['guard_pin'], $photo_filename, $_POST['hourly_rate'] ?: 35.00, $_POST['psira_expiry'] ?: null ]); $redirect_js = ""; } catch (PDOException $e) { $msg = "Error: " . $e->getMessage(); } } // Add Site if (isset($_POST['add_site'])) { try { $client_password = $_POST['client_password'] ?: 'client123'; $stmt = $conn->prepare("INSERT INTO security_sites ( company_id, site_name, client_name, client_phone, client_email, site_address, contract_value, client_password ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)"); $stmt->execute([ $user_id, $_POST['site_name'], $_POST['client_name'], $_POST['client_phone'], $_POST['client_email'], $_POST['site_address'], $_POST['contract_value'] ?: null, $client_password ]); $redirect_js = ""; } catch (PDOException $e) { $msg = "Error: " . $e->getMessage(); } } // Log OB Entry if (isset($_POST['log_ob_entry'])) { try { $photo_filename = premium_file_upload('ob_photo', $upload_base, 'ob'); $stmt = $conn->prepare("INSERT INTO security_ob_entries ( company_id, site_id, guard_id, entry_type, description, severity, photo_filename, gps_location ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)"); $stmt->execute([ $user_id, $_POST['site_id'], $_POST['guard_id'] ?: null, $_POST['entry_type'], $_POST['description'], $_POST['severity'], $photo_filename, $_POST['gps_location'] ?: null ]); $redirect_js = ""; } catch (PDOException $e) { $msg = "Error: " . $e->getMessage(); } } // Schedule Shift if (isset($_POST['schedule_shift'])) { try { $start_time = $_POST['start_time']; $end_time = $_POST['end_time']; // Calculate hours $start = new DateTime($_POST['shift_date'] . ' ' . $start_time); $end = new DateTime($_POST['shift_date'] . ' ' . $end_time); if ($end < $start) { $end->modify('+1 day'); } $hours_worked = $end->diff($start)->h + ($end->diff($start)->i / 60); $stmt = $conn->prepare("INSERT INTO security_shifts ( company_id, site_id, guard_id, shift_date, start_time, end_time, hours_worked ) VALUES (?, ?, ?, ?, ?, ?, ?)"); $stmt->execute([ $user_id, $_POST['site_id'], $_POST['guard_id'], $_POST['shift_date'], $start_time, $end_time, $hours_worked ]); $redirect_js = ""; } catch (Exception $e) { $msg = "Error: " . $e->getMessage(); } } } // === DATA FETCHING === $guards = []; $sites = []; $ob_entries = []; $shifts = []; $patrols = []; $analytics = []; if ($db_connected && $user_type === 'admin') { // Get guards $stmt = $conn->prepare("SELECT * FROM security_guards WHERE company_id = ? AND employment_status = 'active' ORDER BY guard_name"); $stmt->execute([$user_id]); $guards = $stmt->fetchAll(PDO::FETCH_ASSOC); // Get sites $stmt = $conn->prepare("SELECT * FROM security_sites WHERE company_id = ? AND is_active = 1 ORDER BY site_name"); $stmt->execute([$user_id]); $sites = $stmt->fetchAll(PDO::FETCH_ASSOC); // Get recent OB entries $stmt = $conn->prepare("SELECT o.*, s.site_name, g.guard_name FROM security_ob_entries o JOIN security_sites s ON o.site_id = s.id LEFT JOIN security_guards g ON o.guard_id = g.id WHERE o.company_id = ? ORDER BY o.created_at DESC LIMIT 50"); $stmt->execute([$user_id]); $ob_entries = $stmt->fetchAll(PDO::FETCH_ASSOC); // Get today's shifts $today = date('Y-m-d'); $stmt = $conn->prepare("SELECT sh.*, g.guard_name, s.site_name FROM security_shifts sh JOIN security_guards g ON sh.guard_id = g.id JOIN security_sites s ON sh.site_id = s.id WHERE sh.company_id = ? AND sh.shift_date = ? ORDER BY sh.start_time"); $stmt->execute([$user_id, $today]); $shifts = $stmt->fetchAll(PDO::FETCH_ASSOC); // Calculate analytics $guards_on_duty = count(array_filter($shifts, function($s) { return $s['shift_status'] === 'active'; })); $critical_incidents = count(array_filter($ob_entries, function($o) { return $o['severity'] === 'critical'; })); $total_contract_value = array_sum(array_column($sites, 'contract_value')); $ob_entries_today = count(array_filter($ob_entries, function($o) use ($today) { return date('Y-m-d', strtotime($o['created_at'])) === $today; })); $analytics = [ 'total_guards' => count($guards), 'total_sites' => count($sites), 'guards_on_duty' => $guards_on_duty, 'critical_incidents' => $critical_incidents, 'total_contract_value' => $total_contract_value, 'ob_entries_today' => $ob_entries_today, 'shifts_today' => count($shifts) ]; } elseif ($db_connected && $user_type === 'client') { // Get client's site OB entries $stmt = $conn->prepare("SELECT * FROM security_ob_entries WHERE site_id = ? ORDER BY created_at DESC LIMIT 30"); $stmt->execute([$user_id]); $ob_entries = $stmt->fetchAll(PDO::FETCH_ASSOC); } ?> <?php echo htmlspecialchars($app_name); ?> - Security Operations Command

Demo: Admin demo / security123 | Client client@abc.com / client123

Operations

Command Center

Digital OB 0): ?>

Security Guards

Client Sites

Shift Roster

Account

Logout

PSIRA Registered | Active Guards

Total Contract Value

Guards On Duty

Active Sites

OB Entries Today

Critical Incidents

Live Digital Occurrence Book

Digital OB Ready

No entries logged today. All sites secure.

-

View Evidence

Log New OB Entry

Site Location *

Guard on Duty

Entry Type

Severity Level

Detailed Description *

Evidence Photo (Optional)

GPS Location (Optional)

Register New Security Guard

Personal Information

Full Name *

ID Number

Phone Number *

PSIRA Registration

PSIRA Registration Number *

PSIRA Grade

PSIRA Expiry Date

Hourly Rate ()

Guard PIN (for mobile check-ins) *

Profile Photo

Build Your Security Team

Add PSIRA-registered guards to your workforce

Guard Details	PSIRA Registration	Contact	Hourly Rate	Status
PIN:	Grade \| Expires:		/hr

Expand Your Security Contracts

Add client sites to grow your security business

Site Details	Client Information	Location	Contract Value	Portal Access
		...	/month	Client Portal Active

Schedule New Shift

Select Guard *

Select Site *

Shift Date *

Shift Duration

Start Time *

End Time *

Today's Shift Schedule

No Shifts Scheduled Today

Schedule shifts to manage your security operations

Guard	Site	Shift Time	Hours	Status	Check In/Out
		-	h

Site Security Portal

Logout

Welcome to your secure client portal. View recent security activity and occurrence book entries for your site.

Recent Security Activity

All Secure

No security incidents or activities to report. Your site is secure.

Report

Priority

Professional Security Services

Your security is managed by PSIRA-registered professionals with real-time monitoring and digital occurrence book tracking.

Security Operations Center

Live Digital Occurrence Book

Digital OB Ready

-

Digital Occurrence Book