Product	Qty	Price	Total
+ + + + +

Date	Activity	Points
	+ 'fa-plus-circle', + 'redeem' => 'fa-gift', + 'tier_upgrade' => 'fa-arrow-up', + 'birthday_bonus' => 'fa-birthday-cake', + 'referral_bonus', 'referral_welcome' => 'fa-user-plus', + default => 'fa-circle' + }; + ?> + + +	+ 0 ? '+' : '' ?> +

Date	Description	Type	Amount	Balance
		+ 'fa-arrow-down', + 'purchase', 'withdrawal' => 'fa-arrow-up', + default => 'fa-exchange-alt' + }; + $typeColor = $tx['amount'] > 0 ? 'success' : 'error'; + ?> + + + +	+ 0 ? '+' : '' ?> +

Name	Slug	Products	Status	Actions
No categories yet. Create one above.
		+ 0): ?> + + products + + + 0 products + +	+ + Active + + Hidden + +	+ + + + + + +
Uncategorized	-	+ products +	Default

Code	Discount	Min Order	Usage	Expires	Status	Actions
No coupons created yet
	+ + % off + + off + +		+ +	+ + + + + + + + Never + +	+ + Disabled + + Expired + + Maxed Out + + Active + +	+ + + + + + + + + + + +

Customer	Phone	Orders	Total Spent	Wallet	Points	Status	Actions
No customers found
+ + +				+ + + +		+ + Active + + Inactive + +	+ + + + + + + +

Code	Recipient	Initial	Balance	Status	Created	Actions
No gift cards found
			+ + $0.00 + + + +	+ + Disabled + + Depleted + + Active + +		+ + + + + + +

+ +

+ + +

+ +

+ + +

+ +

+ + +

+ +

diff --git a/admin/index.php b/admin/index.php new file mode 100644 index 0000000..0dcbaa6 --- /dev/null +++ b/admin/index.php @@ -0,0 +1,197 @@ +count('orders'); +$todayOrders = db()->count('orders', 'DATE(created_at) = CURDATE()'); +$totalRevenue = db()->fetch("SELECT COALESCE(SUM(total), 0) as total FROM orders WHERE payment_status = 'paid'")['total'] ?? 0; +$todayRevenue = db()->fetch("SELECT COALESCE(SUM(total), 0) as total FROM orders WHERE payment_status = 'paid' AND DATE(created_at) = CURDATE()")['total'] ?? 0; +$totalCustomers = db()->count('customers'); +$totalProducts = db()->count('products', 'is_active = 1'); +$lowStockProducts = db()->count('products', 'stock <= low_stock_threshold AND is_active = 1'); +$pendingOrders = db()->count('orders', "order_status = 'pending'"); + +// Recent orders +$recentOrders = db()->fetchAll( + "SELECT * FROM orders ORDER BY created_at DESC LIMIT 10" +); + +// Low stock products +$lowStockItems = db()->fetchAll( + "SELECT * FROM products WHERE stock <= low_stock_threshold AND is_active = 1 ORDER BY stock ASC LIMIT 5" +); +?> + + + + +

+ +

Today's Revenue

+ +

Today's Orders

+ +

Total Customers

+ +

Pending Orders

+ +

Recent Orders

+ View All +

+ + + + + + + + + + + + + + + + + + + + + + + + + + + +

Order	Customer	Total	Status	Date
+ No orders yet +
+ + + +			+ 'warning', + 'confirmed', 'processing' => 'primary', + 'shipped', 'delivered' => 'success', + 'cancelled', 'refunded' => 'error', + default => 'primary' + }; + ?> + + + +

+ + +

+ +

Overview

+ Total Revenue + +

+ Total Orders + +

+ Active Products + +

+ Low Stock Items + +

+ + + +

+ Low Stock +

+ +

+ + left +

+ + + Manage Inventory + +

+ + + +

Quick Actions

+ + Add Product + + + Open POS + + + Pending Orders + +

+ + diff --git a/admin/integrations.php b/admin/integrations.php new file mode 100644 index 0000000..d30f70f --- /dev/null +++ b/admin/integrations.php @@ -0,0 +1,523 @@ + ['sendgrid_api_key', 'sendgrid_from_email', 'sendgrid_from_name', 'email_notifications_enabled'], + 'twilio' => ['twilio_account_sid', 'twilio_auth_token', 'twilio_phone_number', 'sms_notifications_enabled'], + 'push' => ['vapid_public_key', 'vapid_private_key', 'push_notifications_enabled'], + 'loyalty' => ['loyalty_enabled'] + ]; + + if (isset($settingsMap[$section])) { + foreach ($settingsMap[$section] as $key) { + $value = $_POST[$key] ?? ''; + + // Check if setting exists + $existing = db()->fetch("SELECT id FROM settings WHERE setting_key = :key", ['key' => $key]); + + if ($existing) { + db()->query( + "UPDATE settings SET setting_value = :value, updated_at = NOW() WHERE setting_key = :key", + ['value' => $value, 'key' => $key] + ); + } else { + db()->insert('settings', [ + 'setting_key' => $key, + 'setting_value' => $value + ]); + } + } + + setFlash('success', ucfirst($section) . ' settings saved successfully!'); + } + + redirect('/admin/integrations.php'); +} + +// Load current settings +$settings = []; +$allSettings = db()->fetchAll("SELECT setting_key, setting_value FROM settings"); +foreach ($allSettings as $s) { + $settings[$s['setting_key']] = $s['setting_value']; +} +?> + + + + + + +

+ +

+ + + +

+ +

SendGrid Email

+ Send transactional emails (order confirmations, shipping updates, etc.) +

+ + + + +

+ + +

+ SendGrid API Key + +

+ Get your API key from + SendGrid Dashboard +

+ +

+ From Email + +

+ From Name + "> +

+ +

+ + > + Enable email notifications + +

+ +

+ + +

+ +

Twilio SMS

+ Send SMS notifications for orders, shipping updates, and promotions +

+ + + + +

+ +

+ + +

+ +

Push Notifications

+ Web push notifications for order updates and promotions +

+ + + + +

+ +

+ + +

+ +

Loyalty Program

+ Reward customers with points and tiers (Bronze, Silver, Gold, Platinum) +

+ + + + +

+ + +

+ + > + Enable loyalty program + +

+ +

Tier Structure

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

Tier	Min Points	Multiplier	Key Benefits
Bronze Bean	0	1x	1 point/$1, Birthday reward
Silver Roast	500	1.25x	Free shipping $25+, Double points weekends
Gold Blend	1,500	1.5x	Free shipping all orders, Priority support
Platinum Reserve	5,000	2x	Express shipping, VIP events, Account manager

+ 100 points = $1 credit • Points earned on every purchase +

+ + +

+ + + + + + + diff --git a/admin/inventory.php b/admin/inventory.php new file mode 100644 index 0000000..eef142d --- /dev/null +++ b/admin/inventory.php @@ -0,0 +1,337 @@ +fetch("SELECT name, stock FROM products WHERE product_id = :id", ['id' => $_POST['product_id']]); + $newStock = max(0, ($product['stock'] ?? 0) + $adjustment); + + db()->update('products', ['stock' => $newStock], 'product_id = :id', ['id' => $_POST['product_id']]); + setFlash('success', $product['name'] . ' stock adjusted by ' . ($adjustment > 0 ? '+' : '') . $adjustment . '. New stock: ' . $newStock); + } + header('Location: /admin/inventory.php'); + exit; + } + + if ($action === 'update_threshold' && !empty($_POST['product_id'])) { + $threshold = intval($_POST['low_stock_threshold'] ?? 10); + db()->update('products', ['low_stock_threshold' => $threshold], 'product_id = :id', ['id' => $_POST['product_id']]); + setFlash('success', 'Low stock threshold updated'); + header('Location: /admin/inventory.php'); + exit; + } + + if ($action === 'bulk_adjust') { + $adjustments = $_POST['adjustments'] ?? []; + $count = 0; + foreach ($adjustments as $productId => $adj) { + $adj = intval($adj); + if ($adj != 0) { + db()->query( + "UPDATE products SET stock = GREATEST(0, stock + :adj) WHERE product_id = :id", + ['adj' => $adj, 'id' => $productId] + ); + $count++; + } + } + if ($count > 0) { + setFlash('success', "Adjusted stock for $count products"); + } + header('Location: /admin/inventory.php'); + exit; + } +} + +// Filters +$filter = $_GET['filter'] ?? ''; +$search = $_GET['search'] ?? ''; +$category = $_GET['category'] ?? ''; + +$where = ['1=1']; +$params = []; + +if ($search) { + $where[] = '(name LIKE :search OR sku LIKE :search OR barcode LIKE :search)'; + $params['search'] = '%' . $search . '%'; +} + +if ($category) { + $where[] = 'category = :category'; + $params['category'] = $category; +} + +if ($filter === 'low') { + $where[] = 'stock <= low_stock_threshold AND stock > 0'; +} elseif ($filter === 'out') { + $where[] = 'stock <= 0'; +} elseif ($filter === 'in') { + $where[] = 'stock > low_stock_threshold'; +} + +$whereClause = implode(' AND ', $where); + +$products = db()->fetchAll( + "SELECT product_id, name, sku, barcode, category, stock, low_stock_threshold, price, is_active + FROM products + WHERE {$whereClause} + ORDER BY stock ASC, name ASC", + $params +); + +// Get categories for filter +$categories = db()->fetchAll( + "SELECT DISTINCT category FROM products WHERE category IS NOT NULL AND category != '' ORDER BY category" +); + +// Stats +$totalProducts = db()->count('products', 'is_active = 1'); +$lowStockCount = db()->count('products', 'stock <= low_stock_threshold AND stock > 0 AND is_active = 1'); +$outOfStockCount = db()->count('products', 'stock <= 0 AND is_active = 1'); +$totalStock = db()->fetch("SELECT SUM(stock) as total FROM products WHERE is_active = 1")['total'] ?? 0; +$inventoryValue = db()->fetch("SELECT SUM(stock * price) as total FROM products WHERE is_active = 1")['total'] ?? 0; +?> + + + + +

+ + + +

Total Units

Inventory Value

Low Stock

Out of Stock

+ + +

+ +

+ + + + + +

+ products +

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

Product	SKU / Barcode	Category	Stock	Threshold	Status	Actions
No products found
+ + + Inactive + +	+ + + + + + + + - + +		+ + + + +	+ +	+ + Out of Stock + + Low Stock + + In Stock + +	+ + + + +

+ + + + + + + diff --git a/admin/login.php b/admin/login.php new file mode 100644 index 0000000..4c1f4b7 --- /dev/null +++ b/admin/login.php @@ -0,0 +1,68 @@ + + + + + + +Admin Login — Tom's Java Jive + + + + +

☕ Tom's Java Jive

Admin Panel

+ +

⚠

+ + + ← Back to Store +

+ + diff --git a/admin/logout.php b/admin/logout.php new file mode 100644 index 0000000..db5e9b3 --- /dev/null +++ b/admin/logout.php @@ -0,0 +1,10 @@ +fetch("SELECT * FROM orders WHERE order_id = :id", ['id' => $orderId]); + +if (!$order) { + setFlash('error', 'Order not found'); + header('Location: /admin/orders.php'); + exit; +} + +// Handle status update +if ($_SERVER['REQUEST_METHOD'] === 'POST') { + $action = $_POST['action'] ?? ''; + + if ($action === 'update_status') { + $status = $_POST['status'] ?? ''; + $trackingNumber = $_POST['tracking_number'] ?? ''; + + $updateData = ['order_status' => $status]; + if ($trackingNumber) { + $updateData['tracking_number'] = $trackingNumber; + } + + db()->update('orders', $updateData, 'order_id = :id', ['id' => $orderId]); + setFlash('success', 'Order status updated'); + header('Location: /admin/order.php?id=' . $orderId); + exit; + } + + if ($action === 'add_note') { + $note = trim($_POST['note'] ?? ''); + if ($note) { + $existingNotes = $order['notes'] ?? ''; + $newNote = '[' . date('M j, Y g:i A') . '] ' . $note; + $allNotes = $existingNotes ? $existingNotes . "\n" . $newNote : $newNote; + + db()->update('orders', ['notes' => $allNotes], 'order_id = :id', ['id' => $orderId]); + setFlash('success', 'Note added'); + header('Location: /admin/order.php?id=' . $orderId); + exit; + } + } +} + +$items = json_decode($order['items'], true) ?? []; +$shippingAddress = json_decode($order['shipping_address'], true) ?? []; + +$statuses = ['pending', 'confirmed', 'processing', 'shipped', 'delivered', 'cancelled', 'refunded']; +?> + + + + +

+ + +

+ +

Order Items

+ + + + + + + + + + + + + + + + + + + + + + + + + 0): ?> + + + + + + 0): ?> + + + + + + 0): ?> + + + + + + + + + + +

Product	Price	Qty	Total
+ + + + + + + +
Subtotal
Shipping
Tax
Discount			-
Total

+ + +

Order Notes

+ +

No notes yet.

+ + + +

+ + +

+ +

Order Status

+ +

+ + +

Customer

+ +

+ + + + + View Customer + + +

+ + + +

Shipping Address

+
+ , + + +

+ + + +

Payment

+ Method + +

+ Status + 'success', + 'failed' => 'error', + 'refunded' => 'warning', + default => 'primary' + }; + ?> + +

+ +

+ Stripe ID + ... +

+ +

+ + +

Timeline

+ Created + +

+ +

+ Updated + +

+ +

+ + diff --git a/admin/orders.php b/admin/orders.php new file mode 100644 index 0000000..e03091c --- /dev/null +++ b/admin/orders.php @@ -0,0 +1,279 @@ + $status]; + if ($trackingNumber) { + $updateData['tracking_number'] = $trackingNumber; + } + + db()->update('orders', $updateData, 'order_id = :id', ['id' => $orderId]); + setFlash('success', 'Order status updated'); + header('Location: /admin/orders.php'); + exit; + } +} + +// Filters +$status = $_GET['status'] ?? ''; +$search = $_GET['search'] ?? ''; +$dateFrom = $_GET['date_from'] ?? ''; +$dateTo = $_GET['date_to'] ?? ''; +$page = max(1, intval($_GET['page'] ?? 1)); + +// Build query +$where = ['1=1']; +$params = []; + +if ($status) { + $where[] = 'order_status = :status'; + $params['status'] = $status; +} + +if ($search) { + $where[] = '(order_number LIKE :search OR customer_name LIKE :search OR customer_email LIKE :search)'; + $params['search'] = '%' . $search . '%'; +} + +if ($dateFrom) { + $where[] = 'DATE(created_at) >= :date_from'; + $params['date_from'] = $dateFrom; +} + +if ($dateTo) { + $where[] = 'DATE(created_at) <= :date_to'; + $params['date_to'] = $dateTo; +} + +$whereClause = implode(' AND ', $where); + +// Get total and paginate +$totalOrders = db()->count('orders', $whereClause, $params); +$pagination = paginate($totalOrders, $page, ADMIN_ITEMS_PER_PAGE); + +// Get orders +$orders = db()->fetchAll( + "SELECT * FROM orders WHERE {$whereClause} ORDER BY created_at DESC LIMIT :limit OFFSET :offset", + array_merge($params, ['limit' => $pagination['per_page'], 'offset' => $pagination['offset']]) +); + +$statuses = ['pending', 'confirmed', 'processing', 'shipped', 'delivered', 'cancelled', 'refunded']; +?> + + + + +

+ + +

+ + + +

+ +

+ + +

+ orders found +

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

Order	Customer	Items	Total	Payment	Status	Date	Actions
+ No orders found +
+ + + POS + +	+ + +	item		+ 'success', + 'failed' => 'error', + 'refunded' => 'warning', + default => 'primary' + }; + ?> + + + +	+ 'warning', + 'confirmed', 'processing' => 'primary', + 'shipped', 'delivered' => 'success', + 'cancelled', 'refunded' => 'error', + default => 'primary' + }; + ?> + + + +		+ + + + +

+ + + 1): ?> +

+ +

+ + + + + + + + diff --git a/admin/payments.php b/admin/payments.php new file mode 100644 index 0000000..2c96e61 --- /dev/null +++ b/admin/payments.php @@ -0,0 +1,169 @@ + isset($_POST['stripe_enabled']), + 'test_mode' => isset($_POST['stripe_test_mode']), + 'publishable_key' => trim($_POST['stripe_publishable_key'] ?? ''), + 'secret_key' => trim($_POST['stripe_secret_key'] ?? ''), + 'webhook_secret' => trim($_POST['stripe_webhook_secret'] ?? '') + ]); + setFlash('success', 'Stripe settings updated'); + } + + if ($section === 'methods') { + setSetting('payment_methods', [ + 'card' => isset($_POST['method_card']), + 'cash' => isset($_POST['method_cash']), + 'wallet' => isset($_POST['method_wallet']), + 'gift_card' => isset($_POST['method_gift_card']) + ]); + setFlash('success', 'Payment methods updated'); + } + + header('Location: /admin/payments.php'); + exit; +} + +$stripe = getSetting('payment_stripe', [ + 'enabled' => true, + 'test_mode' => true, + 'publishable_key' => '', + 'secret_key' => '', + 'webhook_secret' => '' +]); + +$methods = getSetting('payment_methods', [ + 'card' => true, + 'cash' => true, + 'wallet' => true, + 'gift_card' => true +]); +?> + + + + +

+ + +

+ General + Shipping + Payments + Emails +

+ +

Stripe

+ + > + Enable Stripe payments + +

+ +

+ + > + Test mode (use test keys) + +

+ +

+ Publishable Key + +

+ +

+ Secret Key + +

+ +

+ Webhook Secret + + Get this from your Stripe webhook settings +

+ + +

+ +

POS Payment Methods

Select which payment methods are available in the Point of Sale system.

+ +

+ + > + Card (Terminal) + +

+ +

+ + > + Cash + +

+ +

+ + > + Customer Wallet + +

+ +

+ + > + Gift Card + +

+ + +

+ + diff --git a/admin/pos.php b/admin/pos.php new file mode 100644 index 0000000..44b018f --- /dev/null +++ b/admin/pos.php @@ -0,0 +1,1386 @@ +fetchAll( + "SELECT product_id, name, price, sale_price, stock, images, category, barcode, sku + FROM products WHERE is_active = 1 ORDER BY category, name" +); + +// Group products by category +$productsByCategory = []; +foreach ($products as $product) { + $cat = $product['category'] ?? 'Other'; + if (!isset($productsByCategory[$cat])) { + $productsByCategory[$cat] = []; + } + $product['images'] = json_decode($product['images'] ?? '[]', true); + $product['display_price'] = $product['sale_price'] ?? $product['price']; + $productsByCategory[$cat][] = $product; +} + +// Get held orders +$heldOrders = $_SESSION['pos_held_orders'] ?? []; + +// Get tax rate from settings +$taxRate = getSetting('tax_rate', 0) / 100; +?> + + + +

+ +

+ + +

+ +

+ + + + +

+ +

No products available

+ Add Products +

+ + 0 && $product['stock'] <= 5; + ?> +

+ +

+ + +

Current Sale

+ +

Add products to start a sale

+ + +

+ +

+ Subtotal + $0.00 +

+ +

+ Tax (%) + $0.00 +

+ Total + $0.00 +

+ +

+ + + +

+ + + + + + + + + + + + + + + + diff --git a/admin/product-edit.php b/admin/product-edit.php new file mode 100644 index 0000000..9876b22 --- /dev/null +++ b/admin/product-edit.php @@ -0,0 +1,293 @@ +fetch("SELECT * FROM products WHERE product_id = :id", ['id' => $productId]); + if ($product) { + $isEdit = true; + $pageTitle = 'Edit Product'; + $product['images'] = json_decode($product['images'] ?? '[]', true); + $product['tags'] = json_decode($product['tags'] ?? '[]', true); + } +} + +if (!$product) { + $product = [ + 'product_id' => '', + 'name' => '', + 'description' => '', + 'price' => '', + 'sale_price' => '', + 'cost_price' => '', + 'sku' => '', + 'barcode' => '', + 'category' => '', + 'tags' => [], + 'images' => [], + 'stock' => 100, + 'low_stock_threshold' => 10, + 'weight' => '', + 'is_active' => 1, + 'is_featured' => 0 + ]; + $pageTitle = 'Add Product'; +} + +// Handle form submission +if ($_SERVER['REQUEST_METHOD'] === 'POST') { + $name = trim($_POST['name'] ?? ''); + $description = trim($_POST['description'] ?? ''); + $price = floatval($_POST['price'] ?? 0); + $salePrice = !empty($_POST['sale_price']) ? floatval($_POST['sale_price']) : null; + $costPrice = !empty($_POST['cost_price']) ? floatval($_POST['cost_price']) : null; + $sku = trim($_POST['sku'] ?? ''); + $barcode = trim($_POST['barcode'] ?? ''); + $category = trim($_POST['category'] ?? ''); + $stock = intval($_POST['stock'] ?? 0); + $lowStockThreshold = intval($_POST['low_stock_threshold'] ?? 10); + $weight = !empty($_POST['weight']) ? floatval($_POST['weight']) : null; + $isActive = isset($_POST['is_active']) ? 1 : 0; + $isFeatured = isset($_POST['is_featured']) ? 1 : 0; + $imageUrls = array_filter(array_map('trim', explode("\n", $_POST['image_urls'] ?? ''))); + + // Validate + if (empty($name)) $errors['name'] = 'Product name is required'; + if ($price <= 0) $errors['price'] = 'Price must be greater than 0'; + + if (empty($errors)) { + $data = [ + 'name' => $name, + 'description' => $description, + 'price' => $price, + 'sale_price' => $salePrice, + 'cost_price' => $costPrice, + 'sku' => $sku ?: null, + 'barcode' => $barcode ?: null, + 'category' => $category ?: null, + 'images' => json_encode($imageUrls), + 'stock' => $stock, + 'low_stock_threshold' => $lowStockThreshold, + 'weight' => $weight, + 'is_active' => $isActive, + 'is_featured' => $isFeatured + ]; + + if ($isEdit) { + db()->update('products', $data, 'product_id = :id', ['id' => $productId]); + setFlash('success', 'Product updated successfully'); + } else { + $data['product_id'] = generateId('prod_'); + db()->insert('products', $data); + setFlash('success', 'Product created successfully'); + } + + header('Location: /admin/products.php'); + exit; + } + + // Keep form values on error + $product = array_merge($product, $_POST); + $product['images'] = $imageUrls; +} + +// Get categories for dropdown +$categories = db()->fetchAll( + "SELECT DISTINCT category FROM products WHERE category IS NOT NULL AND category != '' ORDER BY category" +); +?> + + + + +

+ + Please fix the errors below +

+ + +

+ +

Basic Information

+ Product Name * + + + + +

+ +

+ Description + +

+ +

+ Category + + +

+ +

+ Weight (oz) + +

+ +

Pricing

+ Price * + + + + +

+ +

+ Sale Price + +

+ +

+ Cost Price (for profit tracking) + +

+ +

Images

+ Image URLs (one per line) + + Enter full URLs to product images +

+ + +

+ + Product image

+ +

+ + +

Status

+ + > + Active (visible in store) + +

+ +

+ + > + Featured product + +

+ +

Inventory

+ Stock Quantity + +

+ +

+ Low Stock Alert Threshold + +

+ +

Identifiers

+ SKU + +

+ +

+ Barcode + +

+ + +

+ + diff --git a/admin/products.php b/admin/products.php new file mode 100644 index 0000000..844432c --- /dev/null +++ b/admin/products.php @@ -0,0 +1,290 @@ +delete('products', 'product_id = :id', ['id' => $_POST['product_id']]); + setFlash('success', 'Product deleted successfully'); + header('Location: /admin/products.php'); + exit; + } + + if ($action === 'bulk_delete' && !empty($_POST['product_ids'])) { + $ids = $_POST['product_ids']; + $placeholders = implode(',', array_fill(0, count($ids), '?')); + db()->query("DELETE FROM products WHERE product_id IN ($placeholders)", $ids); + setFlash('success', count($ids) . ' products deleted'); + header('Location: /admin/products.php'); + exit; + } + + if ($action === 'toggle_status' && !empty($_POST['product_id'])) { + $product = db()->fetch("SELECT is_active FROM products WHERE product_id = :id", ['id' => $_POST['product_id']]); + if ($product) { + db()->update('products', ['is_active' => !$product['is_active']], 'product_id = :id', ['id' => $_POST['product_id']]); + setFlash('success', 'Product status updated'); + } + header('Location: /admin/products.php'); + exit; + } +} + +// Filters +$search = $_GET['search'] ?? ''; +$category = $_GET['category'] ?? ''; +$status = $_GET['status'] ?? ''; +$page = max(1, intval($_GET['page'] ?? 1)); + +// Build query +$where = ['1=1']; +$params = []; + +if ($search) { + $where[] = '(name LIKE :search OR sku LIKE :search)'; + $params['search'] = '%' . $search . '%'; +} + +if ($category) { + $where[] = 'category = :category'; + $params['category'] = $category; +} + +if ($status === 'active') { + $where[] = 'is_active = 1'; +} elseif ($status === 'inactive') { + $where[] = 'is_active = 0'; +} elseif ($status === 'low_stock') { + $where[] = 'stock <= low_stock_threshold'; +} + +$whereClause = implode(' AND ', $where); + +// Get total and paginate +$totalProducts = db()->count('products', $whereClause, $params); +$pagination = paginate($totalProducts, $page, ADMIN_ITEMS_PER_PAGE); + +// Get products +$products = db()->fetchAll( + "SELECT * FROM products WHERE {$whereClause} ORDER BY created_at DESC LIMIT :limit OFFSET :offset", + array_merge($params, ['limit' => $pagination['per_page'], 'offset' => $pagination['offset']]) +); + +// Get categories +$categories = db()->fetchAll( + "SELECT DISTINCT category FROM products WHERE category IS NOT NULL AND category != '' ORDER BY category" +); +?> + + + + +

+ + +

+ + + +

+ +

+ + +

+ products found + +

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ +	Image	Product	SKU	Category	Price	Stock	Status	Actions
+ No products found +
+ +	+ +	+ + + Featured + +			+ + + + + + + + +	+ + Out of Stock + + left + + + +	+ + Active + + Inactive + +	+ + + + + + + + + + + + + +

+ + + 1): ?> +

+ +

+ + + + + diff --git a/admin/reviews.php b/admin/reviews.php new file mode 100644 index 0000000..13f9225 --- /dev/null +++ b/admin/reviews.php @@ -0,0 +1,198 @@ +update('reviews', ['is_approved' => 1], 'review_id = :id', ['id' => $reviewId]); + setFlash('success', 'Review approved'); + } + + if ($action === 'reject' && $reviewId) { + db()->update('reviews', ['is_approved' => 0], 'review_id = :id', ['id' => $reviewId]); + setFlash('success', 'Review rejected'); + } + + if ($action === 'delete' && $reviewId) { + db()->delete('reviews', 'review_id = :id', ['id' => $reviewId]); + setFlash('success', 'Review deleted'); + } + + header('Location: /admin/reviews.php'); + exit; +} + +// Filters +$status = $_GET['status'] ?? ''; +$rating = $_GET['rating'] ?? ''; + +$where = ['1=1']; +$params = []; + +if ($status === 'pending') { + $where[] = 'is_approved = 0'; +} elseif ($status === 'approved') { + $where[] = 'is_approved = 1'; +} + +if ($rating) { + $where[] = 'rating = :rating'; + $params['rating'] = $rating; +} + +$whereClause = implode(' AND ', $where); + +$reviews = db()->fetchAll( + "SELECT r.*, p.name as product_name FROM reviews r + LEFT JOIN products p ON r.product_id = p.product_id + WHERE {$whereClause} ORDER BY r.created_at DESC LIMIT 100", + $params +); + +// Stats +$totalReviews = db()->count('reviews'); +$pendingReviews = db()->count('reviews', 'is_approved = 0'); +$avgRating = db()->fetch("SELECT AVG(rating) as avg FROM reviews WHERE is_approved = 1")['avg'] ?? 0; +?> + + + + +

+ + + +

Average Rating

Total Reviews

Pending Approval

+ + +

+ +

+ + +

+ +

+ No reviews found +

+ + +

+ + + Verified Purchase + + + Pending + +

+ on + • +

+ + + + + + +

+ +

+ + + +

+ + +

+ +

+ + +

+ + diff --git a/admin/settings.php b/admin/settings.php new file mode 100644 index 0000000..a194871 --- /dev/null +++ b/admin/settings.php @@ -0,0 +1,233 @@ + trim($_POST['store_name'] ?? ''), + 'email' => trim($_POST['store_email'] ?? ''), + 'phone' => trim($_POST['store_phone'] ?? ''), + 'address' => trim($_POST['store_address'] ?? ''), + 'currency' => $_POST['currency'] ?? 'USD', + 'timezone' => $_POST['timezone'] ?? 'America/New_York' + ]); + setFlash('success', 'Store settings updated'); + } + + if ($section === 'tax') { + setSetting('tax', [ + 'enabled' => isset($_POST['tax_enabled']), + 'rate' => floatval($_POST['tax_rate'] ?? 0), + 'included_in_price' => isset($_POST['tax_included']) + ]); + setFlash('success', 'Tax settings updated'); + } + + if ($section === 'checkout') { + setSetting('checkout', [ + 'guest_checkout' => isset($_POST['guest_checkout']), + 'require_phone' => isset($_POST['require_phone']), + 'order_notes' => isset($_POST['order_notes']), + 'terms_required' => isset($_POST['terms_required']), + 'terms_url' => trim($_POST['terms_url'] ?? '') + ]); + setFlash('success', 'Checkout settings updated'); + } + + header('Location: /admin/settings.php'); + exit; +} + +// Get current settings +$store = getSetting('store', [ + 'name' => "Tom's Java Jive", + 'email' => '', + 'phone' => '', + 'address' => '', + 'currency' => 'USD', + 'timezone' => 'America/New_York' +]); + +$tax = getSetting('tax', [ + 'enabled' => false, + 'rate' => 0, + 'included_in_price' => false +]); + +$checkout = getSetting('checkout', [ + 'guest_checkout' => true, + 'require_phone' => false, + 'order_notes' => true, + 'terms_required' => false, + 'terms_url' => '' +]); +?> + + + + +

+ + +

+ +

+ General + Shipping + Payments + Emails +

+ + +

+ +

General Settings

+ Store Name + +

+ +

+ Store Email + +

+ Store Phone + +

+ +

+ Store Address + +

+ +

+ Currency + +

+ Timezone + +

+ + +

+ + + + + +

+ +

Checkout Settings

+ + > + Allow guest checkout + +

+ +

+ + > + Require phone number + +

+ +

+ + > + Allow order notes + +

+ +

+ + > + Require terms acceptance + +

+ +

+ Terms & Conditions URL + +

+ + +

+ + diff --git a/admin/shipping.php b/admin/shipping.php new file mode 100644 index 0000000..de20dae --- /dev/null +++ b/admin/shipping.php @@ -0,0 +1,124 @@ + isset($_POST['flat_rate_enabled']), + 'flat_rate_amount' => floatval($_POST['flat_rate_amount'] ?? 0), + 'free_shipping_enabled' => isset($_POST['free_shipping_enabled']), + 'free_shipping_threshold' => floatval($_POST['free_shipping_threshold'] ?? 0), + 'local_pickup_enabled' => isset($_POST['local_pickup_enabled']), + 'processing_time' => trim($_POST['processing_time'] ?? '') + ]); + setFlash('success', 'Shipping settings updated'); + header('Location: /admin/shipping.php'); + exit; +} + +$shipping = getSetting('shipping', [ + 'flat_rate_enabled' => true, + 'flat_rate_amount' => 5.99, + 'free_shipping_enabled' => true, + 'free_shipping_threshold' => 50, + 'local_pickup_enabled' => false, + 'processing_time' => '1-2 business days' +]); +?> + + + + +

+ + +

+ General + Shipping + Payments + Emails +

+ +

Shipping Methods

+ +

+ + > + Flat Rate Shipping + +

+ Flat Rate Amount +

+ $ + +

+ + +

+ + > + Free Shipping (Threshold) + +

+ Minimum Order for Free Shipping +

+ $ + +

+ + +

+ + > + Local Pickup + + Allow customers to pick up orders at your location +

+ + +

+ Processing Time + + Displayed to customers during checkout +

+ + +

+ + diff --git a/admin/users.php b/admin/users.php new file mode 100644 index 0000000..eb609c8 --- /dev/null +++ b/admin/users.php @@ -0,0 +1,267 @@ + isset($_POST['perm_dashboard']), + 'pos' => isset($_POST['perm_pos']), + 'products' => isset($_POST['perm_products']), + 'orders' => isset($_POST['perm_orders']), + 'customers' => isset($_POST['perm_customers']), + 'settings_payment' => isset($_POST['perm_settings']), + 'settings_shipping' => isset($_POST['perm_settings']), + 'settings_email' => isset($_POST['perm_settings']), + 'admin_management' => isset($_POST['perm_admin']) + ]; + + if (empty($email) || empty($name)) { + setFlash('error', 'Email and name are required'); + } else { + $data = [ + 'email' => strtolower($email), + 'name' => $name, + 'is_master' => $isMaster, + 'permissions' => json_encode($permissions) + ]; + + if ($action === 'update' && $userId) { + if (!empty($password)) { + $data['password_hash'] = hashPassword($password); + } + db()->update('admin_users', $data, 'user_id = :id', ['id' => $userId]); + setFlash('success', 'Admin user updated'); + } else { + if (empty($password)) { + setFlash('error', 'Password is required for new users'); + } else { + $existing = db()->fetch("SELECT id FROM admin_users WHERE email = :email", ['email' => strtolower($email)]); + if ($existing) { + setFlash('error', 'Email already exists'); + } else { + $data['user_id'] = generateId('admin_'); + $data['password_hash'] = hashPassword($password); + $data['is_admin'] = 1; + db()->insert('admin_users', $data); + setFlash('success', 'Admin user created'); + } + } + } + } + + header('Location: /admin/users.php'); + exit; + } + + if ($action === 'delete' && !empty($_POST['user_id'])) { + // Don't allow deleting self or last master + $user = db()->fetch("SELECT is_master FROM admin_users WHERE user_id = :id", ['id' => $_POST['user_id']]); + if ($user && $user['is_master']) { + $masterCount = db()->count('admin_users', 'is_master = 1'); + if ($masterCount <= 1) { + setFlash('error', 'Cannot delete the last master admin'); + header('Location: /admin/users.php'); + exit; + } + } + + db()->delete('admin_users', 'user_id = :id', ['id' => $_POST['user_id']]); + setFlash('success', 'Admin user deleted'); + header('Location: /admin/users.php'); + exit; + } +} + +$users = db()->fetchAll("SELECT * FROM admin_users ORDER BY is_master DESC, name ASC"); +?> + + + + +

+ + +

+ + + + + + + + + + + + + + + + + + + + + +

Name	Email	Role	Created	Actions
+ + + You + +		+ + Master Admin + + Admin + +		+ + + + + + + + +

+ + + + + + + diff --git a/api/cart.php b/api/cart.php new file mode 100644 index 0000000..990de9c --- /dev/null +++ b/api/cart.php @@ -0,0 +1,121 @@ + 'Product ID required'], 400); + } + + // Verify product exists and is active + $product = db()->fetch( + "SELECT product_id, stock FROM products WHERE product_id = :id AND is_active = 1", + ['id' => $productId] + ); + + if (!$product) { + jsonResponse(['error' => 'Product not found'], 404); + } + + if ($product['stock'] < $quantity) { + jsonResponse(['error' => 'Not enough stock'], 400); + } + + addToCart($productId, $quantity); + + jsonResponse([ + 'success' => true, + 'cart_count' => getCartCount(), + 'message' => 'Item added to cart' + ]); + break; + + case 'update': + $productId = $input['product_id'] ?? ''; + $quantity = intval($input['quantity'] ?? 0); + + if (!$productId) { + jsonResponse(['error' => 'Product ID required'], 400); + } + + updateCartItem($productId, $quantity); + + jsonResponse([ + 'success' => true, + 'cart_count' => getCartCount(), + 'subtotal' => getCartTotal() + ]); + break; + + case 'remove': + $productId = $input['product_id'] ?? ''; + + if (!$productId) { + jsonResponse(['error' => 'Product ID required'], 400); + } + + removeFromCart($productId); + + jsonResponse([ + 'success' => true, + 'cart_count' => getCartCount(), + 'subtotal' => getCartTotal() + ]); + break; + + case 'clear': + clearCart(); + jsonResponse(['success' => true, 'cart_count' => 0]); + break; + + case 'get': + $cart = getCart(); + $items = []; + $subtotal = 0; + + foreach ($cart as $productId => $quantity) { + $product = db()->fetch( + "SELECT product_id, name, price, sale_price, stock, images FROM products WHERE product_id = :id", + ['id' => $productId] + ); + + if ($product) { + $images = json_decode($product['images'] ?? '[]', true); + $unitPrice = $product['sale_price'] ?? $product['price']; + $total = $unitPrice * $quantity; + $subtotal += $total; + + $items[] = [ + 'product_id' => $product['product_id'], + 'name' => $product['name'], + 'price' => $unitPrice, + 'quantity' => $quantity, + 'total' => $total, + 'image' => !empty($images) ? $images[0] : null, + 'stock' => $product['stock'] + ]; + } + } + + jsonResponse([ + 'items' => $items, + 'count' => getCartCount(), + 'subtotal' => $subtotal + ]); + break; + + default: + jsonResponse(['error' => 'Invalid action'], 400); +} diff --git a/api/create-checkout-session.php b/api/create-checkout-session.php new file mode 100644 index 0000000..4406b34 --- /dev/null +++ b/api/create-checkout-session.php @@ -0,0 +1,119 @@ + 'Method not allowed'], 405); +} + +$input = json_decode(file_get_contents('php://input'), true); +$orderId = $input['order_id'] ?? ''; +$originUrl = $input['origin_url'] ?? ''; + +if (empty($orderId)) { + jsonResponse(['error' => 'Order ID required'], 400); +} + +if (empty($originUrl)) { + $originUrl = SITE_URL; +} + +// Get order +$order = db()->fetch( + "SELECT * FROM orders WHERE order_id = :id", + ['id' => $orderId] +); + +if (!$order) { + jsonResponse(['error' => 'Order not found'], 404); +} + +if ($order['payment_status'] === 'paid') { + jsonResponse(['error' => 'Order already paid'], 400); +} + +// Check if Stripe is configured +if (!isStripeConfigured()) { + // Demo mode - simulate successful payment + db()->update('orders', + [ + 'payment_status' => 'paid', + 'order_status' => 'confirmed', + 'stripe_payment_intent' => 'demo_' . bin2hex(random_bytes(8)) + ], + 'order_id = :id', + ['id' => $orderId] + ); + + jsonResponse([ + 'demo_mode' => true, + 'message' => 'Payment simulated (Stripe not configured)', + 'redirect' => '/order-confirmation.php?order=' . $orderId + ]); +} + +// Build line items from order +$items = json_decode($order['items'], true) ?? []; +$lineItems = []; + +foreach ($items as $item) { + $lineItems[] = [ + 'name' => $item['name'], + 'price' => floatval($item['price']), + 'quantity' => intval($item['quantity']), + 'currency' => 'usd' + ]; +} + +// Add shipping if applicable +if ($order['shipping_cost'] > 0) { + $lineItems[] = [ + 'name' => 'Shipping', + 'price' => floatval($order['shipping_cost']), + 'quantity' => 1, + 'currency' => 'usd' + ]; +} + +// Build success/cancel URLs +$successUrl = rtrim($originUrl, '/') . '/order-confirmation.php?order=' . $orderId . '&session_id={CHECKOUT_SESSION_ID}'; +$cancelUrl = rtrim($originUrl, '/') . '/payment.php?order=' . $orderId . '&cancelled=1'; + +try { + $session = stripe()->createCheckoutSession( + $lineItems, + $successUrl, + $cancelUrl, + [ + 'customer_email' => $order['customer_email'], + 'metadata' => [ + 'order_id' => $orderId, + 'order_number' => $order['order_number'] + ] + ] + ); + + // Store checkout session ID + db()->update('orders', + ['stripe_checkout_session' => $session['id']], + 'order_id = :id', + ['id' => $orderId] + ); + + jsonResponse([ + 'url' => $session['url'], + 'session_id' => $session['id'] + ]); + +} catch (Exception $e) { + error_log('Stripe Checkout error: ' . $e->getMessage()); + jsonResponse(['error' => 'Failed to create checkout session: ' . $e->getMessage()], 500); +} diff --git a/api/create-payment-intent.php b/api/create-payment-intent.php new file mode 100644 index 0000000..ae8ca5a --- /dev/null +++ b/api/create-payment-intent.php @@ -0,0 +1,87 @@ + 'Method not allowed'], 405); +} + +$input = json_decode(file_get_contents('php://input'), true); +$orderId = $input['order_id'] ?? ''; + +if (empty($orderId)) { + jsonResponse(['error' => 'Order ID required'], 400); +} + +// Get order +$order = db()->fetch( + "SELECT * FROM orders WHERE order_id = :id", + ['id' => $orderId] +); + +if (!$order) { + jsonResponse(['error' => 'Order not found'], 404); +} + +if ($order['payment_status'] === 'paid') { + jsonResponse(['error' => 'Order already paid'], 400); +} + +// Check if Stripe is configured +if (!isStripeConfigured()) { + // Demo mode - simulate successful payment + db()->update('orders', + [ + 'payment_status' => 'paid', + 'order_status' => 'confirmed', + 'stripe_payment_intent' => 'demo_' . bin2hex(random_bytes(8)) + ], + 'order_id = :id', + ['id' => $orderId] + ); + + jsonResponse([ + 'demo_mode' => true, + 'message' => 'Payment simulated (Stripe not configured)', + 'redirect' => '/order-confirmation.php?order=' . $orderId + ]); +} + +// Create Stripe Payment Intent using cURL-based API +try { + $paymentIntent = stripe()->createPaymentIntent( + $order['total'], + 'usd', + [ + 'metadata' => [ + 'order_id' => $orderId, + 'order_number' => $order['order_number'] + ], + 'receipt_email' => $order['customer_email'], + 'description' => 'Order #' . $order['order_number'] + ] + ); + + // Store payment intent ID + db()->update('orders', + ['stripe_payment_intent' => $paymentIntent['id']], + 'order_id = :id', + ['id' => $orderId] + ); + + jsonResponse([ + 'client_secret' => $paymentIntent['client_secret'] + ]); + +} catch (Exception $e) { + error_log('Stripe error: ' . $e->getMessage()); + jsonResponse(['error' => 'Payment initialization failed: ' . $e->getMessage()], 500); +} diff --git a/api/delete-account.php b/api/delete-account.php new file mode 100644 index 0000000..83c31c3 --- /dev/null +++ b/api/delete-account.php @@ -0,0 +1,53 @@ +query("START TRANSACTION"); + + // Delete wallet transactions + db()->query("DELETE FROM wallet_transactions WHERE customer_id = :id", ['id' => $customer['customer_id']]); + + // Delete reviews + db()->query("DELETE FROM reviews WHERE customer_id = :id", ['id' => $customer['customer_id']]); + + // Delete wishlist + db()->query("DELETE FROM wishlist WHERE customer_id = :id", ['id' => $customer['customer_id']]); + + // Anonymize orders (keep for records but remove personal info) + db()->query( + "UPDATE orders SET customer_name = 'Deleted User', customer_email = 'deleted@example.com', + shipping_address = NULL, billing_address = NULL WHERE customer_id = :id", + ['id' => $customer['customer_id']] + ); + + // Remove from email subscribers + db()->query("DELETE FROM email_subscribers WHERE email = :email", ['email' => $customer['email']]); + + // Delete customer + db()->query("DELETE FROM customers WHERE customer_id = :id", ['id' => $customer['customer_id']]); + + db()->query("COMMIT"); + + // Logout + CustomerAuth::logout(); + + setFlash('success', 'Your account has been deleted. We\'re sorry to see you go!'); + redirect('/'); + +} catch (Exception $e) { + db()->query("ROLLBACK"); + setFlash('error', 'Failed to delete account. Please contact support.'); + redirect('/account/profile.php'); +} diff --git a/api/loyalty.php b/api/loyalty.php new file mode 100644 index 0000000..4224f3d --- /dev/null +++ b/api/loyalty.php @@ -0,0 +1,94 @@ + 'Authentication required'], 401); +} + +$customer = CustomerAuth::getUser(); +$method = $_SERVER['REQUEST_METHOD']; +$input = json_decode(file_get_contents('php://input'), true); +$action = $input['action'] ?? $_GET['action'] ?? ''; + +switch ($action) { + case 'status': + // Get customer's loyalty status + $status = loyalty()->getCustomerTier($customer['customer_id']); + $conversion = loyalty()->getConversionInfo(); + + jsonResponse([ + 'tier' => $status['tier'], + 'tier_name' => $status['info']['name'], + 'tier_color' => $status['info']['color'], + 'tier_icon' => $status['info']['icon'], + 'benefits' => $status['info']['benefits'], + 'multiplier' => $status['info']['multiplier'], + 'points' => $status['points'], + 'lifetime_points' => $status['lifetime_points'], + 'points_value' => $status['points'] * $conversion['points_value'], + 'next_tier' => $status['next_tier'], + 'next_tier_name' => $status['next_tier_info']['name'] ?? null, + 'points_to_next' => $status['points_to_next'], + 'progress_percent' => $status['progress_percent'], + 'conversion' => $conversion + ]); + break; + + case 'history': + // Get loyalty transaction history + $limit = min(50, intval($_GET['limit'] ?? 20)); + $history = loyalty()->getHistory($customer['customer_id'], $limit); + + jsonResponse(['transactions' => $history]); + break; + + case 'redeem': + // Redeem points for credit + if ($method !== 'POST') { + jsonResponse(['error' => 'POST required'], 405); + } + + $points = intval($input['points'] ?? 0); + + if ($points < 100) { + jsonResponse(['error' => 'Minimum 100 points required for redemption'], 400); + } + + $result = loyalty()->redeemPoints($customer['customer_id'], $points); + + if ($result['success']) { + jsonResponse([ + 'success' => true, + 'points_redeemed' => $result['points_redeemed'], + 'credit_value' => $result['credit_value'], + 'new_points_balance' => $result['new_points_balance'], + 'new_wallet_balance' => $result['new_wallet_balance'], + 'message' => 'Successfully redeemed ' . $points . ' points for ' . formatCurrency($result['credit_value']) + ]); + } else { + jsonResponse(['error' => $result['error']], 400); + } + break; + + case 'tiers': + // Get all tier information + $tiers = loyalty()->getTiers(); + $conversion = loyalty()->getConversionInfo(); + + jsonResponse([ + 'tiers' => $tiers, + 'conversion' => $conversion + ]); + break; + + default: + jsonResponse(['error' => 'Invalid action'], 400); +} diff --git a/api/orders.php b/api/orders.php new file mode 100644 index 0000000..4fef865 --- /dev/null +++ b/api/orders.php @@ -0,0 +1,174 @@ +fetch( + "SELECT * FROM orders WHERE order_id = :id", + ['id' => $orderId] + ); + + if (!$order) { + jsonResponse(['error' => 'Order not found'], 404); + } + + $order['items'] = json_decode($order['items'], true); + $order['shipping_address'] = json_decode($order['shipping_address'], true); + unset($order['id']); + + jsonResponse($order); + } elseif ($orderNumber) { + $email = $_GET['email'] ?? ''; + + $order = db()->fetch( + "SELECT * FROM orders WHERE order_number = :num AND customer_email = :email", + ['num' => $orderNumber, 'email' => strtolower($email)] + ); + + if (!$order) { + jsonResponse(['error' => 'Order not found'], 404); + } + + $order['items'] = json_decode($order['items'], true); + $order['shipping_address'] = json_decode($order['shipping_address'], true); + unset($order['id']); + + jsonResponse($order); + } else { + // List orders (admin only or customer's own) + $customer = CustomerAuth::getUser(); + + if ($customer) { + $orders = db()->fetchAll( + "SELECT order_id, order_number, total, payment_status, order_status, created_at + FROM orders WHERE customer_id = :cid ORDER BY created_at DESC LIMIT 50", + ['cid' => $customer['customer_id']] + ); + } else { + jsonResponse(['error' => 'Authentication required'], 401); + } + + jsonResponse(['orders' => $orders]); + } + break; + + case 'POST': + // Update order status (admin) + if ($action === 'update_status') { + // Admin check would go here + $orderId = $input['order_id'] ?? ''; + $status = $input['status'] ?? ''; + $trackingNumber = $input['tracking_number'] ?? null; + + if (empty($orderId) || empty($status)) { + jsonResponse(['error' => 'Order ID and status required'], 400); + } + + $validStatuses = ['pending', 'confirmed', 'processing', 'shipped', 'delivered', 'cancelled', 'refunded']; + if (!in_array($status, $validStatuses)) { + jsonResponse(['error' => 'Invalid status'], 400); + } + + $updateData = ['order_status' => $status]; + if ($trackingNumber) { + $updateData['tracking_number'] = $trackingNumber; + } + + db()->update('orders', $updateData, 'order_id = :id', ['id' => $orderId]); + + // If status is shipped or delivered, send email + $order = db()->fetch("SELECT * FROM orders WHERE order_id = :id", ['id' => $orderId]); + if ($order && in_array($status, ['shipped', 'delivered'])) { + sendStatusUpdateEmail($order, $status, $trackingNumber); + } + + jsonResponse(['success' => true, 'status' => $status]); + } + + // Cancel order + if ($action === 'cancel') { + $orderId = $input['order_id'] ?? ''; + $customer = CustomerAuth::getUser(); + + if (!$customer) { + jsonResponse(['error' => 'Authentication required'], 401); + } + + $order = db()->fetch( + "SELECT * FROM orders WHERE order_id = :id AND customer_id = :cid", + ['id' => $orderId, 'cid' => $customer['customer_id']] + ); + + if (!$order) { + jsonResponse(['error' => 'Order not found'], 404); + } + + if (!in_array($order['order_status'], ['pending', 'confirmed'])) { + jsonResponse(['error' => 'This order cannot be cancelled'], 400); + } + + db()->update('orders', + ['order_status' => 'cancelled'], + 'order_id = :id', + ['id' => $orderId] + ); + + // Restore stock + $items = json_decode($order['items'], true) ?? []; + foreach ($items as $item) { + db()->query( + "UPDATE products SET stock = stock + :qty WHERE product_id = :id", + ['qty' => $item['quantity'], 'id' => $item['product_id']] + ); + } + + jsonResponse(['success' => true]); + } + + jsonResponse(['error' => 'Invalid action'], 400); + break; + + default: + jsonResponse(['error' => 'Method not allowed'], 405); +} + +function sendStatusUpdateEmail($order, $status, $trackingNumber = null) { + $statusMessages = [ + 'shipped' => 'Your order has been shipped!', + 'delivered' => 'Your order has been delivered!' + ]; + + $tracking = $trackingNumber ? "

Tracking #: {$trackingNumber}

" : ''; + + $html = << +

Tom's Java Jive

{$statusMessages[$status]}

Hi {$order['customer_name']},

Order #{$order['order_number']} has been updated to: {$status}

+ {$tracking} +

diff --git a/includes/loyalty.php b/includes/loyalty.php new file mode 100644 index 0000000..2988c99 --- /dev/null +++ b/includes/loyalty.php @@ -0,0 +1,438 @@ + [ + 'name' => 'Bronze Bean', + 'min_points' => 0, + 'multiplier' => 1.0, + 'benefits' => [ + 'Earn 1 point per $1 spent', + 'Birthday reward', + 'Member-only offers' + ], + 'color' => '#CD7F32', + 'icon' => 'fa-coffee' + ], + 'silver' => [ + 'name' => 'Silver Roast', + 'min_points' => 500, + 'multiplier' => 1.25, + 'benefits' => [ + 'Earn 1.25 points per $1 spent', + 'Free shipping on orders $25+', + 'Early access to new products', + 'Double points weekends' + ], + 'color' => '#C0C0C0', + 'icon' => 'fa-mug-hot' + ], + 'gold' => [ + 'name' => 'Gold Blend', + 'min_points' => 1500, + 'multiplier' => 1.5, + 'benefits' => [ + 'Earn 1.5 points per $1 spent', + 'Free shipping on all orders', + 'Exclusive Gold-only products', + 'Priority customer support', + 'Quarterly free coffee sample' + ], + 'color' => '#FFD700', + 'icon' => 'fa-crown' + ], + 'platinum' => [ + 'name' => 'Platinum Reserve', + 'min_points' => 5000, + 'multiplier' => 2.0, + 'benefits' => [ + 'Earn 2 points per $1 spent', + 'Free express shipping', + 'VIP early access to everything', + 'Annual free bag of premium coffee', + 'Dedicated account manager', + 'Exclusive tasting events' + ], + 'color' => '#E5E4E2', + 'icon' => 'fa-gem' + ] + ]; + + // Points redemption rates + private float $pointsToValue = 0.01; // 1 point = $0.01 (100 points = $1) + + /** + * Get all tier definitions + */ + public function getTiers(): array { + return $this->tiers; + } + + /** + * Get a specific tier + */ + public function getTier(string $tierKey): ?array { + return $this->tiers[$tierKey] ?? null; + } + + /** + * Determine customer's tier based on total points earned (lifetime) + */ + public function calculateTier(int $lifetimePoints): string { + $currentTier = 'bronze'; + + foreach ($this->tiers as $key => $tier) { + if ($lifetimePoints >= $tier['min_points']) { + $currentTier = $key; + } + } + + return $currentTier; + } + + /** + * Get customer's current tier info + */ + public function getCustomerTier(string $customerId): array { + $customer = db()->fetch( + "SELECT reward_points, lifetime_points, loyalty_tier FROM customers WHERE customer_id = :id", + ['id' => $customerId] + ); + + if (!$customer) { + return ['tier' => 'bronze', 'info' => $this->tiers['bronze'], 'points' => 0]; + } + + $lifetimePoints = $customer['lifetime_points'] ?? $customer['reward_points'] ?? 0; + $tierKey = $this->calculateTier($lifetimePoints); + $tier = $this->tiers[$tierKey]; + + // Calculate progress to next tier + $nextTierKey = $this->getNextTier($tierKey); + $nextTier = $nextTierKey ? $this->tiers[$nextTierKey] : null; + + $progress = 100; + $pointsToNext = 0; + + if ($nextTier) { + $currentMin = $tier['min_points']; + $nextMin = $nextTier['min_points']; + $pointsToNext = $nextMin - $lifetimePoints; + $progress = min(100, (($lifetimePoints - $currentMin) / ($nextMin - $currentMin)) * 100); + } + + return [ + 'tier' => $tierKey, + 'info' => $tier, + 'points' => $customer['reward_points'] ?? 0, + 'lifetime_points' => $lifetimePoints, + 'next_tier' => $nextTierKey, + 'next_tier_info' => $nextTier, + 'points_to_next' => $pointsToNext, + 'progress_percent' => round($progress, 1) + ]; + } + + /** + * Get next tier key + */ + private function getNextTier(string $currentTier): ?string { + $keys = array_keys($this->tiers); + $index = array_search($currentTier, $keys); + + return isset($keys[$index + 1]) ? $keys[$index + 1] : null; + } + + /** + * Award points for a purchase + */ + public function awardPoints(string $customerId, float $amount, string $description = 'Purchase'): array { + $customerTier = $this->getCustomerTier($customerId); + $multiplier = $customerTier['info']['multiplier']; + + // Calculate points (base: 1 point per dollar) + $basePoints = floor($amount); + $bonusPoints = floor($basePoints * ($multiplier - 1)); + $totalPoints = $basePoints + $bonusPoints; + + // Update customer points + db()->query( + "UPDATE customers SET + reward_points = reward_points + :points, + lifetime_points = COALESCE(lifetime_points, 0) + :points, + updated_at = NOW() + WHERE customer_id = :id", + ['points' => $totalPoints, 'id' => $customerId] + ); + + // Log the transaction + db()->insert('loyalty_transactions', [ + 'transaction_id' => generateId('lt_'), + 'customer_id' => $customerId, + 'points' => $totalPoints, + 'type' => 'earn', + 'description' => $description . ($bonusPoints > 0 ? " (+{$bonusPoints} bonus)" : ''), + 'reference_amount' => $amount + ]); + + // Check for tier upgrade + $newTier = $this->checkTierUpgrade($customerId, $customerTier['tier']); + + return [ + 'points_earned' => $totalPoints, + 'base_points' => $basePoints, + 'bonus_points' => $bonusPoints, + 'multiplier' => $multiplier, + 'tier_upgraded' => $newTier !== null, + 'new_tier' => $newTier + ]; + } + + /** + * Redeem points for credit + */ + public function redeemPoints(string $customerId, int $points): array { + $customer = db()->fetch( + "SELECT reward_points FROM customers WHERE customer_id = :id", + ['id' => $customerId] + ); + + if (!$customer || $customer['reward_points'] < $points) { + return ['success' => false, 'error' => 'Insufficient points']; + } + + $creditValue = $points * $this->pointsToValue; + + // Deduct points + db()->query( + "UPDATE customers SET reward_points = reward_points - :points, updated_at = NOW() WHERE customer_id = :id", + ['points' => $points, 'id' => $customerId] + ); + + // Log the redemption + db()->insert('loyalty_transactions', [ + 'transaction_id' => generateId('lt_'), + 'customer_id' => $customerId, + 'points' => -$points, + 'type' => 'redeem', + 'description' => "Redeemed for " . formatCurrency($creditValue) . " credit", + 'reference_amount' => $creditValue + ]); + + // Add to wallet + $newBalance = db()->fetch( + "SELECT wallet_balance FROM customers WHERE customer_id = :id", + ['id' => $customerId] + )['wallet_balance'] ?? 0; + + $newBalance += $creditValue; + + db()->query( + "UPDATE customers SET wallet_balance = :balance WHERE customer_id = :id", + ['balance' => $newBalance, 'id' => $customerId] + ); + + // Log wallet transaction + db()->insert('wallet_transactions', [ + 'transaction_id' => generateId('wt_'), + 'customer_id' => $customerId, + 'amount' => $creditValue, + 'balance_after' => $newBalance, + 'type' => 'loyalty_redemption', + 'description' => "Redeemed {$points} loyalty points" + ]); + + return [ + 'success' => true, + 'points_redeemed' => $points, + 'credit_value' => $creditValue, + 'new_points_balance' => $customer['reward_points'] - $points, + 'new_wallet_balance' => $newBalance + ]; + } + + /** + * Check and process tier upgrade + */ + public function checkTierUpgrade(string $customerId, string $currentTier): ?string { + $customer = db()->fetch( + "SELECT lifetime_points, loyalty_tier FROM customers WHERE customer_id = :id", + ['id' => $customerId] + ); + + if (!$customer) { + return null; + } + + $calculatedTier = $this->calculateTier($customer['lifetime_points'] ?? 0); + $storedTier = $customer['loyalty_tier'] ?? 'bronze'; + + // Compare tier levels + $tierOrder = ['bronze', 'silver', 'gold', 'platinum']; + $calculatedIndex = array_search($calculatedTier, $tierOrder); + $storedIndex = array_search($storedTier, $tierOrder); + + if ($calculatedIndex > $storedIndex) { + // Upgrade! + db()->query( + "UPDATE customers SET loyalty_tier = :tier, updated_at = NOW() WHERE customer_id = :id", + ['tier' => $calculatedTier, 'id' => $customerId] + ); + + // Log the upgrade + db()->insert('loyalty_transactions', [ + 'transaction_id' => generateId('lt_'), + 'customer_id' => $customerId, + 'points' => 0, + 'type' => 'tier_upgrade', + 'description' => "Upgraded from {$this->tiers[$storedTier]['name']} to {$this->tiers[$calculatedTier]['name']}" + ]); + + // Send notifications + $this->sendTierUpgradeNotifications($customerId, $calculatedTier); + + return $calculatedTier; + } + + return null; + } + + /** + * Send tier upgrade notifications + */ + private function sendTierUpgradeNotifications(string $customerId, string $newTier): void { + $customer = db()->fetch( + "SELECT email, phone, name FROM customers WHERE customer_id = :id", + ['id' => $customerId] + ); + + if (!$customer) return; + + $tierInfo = $this->tiers[$newTier]; + + // Send email notification + if (!empty($customer['email'])) { + require_once __DIR__ . '/email.php'; + // Custom email for tier upgrade would go here + } + + // Send SMS notification + if (!empty($customer['phone'])) { + require_once __DIR__ . '/sms.php'; + sendSMS()->sendTierUpgrade($customer['phone'], $tierInfo['name']); + } + + // Send push notification + require_once __DIR__ . '/push.php'; + pushNotify()->sendTierNotification($customerId, $tierInfo['name'], $tierInfo['benefits']); + } + + /** + * Get points conversion info + */ + public function getConversionInfo(): array { + return [ + 'points_per_dollar' => 1, + 'points_value' => $this->pointsToValue, + 'points_for_one_dollar' => intval(1 / $this->pointsToValue), + 'description' => 'Earn 1 point for every $1 spent. Redeem 100 points for $1 credit.' + ]; + } + + /** + * Get customer's loyalty history + */ + public function getHistory(string $customerId, int $limit = 20): array { + return db()->fetchAll( + "SELECT * FROM loyalty_transactions WHERE customer_id = :id ORDER BY created_at DESC LIMIT :limit", + ['id' => $customerId, 'limit' => $limit] + ); + } + + /** + * Award birthday bonus + */ + public function awardBirthdayBonus(string $customerId): array { + $customerTier = $this->getCustomerTier($customerId); + + // Bonus points based on tier + $bonusPoints = match($customerTier['tier']) { + 'platinum' => 500, + 'gold' => 300, + 'silver' => 200, + default => 100 + }; + + db()->query( + "UPDATE customers SET reward_points = reward_points + :points WHERE customer_id = :id", + ['points' => $bonusPoints, 'id' => $customerId] + ); + + db()->insert('loyalty_transactions', [ + 'transaction_id' => generateId('lt_'), + 'customer_id' => $customerId, + 'points' => $bonusPoints, + 'type' => 'birthday_bonus', + 'description' => "Birthday reward - Happy Birthday!" + ]); + + return ['success' => true, 'points' => $bonusPoints]; + } + + /** + * Award referral bonus + */ + public function awardReferralBonus(string $referrerId, string $newCustomerId): array { + $referrerBonus = 100; + $newCustomerBonus = 50; + + // Award to referrer + db()->query( + "UPDATE customers SET reward_points = reward_points + :points WHERE customer_id = :id", + ['points' => $referrerBonus, 'id' => $referrerId] + ); + + db()->insert('loyalty_transactions', [ + 'transaction_id' => generateId('lt_'), + 'customer_id' => $referrerId, + 'points' => $referrerBonus, + 'type' => 'referral_bonus', + 'description' => "Referral bonus - Thank you for spreading the word!" + ]); + + // Award to new customer + db()->query( + "UPDATE customers SET reward_points = reward_points + :points WHERE customer_id = :id", + ['points' => $newCustomerBonus, 'id' => $newCustomerId] + ); + + db()->insert('loyalty_transactions', [ + 'transaction_id' => generateId('lt_'), + 'customer_id' => $newCustomerId, + 'points' => $newCustomerBonus, + 'type' => 'referral_welcome', + 'description' => "Welcome bonus from referral" + ]); + + return [ + 'referrer_bonus' => $referrerBonus, + 'new_customer_bonus' => $newCustomerBonus + ]; + } +} + +// Helper function +function loyalty(): LoyaltyProgram { + static $instance = null; + if ($instance === null) { + $instance = new LoyaltyProgram(); + } + return $instance; +} diff --git a/includes/push.php b/includes/push.php new file mode 100644 index 0000000..d102c4e --- /dev/null +++ b/includes/push.php @@ -0,0 +1,181 @@ +publicKey = getSetting('vapid_public_key', 'YOUR_VAPID_PUBLIC_KEY'); + $this->privateKey = getSetting('vapid_private_key', 'YOUR_VAPID_PRIVATE_KEY'); + $this->subject = 'mailto:' . getSetting('admin_email', 'admin@tomsjavajive.com'); + } + + /** + * Get VAPID public key for client + */ + public function getPublicKey(): string { + return $this->publicKey; + } + + /** + * Send push notification to a subscription + */ + public function send(array $subscription, string $title, string $body, array $options = []): array { + $payload = json_encode([ + 'title' => $title, + 'body' => $body, + 'icon' => $options['icon'] ?? '/assets/icons/icon-192.png', + 'badge' => $options['badge'] ?? '/assets/icons/badge-72.png', + 'url' => $options['url'] ?? '/', + 'tag' => $options['tag'] ?? null, + 'data' => $options['data'] ?? [] + ]); + + // For now, we'll store notifications for when the user comes online + // Full web push requires a library like minishlink/web-push + // This is a simplified version that works with the service worker + + try { + // Store notification for retrieval + $notificationId = generateId('notif_'); + db()->insert('push_notifications', [ + 'notification_id' => $notificationId, + 'subscription_endpoint' => $subscription['endpoint'], + 'payload' => $payload, + 'status' => 'pending', + 'created_at' => date('Y-m-d H:i:s') + ]); + + return ['success' => true, 'notification_id' => $notificationId]; + } catch (Exception $e) { + return ['success' => false, 'error' => $e->getMessage()]; + } + } + + /** + * Send notification to all subscribed users + */ + public function broadcast(string $title, string $body, array $options = []): array { + $subscriptions = db()->fetchAll("SELECT * FROM push_subscriptions WHERE is_active = 1"); + + $results = ['sent' => 0, 'failed' => 0]; + + foreach ($subscriptions as $sub) { + $subscription = [ + 'endpoint' => $sub['endpoint'], + 'keys' => [ + 'p256dh' => $sub['p256dh_key'], + 'auth' => $sub['auth_key'] + ] + ]; + + $result = $this->send($subscription, $title, $body, $options); + + if ($result['success']) { + $results['sent']++; + } else { + $results['failed']++; + } + } + + return $results; + } + + /** + * Send order status update notification + */ + public function sendOrderUpdate(string $customerId, array $order, string $status): array { + $subscription = $this->getCustomerSubscription($customerId); + + if (!$subscription) { + return ['success' => false, 'error' => 'No subscription found']; + } + + $messages = [ + 'confirmed' => "Your order #{$order['order_number']} has been confirmed!", + 'processing' => "We're preparing your order #{$order['order_number']}", + 'shipped' => "Your order #{$order['order_number']} is on its way!", + 'delivered' => "Your order #{$order['order_number']} has been delivered!", + 'ready' => "Your order #{$order['order_number']} is ready for pickup!" + ]; + + return $this->send( + $subscription, + "Order Update", + $messages[$status] ?? "Order #{$order['order_number']} status: {$status}", + [ + 'url' => "/account/order.php?id={$order['order_id']}", + 'tag' => "order-{$order['order_id']}" + ] + ); + } + + /** + * Send promotional notification + */ + public function sendPromotion(string $customerId, string $title, string $message, string $url = '/shop.php'): array { + $subscription = $this->getCustomerSubscription($customerId); + + if (!$subscription) { + return ['success' => false, 'error' => 'No subscription found']; + } + + return $this->send($subscription, $title, $message, ['url' => $url]); + } + + /** + * Send loyalty tier notification + */ + public function sendTierNotification(string $customerId, string $tierName, array $benefits): array { + $subscription = $this->getCustomerSubscription($customerId); + + if (!$subscription) { + return ['success' => false, 'error' => 'No subscription found']; + } + + return $this->send( + $subscription, + "Congratulations! You're now {$tierName}!", + "Enjoy new benefits: " . implode(', ', array_slice($benefits, 0, 2)), + ['url' => '/account/'] + ); + } + + /** + * Get customer's push subscription + */ + private function getCustomerSubscription(string $customerId): ?array { + $sub = db()->fetch( + "SELECT * FROM push_subscriptions WHERE customer_id = :id AND is_active = 1 ORDER BY created_at DESC LIMIT 1", + ['id' => $customerId] + ); + + if (!$sub) { + return null; + } + + return [ + 'endpoint' => $sub['endpoint'], + 'keys' => [ + 'p256dh' => $sub['p256dh_key'], + 'auth' => $sub['auth_key'] + ] + ]; + } +} + +// Helper function for easy access +function pushNotify(): PushNotification { + static $instance = null; + if ($instance === null) { + $instance = new PushNotification(); + } + return $instance; +} diff --git a/includes/sms.php b/includes/sms.php new file mode 100644 index 0000000..513f247 --- /dev/null +++ b/includes/sms.php @@ -0,0 +1,195 @@ +accountSid = getSetting('twilio_account_sid', 'YOUR_TWILIO_ACCOUNT_SID'); + $this->authToken = getSetting('twilio_auth_token', 'YOUR_TWILIO_AUTH_TOKEN'); + $this->fromNumber = getSetting('twilio_phone_number', '+1234567890'); + } + + /** + * Send SMS via Twilio API + */ + public function send(string $to, string $message): array { + // Ensure phone number is in E.164 format + $to = $this->formatPhoneNumber($to); + + if (!$to) { + return ['success' => false, 'error' => 'Invalid phone number']; + } + + $url = "https://api.twilio.com/2010-04-01/Accounts/{$this->accountSid}/Messages.json"; + + $data = [ + 'To' => $to, + 'From' => $this->fromNumber, + 'Body' => $message + ]; + + $ch = curl_init($url); + curl_setopt_array($ch, [ + CURLOPT_POST => true, + CURLOPT_POSTFIELDS => http_build_query($data), + CURLOPT_USERPWD => "{$this->accountSid}:{$this->authToken}", + CURLOPT_RETURNTRANSFER => true, + CURLOPT_TIMEOUT => 30 + ]); + + $response = curl_exec($ch); + $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); + $error = curl_error($ch); + curl_close($ch); + + if ($error) { + return ['success' => false, 'error' => $error]; + } + + $result = json_decode($response, true); + + if ($httpCode >= 200 && $httpCode < 300) { + return [ + 'success' => true, + 'sid' => $result['sid'] ?? null, + 'status' => $result['status'] ?? 'queued' + ]; + } + + return [ + 'success' => false, + 'error' => $result['message'] ?? 'Failed to send SMS', + 'code' => $result['code'] ?? $httpCode + ]; + } + + /** + * Format phone number to E.164 format + */ + private function formatPhoneNumber(string $phone): ?string { + // Remove all non-numeric characters except + + $phone = preg_replace('/[^0-9+]/', '', $phone); + + // If already in E.164 format + if (preg_match('/^\+[1-9]\d{1,14}$/', $phone)) { + return $phone; + } + + // US number without country code + if (preg_match('/^1?\d{10}$/', $phone)) { + $phone = preg_replace('/^1?/', '', $phone); + return '+1' . $phone; + } + + return null; + } + + /** + * Send order confirmation SMS + */ + public function sendOrderConfirmation(array $order, string $phone): array { + $message = "Tom's Java Jive: Your order #{$order['order_number']} has been confirmed! " . + "Total: " . formatCurrency($order['total']) . ". " . + "Thank you for your purchase!"; + + return $this->send($phone, $message); + } + + /** + * Send shipping notification SMS + */ + public function sendShippingNotification(array $order, string $phone): array { + $message = "Tom's Java Jive: Your order #{$order['order_number']} has shipped! " . + "Tracking: {$order['tracking_number']}. " . + "Track at: " . ($order['tracking_url'] ?? SITE_URL); + + return $this->send($phone, $message); + } + + /** + * Send delivery notification SMS + */ + public function sendDeliveryNotification(array $order, string $phone): array { + $message = "Tom's Java Jive: Great news! Your order #{$order['order_number']} " . + "has been delivered. Enjoy your coffee!"; + + return $this->send($phone, $message); + } + + /** + * Send password reset SMS + */ + public function sendPasswordResetCode(string $phone, string $code): array { + $message = "Tom's Java Jive: Your password reset code is {$code}. " . + "This code expires in 15 minutes. Don't share it with anyone."; + + return $this->send($phone, $message); + } + + /** + * Send OTP verification SMS + */ + public function sendVerificationCode(string $phone, string $code): array { + $message = "Tom's Java Jive: Your verification code is {$code}. " . + "Valid for 10 minutes."; + + return $this->send($phone, $message); + } + + /** + * Send promotional SMS (with opt-out info) + */ + public function sendPromotion(string $phone, string $promoMessage): array { + $message = "Tom's Java Jive: {$promoMessage} " . + "Reply STOP to unsubscribe."; + + return $this->send($phone, $message); + } + + /** + * Send order ready for pickup SMS + */ + public function sendReadyForPickup(array $order, string $phone): array { + $message = "Tom's Java Jive: Your order #{$order['order_number']} is ready for pickup! " . + "Show this message at the counter."; + + return $this->send($phone, $message); + } + + /** + * Send low wallet balance alert + */ + public function sendLowBalanceAlert(string $phone, float $balance): array { + $message = "Tom's Java Jive: Your wallet balance is " . formatCurrency($balance) . ". " . + "Top up now to continue enjoying fast checkout!"; + + return $this->send($phone, $message); + } + + /** + * Send loyalty tier upgrade notification + */ + public function sendTierUpgrade(string $phone, string $tierName): array { + $message = "Tom's Java Jive: Congratulations! You've reached {$tierName} status! " . + "Enjoy your new benefits and rewards. Thank you for being a loyal customer!"; + + return $this->send($phone, $message); + } +} + +// Helper function for easy access +function sendSMS(): TwilioSMS { + static $instance = null; + if ($instance === null) { + $instance = new TwilioSMS(); + } + return $instance; +} diff --git a/includes/stripe.php b/includes/stripe.php new file mode 100644 index 0000000..e12aab8 --- /dev/null +++ b/includes/stripe.php @@ -0,0 +1,214 @@ +secretKey = $secretKey ?: STRIPE_SECRET_KEY; + } + + /** + * Make a cURL request to Stripe API + */ + private function request($method, $endpoint, $data = []) { + $url = $this->apiBase . $endpoint; + + $ch = curl_init(); + + $headers = [ + 'Authorization: Bearer ' . $this->secretKey, + 'Content-Type: application/x-www-form-urlencoded' + ]; + + curl_setopt($ch, CURLOPT_URL, $url); + curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); + curl_setopt($ch, CURLOPT_HTTPHEADER, $headers); + curl_setopt($ch, CURLOPT_TIMEOUT, 30); + curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true); + + if ($method === 'POST') { + curl_setopt($ch, CURLOPT_POST, true); + curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data)); + } elseif ($method === 'GET' && !empty($data)) { + $url .= '?' . http_build_query($data); + curl_setopt($ch, CURLOPT_URL, $url); + } + + $response = curl_exec($ch); + $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); + $error = curl_error($ch); + curl_close($ch); + + if ($error) { + throw new Exception('Stripe API Error: ' . $error); + } + + $decoded = json_decode($response, true); + + if ($httpCode >= 400) { + $errorMsg = $decoded['error']['message'] ?? 'Unknown Stripe error'; + throw new Exception($errorMsg); + } + + return $decoded; + } + + /** + * Create a Payment Intent + */ + public function createPaymentIntent($amount, $currency = 'usd', $options = []) { + $data = [ + 'amount' => (int)($amount * 100), // Convert to cents + 'currency' => strtolower($currency), + 'automatic_payment_methods' => ['enabled' => 'true'] + ]; + + if (!empty($options['metadata'])) { + foreach ($options['metadata'] as $key => $value) { + $data["metadata[$key]"] = $value; + } + } + + if (!empty($options['receipt_email'])) { + $data['receipt_email'] = $options['receipt_email']; + } + + if (!empty($options['description'])) { + $data['description'] = $options['description']; + } + + return $this->request('POST', '/payment_intents', $data); + } + + /** + * Retrieve a Payment Intent + */ + public function getPaymentIntent($paymentIntentId) { + return $this->request('GET', '/payment_intents/' . $paymentIntentId); + } + + /** + * Create a Checkout Session (hosted payment page) + */ + public function createCheckoutSession($lineItems, $successUrl, $cancelUrl, $options = []) { + $data = [ + 'mode' => $options['mode'] ?? 'payment', + 'success_url' => $successUrl, + 'cancel_url' => $cancelUrl + ]; + + // Add line items + foreach ($lineItems as $i => $item) { + $data["line_items[$i][price_data][currency]"] = $item['currency'] ?? 'usd'; + $data["line_items[$i][price_data][product_data][name]"] = $item['name']; + $data["line_items[$i][price_data][unit_amount]"] = (int)($item['price'] * 100); + $data["line_items[$i][quantity]"] = $item['quantity'] ?? 1; + + if (!empty($item['description'])) { + $data["line_items[$i][price_data][product_data][description]"] = $item['description']; + } + } + + if (!empty($options['customer_email'])) { + $data['customer_email'] = $options['customer_email']; + } + + if (!empty($options['metadata'])) { + foreach ($options['metadata'] as $key => $value) { + $data["metadata[$key]"] = $value; + } + } + + return $this->request('POST', '/checkout/sessions', $data); + } + + /** + * Retrieve a Checkout Session + */ + public function getCheckoutSession($sessionId) { + return $this->request('GET', '/checkout/sessions/' . $sessionId); + } + + /** + * Verify webhook signature + */ + public function verifyWebhookSignature($payload, $sigHeader, $webhookSecret) { + if (empty($webhookSecret)) { + return true; // Skip verification if secret not configured + } + + $elements = explode(',', $sigHeader); + $timestamp = null; + $signatures = []; + + foreach ($elements as $element) { + $parts = explode('=', $element, 2); + if (count($parts) === 2) { + if ($parts[0] === 't') { + $timestamp = $parts[1]; + } elseif ($parts[0] === 'v1') { + $signatures[] = $parts[1]; + } + } + } + + if (empty($timestamp) || empty($signatures)) { + throw new Exception('Invalid signature format'); + } + + // Check timestamp tolerance (5 minutes) + if (abs(time() - $timestamp) > 300) { + throw new Exception('Timestamp outside tolerance'); + } + + $signedPayload = $timestamp . '.' . $payload; + $expectedSignature = hash_hmac('sha256', $signedPayload, $webhookSecret); + + foreach ($signatures as $sig) { + if (hash_equals($expectedSignature, $sig)) { + return true; + } + } + + throw new Exception('Signature verification failed'); + } + + /** + * Create a refund + */ + public function createRefund($paymentIntentId, $amount = null) { + $data = ['payment_intent' => $paymentIntentId]; + + if ($amount !== null) { + $data['amount'] = (int)($amount * 100); + } + + return $this->request('POST', '/refunds', $data); + } +} + +/** + * Get Stripe instance + */ +function stripe() { + static $stripe = null; + if ($stripe === null) { + $stripe = new StripeAPI(); + } + return $stripe; +} + +/** + * Check if Stripe is properly configured + */ +function isStripeConfigured() { + return !empty(STRIPE_SECRET_KEY) && + STRIPE_SECRET_KEY !== 'sk_test_your_stripe_key' && + !empty(STRIPE_PUBLISHABLE_KEY) && + STRIPE_PUBLISHABLE_KEY !== 'pk_test_your_stripe_key'; +} diff --git a/index.php b/index.php new file mode 100644 index 0000000..bcf1408 --- /dev/null +++ b/index.php @@ -0,0 +1,192 @@ +fetchAll( + "SELECT * FROM products WHERE is_active = 1 AND is_featured = 1 ORDER BY created_at DESC LIMIT 4" +); + +// If no featured products, get latest products +if (empty($featuredProducts)) { + $featuredProducts = db()->fetchAll( + "SELECT * FROM products WHERE is_active = 1 ORDER BY created_at DESC LIMIT 4" + ); +} + +require_once __DIR__ . '/includes/header.php'; +?> + + +

Premium Coffee, Delivered Fresh

Artisan roasted coffee beans sourced from the world's finest growing regions. Experience the perfect cup, every time.

+ Shop Now + Learn More +

+ + +

+ +

Ethically Sourced

Direct trade relationships with farmers ensuring fair wages and sustainable practices.

+ +

Fresh Roasted

Roasted in small batches weekly to ensure maximum freshness and flavor.

+ +

Fast Delivery

Free shipping on orders over $50. Same-day dispatch for orders before 2pm.

+ +

Satisfaction Guaranteed

Not happy with your order? We'll make it right or your money back.

+ + +

Our Story

+ Founded in Fort Worth, Texas, Tom's Java Jive began with a simple mission: to bring exceptional coffee to our community. What started as a small roastery has grown into a beloved local institution. +

+ We source our beans directly from farmers around the world, ensuring fair prices and sustainable practices. Every batch is carefully roasted to bring out the unique flavors and characteristics of each origin. +

+ Explore Our Coffee +

+ + + + + + + diff --git a/install/generate-icons.php b/install/generate-icons.php new file mode 100644 index 0000000..31e6812 --- /dev/null +++ b/install/generate-icons.php @@ -0,0 +1,53 @@ + +'; + +foreach ($sizes as $size) { + $radius = floor($size * 0.15); + $offset = floor($size * 0.1); + $scale = $size / 100; + + $svg = str_replace( + ['{SIZE}', '{RADIUS}', '{OFFSET}', '{SCALE}'], + [$size, $radius, $offset, $scale], + $svgTemplate + ); + + // Save as SVG + file_put_contents($outputDir . "icon-{$size}.svg", $svg); + + echo "Generated icon-{$size}.svg\n"; +} + +// Also create badge icon +$badgeSvg = ' +'; + +file_put_contents($outputDir . 'badge-72.svg', $badgeSvg); +echo "Generated badge-72.svg\n"; + +echo "\nDone! Icons generated in: $outputDir\n"; +echo "Note: For production, convert SVGs to PNGs using an image tool.\n"; diff --git a/install/migrate_from_mongodb.php b/install/migrate_from_mongodb.php new file mode 100644 index 0000000..9002fbc --- /dev/null +++ b/install/migrate_from_mongodb.php @@ -0,0 +1,435 @@ +selectDatabase($mongoDbName); + echo "Connected to MongoDB database: $mongoDbName\n\n"; + + // Test MySQL connection + $mysql = db(); + echo "Connected to MySQL database: " . DB_NAME . "\n\n"; + +} catch (Exception $e) { + echo "ERROR: " . $e->getMessage() . "\n"; + exit(1); +} + +/** + * Helper function to convert MongoDB document to array + */ +function docToArray($doc) { + if ($doc instanceof MongoDB\Model\BSONDocument || $doc instanceof MongoDB\Model\BSONArray) { + return json_decode(json_encode($doc), true); + } + return $doc; +} + +/** + * Helper function to safely get nested value + */ +function safeGet($array, $key, $default = null) { + return isset($array[$key]) ? $array[$key] : $default; +} + +/** + * Migrate Admin Users + */ +function migrateAdminUsers($mongodb, $mysql) { + echo "Migrating admin users...\n"; + + $cursor = $mongodb->admin_users->find(); + $count = 0; + + foreach ($cursor as $doc) { + $doc = docToArray($doc); + + try { + $mysql->insert('admin_users', [ + 'user_id' => safeGet($doc, 'user_id') ?: safeGet($doc, 'admin_id'), + 'email' => safeGet($doc, 'email'), + 'password_hash' => safeGet($doc, 'password_hash'), + 'name' => safeGet($doc, 'name'), + 'picture' => safeGet($doc, 'picture'), + 'is_admin' => 1, + 'is_master' => safeGet($doc, 'is_master') ? 1 : 0, + 'permissions' => json_encode(safeGet($doc, 'permissions', [])), + 'created_at' => safeGet($doc, 'created_at') ?: date('Y-m-d H:i:s') + ]); + $count++; + } catch (Exception $e) { + echo " Warning: Could not migrate admin {$doc['email']}: " . $e->getMessage() . "\n"; + } + } + + echo " Migrated $count admin users\n\n"; +} + +/** + * Migrate Customers + */ +function migrateCustomers($mongodb, $mysql) { + echo "Migrating customers...\n"; + + $cursor = $mongodb->customers->find(); + $count = 0; + + foreach ($cursor as $doc) { + $doc = docToArray($doc); + + try { + $mysql->insert('customers', [ + 'customer_id' => safeGet($doc, 'customer_id'), + 'email' => safeGet($doc, 'email'), + 'password_hash' => safeGet($doc, 'password_hash'), + 'name' => safeGet($doc, 'name'), + 'phone' => safeGet($doc, 'phone'), + 'shipping_address' => json_encode(safeGet($doc, 'shipping_address')), + 'billing_address' => json_encode(safeGet($doc, 'billing_address')), + 'wallet_balance' => safeGet($doc, 'account_balance', 0), + 'reward_points' => safeGet($doc, 'loyalty_points', 0), + 'is_guest' => safeGet($doc, 'is_guest') ? 1 : 0, + 'created_via' => safeGet($doc, 'created_via', 'web'), + 'created_at' => safeGet($doc, 'created_at') ?: date('Y-m-d H:i:s') + ]); + + // Migrate wallet transactions + $transactions = safeGet($doc, 'account_transactions', []); + foreach ($transactions as $txn) { + try { + $mysql->insert('wallet_transactions', [ + 'transaction_id' => safeGet($txn, 'transaction_id') ?: 'txn_' . bin2hex(random_bytes(6)), + 'customer_id' => $doc['customer_id'], + 'amount' => safeGet($txn, 'amount', 0), + 'balance_after' => safeGet($txn, 'balance_after', 0), + 'type' => mapTransactionType(safeGet($txn, 'type')), + 'description' => safeGet($txn, 'description'), + 'order_id' => safeGet($txn, 'order_id'), + 'created_at' => safeGet($txn, 'date') ?: date('Y-m-d H:i:s') + ]); + } catch (Exception $e) { + // Skip transaction errors + } + } + + $count++; + } catch (Exception $e) { + echo " Warning: Could not migrate customer {$doc['email']}: " . $e->getMessage() . "\n"; + } + } + + echo " Migrated $count customers\n\n"; +} + +function mapTransactionType($type) { + $map = [ + 'deposit' => 'deposit', + 'payment' => 'withdrawal', + 'gift_card_purchase' => 'purchase', + 'admin_deposit' => 'deposit', + 'pos_payment' => 'withdrawal', + 'refund' => 'refund' + ]; + return isset($map[$type]) ? $map[$type] : 'deposit'; +} + +/** + * Migrate Products + */ +function migrateProducts($mongodb, $mysql) { + echo "Migrating products...\n"; + + $cursor = $mongodb->products->find(); + $count = 0; + + foreach ($cursor as $doc) { + $doc = docToArray($doc); + + // Map blend_type to category + $category = safeGet($doc, 'blend_type') ?: safeGet($doc, 'category') ?: 'coffee'; + + try { + $mysql->insert('products', [ + 'product_id' => safeGet($doc, 'product_id'), + 'name' => safeGet($doc, 'name'), + 'description' => safeGet($doc, 'description'), + 'price' => safeGet($doc, 'price', 0), + 'sale_price' => safeGet($doc, 'sale_price'), + 'sku' => safeGet($doc, 'sku'), + 'barcode' => safeGet($doc, 'barcode'), + 'category' => $category, + 'tags' => json_encode([safeGet($doc, 'roast_level'), safeGet($doc, 'product_type')]), + 'images' => json_encode([safeGet($doc, 'image_url')]), + 'stock' => safeGet($doc, 'stock_quantity', 100), + 'low_stock_threshold' => safeGet($doc, 'low_stock_threshold', 10), + 'weight' => safeGet($doc, 'weight'), + 'is_active' => safeGet($doc, 'in_stock', true) ? 1 : 0, + 'is_featured' => safeGet($doc, 'on_sale', false) ? 1 : 0, + 'created_at' => safeGet($doc, 'created_at') ?: date('Y-m-d H:i:s') + ]); + $count++; + } catch (Exception $e) { + echo " Warning: Could not migrate product {$doc['name']}: " . $e->getMessage() . "\n"; + } + } + + echo " Migrated $count products\n\n"; +} + +/** + * Migrate Orders + */ +function migrateOrders($mongodb, $mysql) { + echo "Migrating orders...\n"; + + $cursor = $mongodb->orders->find(); + $count = 0; + + foreach ($cursor as $doc) { + $doc = docToArray($doc); + + try { + $mysql->insert('orders', [ + 'order_id' => safeGet($doc, 'order_id'), + 'order_number' => safeGet($doc, 'order_number'), + 'customer_id' => safeGet($doc, 'customer_id'), + 'customer_email' => safeGet($doc, 'customer_email'), + 'customer_name' => safeGet($doc, 'customer_name'), + 'items' => json_encode(safeGet($doc, 'items', [])), + 'subtotal' => safeGet($doc, 'subtotal', 0), + 'shipping_cost' => safeGet($doc, 'shipping_cost', 0), + 'tax' => safeGet($doc, 'tax', 0), + 'discount' => safeGet($doc, 'discount_amount', 0), + 'total' => safeGet($doc, 'total', 0), + 'shipping_address' => json_encode(safeGet($doc, 'shipping_address')), + 'shipping_method' => safeGet($doc, 'shipping_method'), + 'payment_method' => safeGet($doc, 'payment_method'), + 'payment_status' => safeGet($doc, 'payment_status', 'pending'), + 'order_status' => safeGet($doc, 'order_status', 'pending'), + 'stripe_payment_intent' => safeGet($doc, 'checkout_session_id'), + 'tracking_number' => safeGet($doc, 'tracking_number'), + 'notes' => safeGet($doc, 'pos_notes'), + 'is_pos_order' => safeGet($doc, 'pos_order') ? 1 : 0, + 'created_at' => safeGet($doc, 'created_at') ?: date('Y-m-d H:i:s') + ]); + + // Also insert into order_items for reporting + $items = safeGet($doc, 'items', []); + foreach ($items as $item) { + try { + $mysql->insert('order_items', [ + 'order_id' => $doc['order_id'], + 'product_id' => safeGet($item, 'product_id'), + 'name' => safeGet($item, 'name'), + 'price' => safeGet($item, 'price', 0), + 'quantity' => safeGet($item, 'quantity', 1), + 'total' => safeGet($item, 'total', 0) + ]); + } catch (Exception $e) { + // Skip item errors + } + } + + $count++; + } catch (Exception $e) { + echo " Warning: Could not migrate order {$doc['order_number']}: " . $e->getMessage() . "\n"; + } + } + + echo " Migrated $count orders\n\n"; +} + +/** + * Migrate Gift Cards + */ +function migrateGiftCards($mongodb, $mysql) { + echo "Migrating gift cards...\n"; + + $cursor = $mongodb->gift_cards->find(); + $count = 0; + + foreach ($cursor as $doc) { + $doc = docToArray($doc); + + try { + $mysql->insert('gift_cards', [ + 'gift_card_id' => safeGet($doc, 'gift_card_id'), + 'code' => safeGet($doc, 'code'), + 'initial_balance' => safeGet($doc, 'initial_balance', 0), + 'current_balance' => safeGet($doc, 'current_balance', 0), + 'purchaser_email' => safeGet($doc, 'purchased_by_email'), + 'recipient_email' => safeGet($doc, 'recipient_email'), + 'recipient_name' => safeGet($doc, 'recipient_name'), + 'message' => safeGet($doc, 'message'), + 'is_active' => safeGet($doc, 'status') !== 'disabled' ? 1 : 0, + 'created_at' => safeGet($doc, 'created_at') ?: date('Y-m-d H:i:s') + ]); + $count++; + } catch (Exception $e) { + echo " Warning: Could not migrate gift card {$doc['code']}: " . $e->getMessage() . "\n"; + } + } + + echo " Migrated $count gift cards\n\n"; +} + +/** + * Migrate Reviews + */ +function migrateReviews($mongodb, $mysql) { + echo "Migrating reviews...\n"; + + $cursor = $mongodb->product_reviews->find(); + $count = 0; + + foreach ($cursor as $doc) { + $doc = docToArray($doc); + + try { + $mysql->insert('reviews', [ + 'review_id' => safeGet($doc, 'review_id'), + 'product_id' => safeGet($doc, 'product_id'), + 'customer_id' => safeGet($doc, 'customer_id'), + 'customer_name' => safeGet($doc, 'customer_name'), + 'customer_email' => safeGet($doc, 'customer_email'), + 'rating' => safeGet($doc, 'rating', 5), + 'title' => safeGet($doc, 'title'), + 'comment' => safeGet($doc, 'comment'), + 'is_verified_purchase' => safeGet($doc, 'verified_purchase') ? 1 : 0, + 'is_approved' => safeGet($doc, 'status') === 'approved' ? 1 : 0, + 'created_at' => safeGet($doc, 'created_at') ?: date('Y-m-d H:i:s') + ]); + $count++; + } catch (Exception $e) { + echo " Warning: Could not migrate review: " . $e->getMessage() . "\n"; + } + } + + echo " Migrated $count reviews\n\n"; +} + +/** + * Migrate Email Subscribers + */ +function migrateSubscribers($mongodb, $mysql) { + echo "Migrating email subscribers...\n"; + + $cursor = $mongodb->email_subscribers->find(); + $count = 0; + + foreach ($cursor as $doc) { + $doc = docToArray($doc); + + try { + $mysql->insert('email_subscribers', [ + 'email' => safeGet($doc, 'email'), + 'name' => safeGet($doc, 'name'), + 'is_active' => safeGet($doc, 'status') === 'active' ? 1 : 0, + 'source' => safeGet($doc, 'source', 'website'), + 'created_at' => safeGet($doc, 'subscribed_at') ?: date('Y-m-d H:i:s') + ]); + $count++; + } catch (Exception $e) { + // Skip duplicate emails + } + } + + echo " Migrated $count subscribers\n\n"; +} + +/** + * Migrate Settings + */ +function migrateSettings($mongodb, $mysql) { + echo "Migrating settings...\n"; + + // Shipping settings + $shipping = $mongodb->shipping_settings->findOne(['settings_id' => 'shipping_settings']); + if ($shipping) { + $shipping = docToArray($shipping); + $mysql->query( + "UPDATE settings SET setting_value = :val WHERE setting_key = 'shipping'", + ['val' => json_encode([ + 'flat_rate_enabled' => safeGet($shipping, 'flat_rate_enabled', true), + 'flat_rate_amount' => safeGet($shipping, 'flat_rate_amount', 5.99), + 'free_shipping_threshold' => safeGet($shipping, 'free_shipping_threshold', 50), + 'weight_based_enabled' => safeGet($shipping, 'weight_based_enabled', false) + ])] + ); + echo " Migrated shipping settings\n"; + } + + // Payment settings + $payment = $mongodb->payment_settings->findOne(['settings_id' => 'payment_settings']); + if ($payment) { + $payment = docToArray($payment); + $mysql->query( + "UPDATE settings SET setting_value = :val WHERE setting_key = 'payment'", + ['val' => json_encode([ + 'stripe_enabled' => safeGet($payment, 'stripe_enabled', true), + 'paypal_enabled' => safeGet($payment, 'paypal_enabled', false), + 'cod_enabled' => false + ])] + ); + echo " Migrated payment settings\n"; + } + + echo "\n"; +} + +// Run migrations +echo "Starting migration...\n\n"; + +try { + migrateAdminUsers($mongodb, $mysql); + migrateCustomers($mongodb, $mysql); + migrateProducts($mongodb, $mysql); + migrateOrders($mongodb, $mysql); + migrateGiftCards($mongodb, $mysql); + migrateReviews($mongodb, $mysql); + migrateSubscribers($mongodb, $mysql); + migrateSettings($mongodb, $mysql); + + echo "==============================================\n"; + echo "Migration completed successfully!\n"; + echo "==============================================\n"; + +} catch (Exception $e) { + echo "\nMIGRATION ERROR: " . $e->getMessage() . "\n"; + exit(1); +} diff --git a/install/migration_v2.sql b/install/migration_v2.sql new file mode 100644 index 0000000..b4cbb58 --- /dev/null +++ b/install/migration_v2.sql @@ -0,0 +1,37 @@ +-- Migration: Add wishlist table and addresses column to customers +-- Run this in phpMyAdmin to add the new features + +-- Add addresses column to customers table +ALTER TABLE `customers` ADD COLUMN `addresses` JSON DEFAULT NULL AFTER `billing_address`; + +-- Add preferences column to customers table +ALTER TABLE `customers` ADD COLUMN `preferences` JSON DEFAULT NULL AFTER `addresses`; + +-- Add is_active column to customers table if not exists +ALTER TABLE `customers` ADD COLUMN `is_active` TINYINT(1) DEFAULT 1 AFTER `preferences`; + +-- Create wishlist table +CREATE TABLE IF NOT EXISTS `wishlist` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `customer_id` VARCHAR(50) NOT NULL, + `product_id` VARCHAR(50) NOT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + UNIQUE KEY `unique_wishlist` (`customer_id`, `product_id`), + INDEX `idx_customer` (`customer_id`), + INDEX `idx_product` (`product_id`), + FOREIGN KEY (`customer_id`) REFERENCES `customers`(`customer_id`) ON DELETE CASCADE, + FOREIGN KEY (`product_id`) REFERENCES `products`(`product_id`) ON DELETE CASCADE +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- Add reorder_level column to products if not exists +ALTER TABLE `products` ADD COLUMN `reorder_level` INT DEFAULT 10 AFTER `low_stock_threshold`; + +-- Add slug column to products if not exists +ALTER TABLE `products` ADD COLUMN `slug` VARCHAR(255) DEFAULT NULL AFTER `name`; +ALTER TABLE `products` ADD INDEX `idx_slug` (`slug`); + +-- Update existing products to have slugs based on name +UPDATE `products` SET `slug` = LOWER(REPLACE(REPLACE(REPLACE(`name`, ' ', '-'), "'", ''), '"', '')) WHERE `slug` IS NULL; + +-- Add is_pos_order to orders table +ALTER TABLE `orders` ADD COLUMN `is_pos_order` TINYINT(1) DEFAULT 0 AFTER `notes`; diff --git a/install/migration_v3.sql b/install/migration_v3.sql new file mode 100644 index 0000000..8b55223 --- /dev/null +++ b/install/migration_v3.sql @@ -0,0 +1,96 @@ +-- Migration: Add tables for push notifications, loyalty program, and integration settings +-- Run this in phpMyAdmin + +-- Push notification subscriptions +CREATE TABLE IF NOT EXISTS `push_subscriptions` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `customer_id` VARCHAR(50) DEFAULT NULL, + `endpoint` TEXT NOT NULL, + `p256dh_key` VARCHAR(255) NOT NULL, + `auth_key` VARCHAR(255) NOT NULL, + `is_active` TINYINT(1) DEFAULT 1, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_customer` (`customer_id`), + INDEX `idx_active` (`is_active`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- Push notifications queue +CREATE TABLE IF NOT EXISTS `push_notifications` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `notification_id` VARCHAR(50) NOT NULL UNIQUE, + `subscription_endpoint` TEXT NOT NULL, + `payload` TEXT NOT NULL, + `status` ENUM('pending', 'sent', 'failed') DEFAULT 'pending', + `error_message` TEXT DEFAULT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `sent_at` TIMESTAMP NULL DEFAULT NULL, + INDEX `idx_status` (`status`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- Loyalty transactions history +CREATE TABLE IF NOT EXISTS `loyalty_transactions` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `transaction_id` VARCHAR(50) NOT NULL UNIQUE, + `customer_id` VARCHAR(50) NOT NULL, + `points` INT NOT NULL, + `type` ENUM('earn', 'redeem', 'tier_upgrade', 'birthday_bonus', 'referral_bonus', 'referral_welcome', 'adjustment', 'expiry') NOT NULL, + `description` VARCHAR(255) DEFAULT NULL, + `reference_amount` DECIMAL(10,2) DEFAULT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_customer` (`customer_id`), + INDEX `idx_type` (`type`), + INDEX `idx_created` (`created_at`), + FOREIGN KEY (`customer_id`) REFERENCES `customers`(`customer_id`) ON DELETE CASCADE +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- Add lifetime_points and loyalty_tier to customers +ALTER TABLE `customers` + ADD COLUMN IF NOT EXISTS `lifetime_points` INT DEFAULT 0 AFTER `reward_points`, + ADD COLUMN IF NOT EXISTS `loyalty_tier` ENUM('bronze', 'silver', 'gold', 'platinum') DEFAULT 'bronze' AFTER `lifetime_points`, + ADD COLUMN IF NOT EXISTS `birthday` DATE DEFAULT NULL AFTER `loyalty_tier`, + ADD COLUMN IF NOT EXISTS `referral_code` VARCHAR(20) DEFAULT NULL AFTER `birthday`, + ADD COLUMN IF NOT EXISTS `referred_by` VARCHAR(50) DEFAULT NULL AFTER `referral_code`; + +-- Add unique index on referral_code +ALTER TABLE `customers` ADD UNIQUE INDEX IF NOT EXISTS `idx_referral_code` (`referral_code`); + +-- Update settings table with integration keys (INSERT IGNORE to not overwrite existing) +INSERT IGNORE INTO `settings` (`setting_key`, `setting_value`, `updated_at`) VALUES +('sendgrid_api_key', '', NOW()), +('sendgrid_from_email', 'noreply@tomsjavajive.com', NOW()), +('sendgrid_from_name', 'Tom''s Java Jive', NOW()), +('twilio_account_sid', '', NOW()), +('twilio_auth_token', '', NOW()), +('twilio_phone_number', '', NOW()), +('vapid_public_key', '', NOW()), +('vapid_private_key', '', NOW()), +('loyalty_enabled', '1', NOW()), +('email_notifications_enabled', '1', NOW()), +('sms_notifications_enabled', '0', NOW()), +('push_notifications_enabled', '1', NOW()); + +-- Add Stripe checkout session column to orders +ALTER TABLE `orders` ADD COLUMN IF NOT EXISTS `stripe_checkout_session` VARCHAR(255) DEFAULT NULL AFTER `stripe_payment_intent`; + +-- Payment transactions table for tracking payment attempts +CREATE TABLE IF NOT EXISTS `payment_transactions` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `transaction_id` VARCHAR(50) NOT NULL UNIQUE, + `order_id` VARCHAR(50) NOT NULL, + `customer_id` VARCHAR(50) DEFAULT NULL, + `amount` DECIMAL(10,2) NOT NULL, + `currency` VARCHAR(3) DEFAULT 'USD', + `payment_method` VARCHAR(50) DEFAULT 'stripe', + `stripe_session_id` VARCHAR(255) DEFAULT NULL, + `stripe_payment_intent` VARCHAR(255) DEFAULT NULL, + `status` ENUM('initiated', 'pending', 'processing', 'succeeded', 'failed', 'cancelled', 'refunded') DEFAULT 'initiated', + `metadata` JSON DEFAULT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_order` (`order_id`), + INDEX `idx_customer` (`customer_id`), + INDEX `idx_status` (`status`), + INDEX `idx_stripe_session` (`stripe_session_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + diff --git a/install/schema.sql b/install/schema.sql new file mode 100644 index 0000000..131425f --- /dev/null +++ b/install/schema.sql @@ -0,0 +1,402 @@ +-- Tom's Java Jive - MySQL Database Schema +-- Version: 1.0 +-- Compatible with MySQL 8.0+ + +SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO"; +SET AUTOCOMMIT = 0; +START TRANSACTION; +SET time_zone = "+00:00"; + +-- -------------------------------------------------------- +-- Database Schema for Tom's Java Jive +-- NOTE: Database must already exist in cPanel +-- Select your database in phpMyAdmin before importing +-- -------------------------------------------------------- + +-- -------------------------------------------------------- +-- Table: settings +-- -------------------------------------------------------- +CREATE TABLE `settings` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `setting_key` VARCHAR(100) NOT NULL UNIQUE, + `setting_value` JSON, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: admin_users +-- -------------------------------------------------------- +CREATE TABLE `admin_users` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `user_id` VARCHAR(50) NOT NULL UNIQUE, + `email` VARCHAR(255) NOT NULL UNIQUE, + `password_hash` VARCHAR(255) DEFAULT NULL, + `name` VARCHAR(255) DEFAULT NULL, + `picture` VARCHAR(500) DEFAULT NULL, + `is_admin` TINYINT(1) DEFAULT 1, + `is_master` TINYINT(1) DEFAULT 0, + `permissions` JSON DEFAULT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `last_login` TIMESTAMP NULL, + INDEX `idx_email` (`email`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: customers +-- -------------------------------------------------------- +CREATE TABLE `customers` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `customer_id` VARCHAR(50) NOT NULL UNIQUE, + `email` VARCHAR(255) NOT NULL UNIQUE, + `password_hash` VARCHAR(255) DEFAULT NULL, + `name` VARCHAR(255) DEFAULT NULL, + `phone` VARCHAR(50) DEFAULT NULL, + `shipping_address` JSON DEFAULT NULL, + `billing_address` JSON DEFAULT NULL, + `wallet_balance` DECIMAL(10,2) DEFAULT 0.00, + `reward_points` INT DEFAULT 0, + `is_guest` TINYINT(1) DEFAULT 0, + `created_via` VARCHAR(50) DEFAULT 'web', + `email_verified` TINYINT(1) DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_email` (`email`), + INDEX `idx_customer_id` (`customer_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: products +-- -------------------------------------------------------- +CREATE TABLE `products` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `product_id` VARCHAR(50) NOT NULL UNIQUE, + `name` VARCHAR(255) NOT NULL, + `description` TEXT, + `price` DECIMAL(10,2) NOT NULL, + `sale_price` DECIMAL(10,2) DEFAULT NULL, + `cost_price` DECIMAL(10,2) DEFAULT NULL, + `sku` VARCHAR(100) DEFAULT NULL, + `barcode` VARCHAR(100) DEFAULT NULL, + `category` VARCHAR(100) DEFAULT NULL, + `tags` JSON DEFAULT NULL, + `images` JSON DEFAULT NULL, + `stock` INT DEFAULT 0, + `low_stock_threshold` INT DEFAULT 10, + `weight` DECIMAL(10,2) DEFAULT NULL, + `dimensions` JSON DEFAULT NULL, + `is_active` TINYINT(1) DEFAULT 1, + `is_featured` TINYINT(1) DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_product_id` (`product_id`), + INDEX `idx_category` (`category`), + INDEX `idx_is_active` (`is_active`), + FULLTEXT INDEX `idx_search` (`name`, `description`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: orders +-- -------------------------------------------------------- +CREATE TABLE `orders` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `order_id` VARCHAR(50) NOT NULL UNIQUE, + `order_number` VARCHAR(20) NOT NULL UNIQUE, + `customer_id` VARCHAR(50) DEFAULT NULL, + `customer_email` VARCHAR(255) NOT NULL, + `customer_name` VARCHAR(255) DEFAULT NULL, + `customer_phone` VARCHAR(50) DEFAULT NULL, + `items` JSON NOT NULL, + `subtotal` DECIMAL(10,2) NOT NULL, + `shipping_cost` DECIMAL(10,2) DEFAULT 0.00, + `tax` DECIMAL(10,2) DEFAULT 0.00, + `discount` DECIMAL(10,2) DEFAULT 0.00, + `gift_card_discount` DECIMAL(10,2) DEFAULT 0.00, + `wallet_amount_used` DECIMAL(10,2) DEFAULT 0.00, + `total` DECIMAL(10,2) NOT NULL, + `shipping_address` JSON DEFAULT NULL, + `billing_address` JSON DEFAULT NULL, + `shipping_method` VARCHAR(50) DEFAULT NULL, + `payment_method` VARCHAR(50) DEFAULT NULL, + `payment_status` ENUM('pending', 'paid', 'failed', 'refunded', 'partially_refunded') DEFAULT 'pending', + `order_status` ENUM('pending', 'confirmed', 'processing', 'shipped', 'delivered', 'cancelled', 'refunded') DEFAULT 'pending', + `stripe_session_id` VARCHAR(255) DEFAULT NULL, + `stripe_payment_intent` VARCHAR(255) DEFAULT NULL, + `tracking_number` VARCHAR(100) DEFAULT NULL, + `tracking_url` VARCHAR(500) DEFAULT NULL, + `notes` TEXT DEFAULT NULL, + `is_pos_order` TINYINT(1) DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_order_id` (`order_id`), + INDEX `idx_customer_id` (`customer_id`), + INDEX `idx_customer_email` (`customer_email`), + INDEX `idx_order_status` (`order_status`), + INDEX `idx_payment_status` (`payment_status`), + INDEX `idx_created_at` (`created_at`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: order_items (normalized for reporting) +-- -------------------------------------------------------- +CREATE TABLE `order_items` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `order_id` VARCHAR(50) NOT NULL, + `product_id` VARCHAR(50) NOT NULL, + `name` VARCHAR(255) NOT NULL, + `price` DECIMAL(10,2) NOT NULL, + `quantity` INT NOT NULL, + `total` DECIMAL(10,2) NOT NULL, + INDEX `idx_order_id` (`order_id`), + INDEX `idx_product_id` (`product_id`), + FOREIGN KEY (`order_id`) REFERENCES `orders`(`order_id`) ON DELETE CASCADE +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: gift_cards +-- -------------------------------------------------------- +CREATE TABLE `gift_cards` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `gift_card_id` VARCHAR(50) NOT NULL UNIQUE, + `code` VARCHAR(20) NOT NULL UNIQUE, + `initial_balance` DECIMAL(10,2) NOT NULL, + `current_balance` DECIMAL(10,2) NOT NULL, + `purchaser_email` VARCHAR(255) DEFAULT NULL, + `recipient_email` VARCHAR(255) DEFAULT NULL, + `recipient_name` VARCHAR(255) DEFAULT NULL, + `message` TEXT DEFAULT NULL, + `is_active` TINYINT(1) DEFAULT 1, + `expires_at` TIMESTAMP NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_code` (`code`), + INDEX `idx_is_active` (`is_active`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: gift_card_transactions +-- -------------------------------------------------------- +CREATE TABLE `gift_card_transactions` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `gift_card_id` VARCHAR(50) NOT NULL, + `order_id` VARCHAR(50) DEFAULT NULL, + `amount` DECIMAL(10,2) NOT NULL, + `balance_after` DECIMAL(10,2) NOT NULL, + `type` ENUM('purchase', 'redemption', 'refund') NOT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_gift_card_id` (`gift_card_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: wallet_transactions +-- -------------------------------------------------------- +CREATE TABLE `wallet_transactions` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `transaction_id` VARCHAR(50) NOT NULL UNIQUE, + `customer_id` VARCHAR(50) NOT NULL, + `amount` DECIMAL(10,2) NOT NULL, + `balance_after` DECIMAL(10,2) NOT NULL, + `type` ENUM('deposit', 'withdrawal', 'purchase', 'refund', 'reward') NOT NULL, + `description` VARCHAR(255) DEFAULT NULL, + `order_id` VARCHAR(50) DEFAULT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_customer_id` (`customer_id`), + INDEX `idx_type` (`type`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: reviews +-- -------------------------------------------------------- +CREATE TABLE `reviews` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `review_id` VARCHAR(50) NOT NULL UNIQUE, + `product_id` VARCHAR(50) NOT NULL, + `customer_id` VARCHAR(50) DEFAULT NULL, + `customer_name` VARCHAR(255) NOT NULL, + `customer_email` VARCHAR(255) NOT NULL, + `rating` INT NOT NULL CHECK (rating >= 1 AND rating <= 5), + `title` VARCHAR(255) DEFAULT NULL, + `comment` TEXT, + `is_verified_purchase` TINYINT(1) DEFAULT 0, + `is_approved` TINYINT(1) DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_product_id` (`product_id`), + INDEX `idx_is_approved` (`is_approved`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: email_campaigns +-- -------------------------------------------------------- +CREATE TABLE `email_campaigns` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `campaign_id` VARCHAR(50) NOT NULL UNIQUE, + `name` VARCHAR(255) NOT NULL, + `subject` VARCHAR(255) NOT NULL, + `content` TEXT NOT NULL, + `recipient_type` ENUM('all', 'customers_only', 'subscribers_only') DEFAULT 'all', + `status` ENUM('draft', 'scheduled', 'sent', 'cancelled') DEFAULT 'draft', + `scheduled_at` TIMESTAMP NULL, + `sent_at` TIMESTAMP NULL, + `recipients_count` INT DEFAULT 0, + `opened_count` INT DEFAULT 0, + `clicked_count` INT DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_status` (`status`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: email_subscribers +-- -------------------------------------------------------- +CREATE TABLE `email_subscribers` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `email` VARCHAR(255) NOT NULL UNIQUE, + `name` VARCHAR(255) DEFAULT NULL, + `is_active` TINYINT(1) DEFAULT 1, + `source` VARCHAR(50) DEFAULT 'website', + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_is_active` (`is_active`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: abandoned_carts +-- -------------------------------------------------------- +CREATE TABLE `abandoned_carts` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `cart_id` VARCHAR(50) NOT NULL UNIQUE, + `customer_id` VARCHAR(50) DEFAULT NULL, + `customer_email` VARCHAR(255) DEFAULT NULL, + `items` JSON NOT NULL, + `subtotal` DECIMAL(10,2) NOT NULL, + `recovery_email_sent` TINYINT(1) DEFAULT 0, + `recovered` TINYINT(1) DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_customer_email` (`customer_email`), + INDEX `idx_recovered` (`recovered`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: referrals +-- -------------------------------------------------------- +CREATE TABLE `referrals` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `referral_id` VARCHAR(50) NOT NULL UNIQUE, + `referrer_customer_id` VARCHAR(50) NOT NULL, + `referral_code` VARCHAR(20) NOT NULL UNIQUE, + `referred_customer_id` VARCHAR(50) DEFAULT NULL, + `referred_email` VARCHAR(255) DEFAULT NULL, + `status` ENUM('pending', 'completed', 'expired') DEFAULT 'pending', + `reward_amount` DECIMAL(10,2) DEFAULT 5.00, + `reward_given` TINYINT(1) DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_referral_code` (`referral_code`), + INDEX `idx_referrer` (`referrer_customer_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: visitor_sessions +-- -------------------------------------------------------- +CREATE TABLE `visitor_sessions` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `session_id` VARCHAR(100) NOT NULL UNIQUE, + `visitor_id` VARCHAR(50) NOT NULL, + `ip_address` VARCHAR(45) DEFAULT NULL, + `user_agent` TEXT DEFAULT NULL, + `current_page` VARCHAR(500) DEFAULT NULL, + `referrer` VARCHAR(500) DEFAULT NULL, + `country` VARCHAR(100) DEFAULT NULL, + `city` VARCHAR(100) DEFAULT NULL, + `is_active` TINYINT(1) DEFAULT 1, + `page_views` INT DEFAULT 1, + `started_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `last_activity` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_is_active` (`is_active`), + INDEX `idx_last_activity` (`last_activity`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: categories +-- -------------------------------------------------------- +CREATE TABLE `categories` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `category_id` VARCHAR(50) NOT NULL UNIQUE, + `name` VARCHAR(255) NOT NULL, + `slug` VARCHAR(255) NOT NULL UNIQUE, + `description` TEXT DEFAULT NULL, + `image` VARCHAR(500) DEFAULT NULL, + `parent_id` VARCHAR(50) DEFAULT NULL, + `sort_order` INT DEFAULT 0, + `is_active` TINYINT(1) DEFAULT 1, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + INDEX `idx_slug` (`slug`), + INDEX `idx_is_active` (`is_active`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: coupons +-- -------------------------------------------------------- +CREATE TABLE `coupons` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `coupon_id` VARCHAR(50) NOT NULL UNIQUE, + `code` VARCHAR(50) NOT NULL UNIQUE, + `discount_type` ENUM('percentage', 'fixed') NOT NULL DEFAULT 'percentage', + `discount_value` DECIMAL(10,2) NOT NULL, + `min_order_amount` DECIMAL(10,2) DEFAULT NULL, + `max_uses` INT DEFAULT NULL, + `times_used` INT DEFAULT 0, + `is_active` TINYINT(1) DEFAULT 1, + `starts_at` TIMESTAMP NULL, + `expires_at` TIMESTAMP NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_code` (`code`), + INDEX `idx_is_active` (`is_active`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: password_reset_tokens +-- -------------------------------------------------------- +CREATE TABLE `password_reset_tokens` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `email` VARCHAR(255) NOT NULL, + `token` VARCHAR(255) NOT NULL, + `user_type` ENUM('admin', 'customer') NOT NULL, + `expires_at` TIMESTAMP NOT NULL, + `used` TINYINT(1) DEFAULT 0, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + INDEX `idx_token` (`token`), + INDEX `idx_email` (`email`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Table: sessions +-- -------------------------------------------------------- +CREATE TABLE `sessions` ( + `id` INT AUTO_INCREMENT PRIMARY KEY, + `session_id` VARCHAR(128) NOT NULL UNIQUE, + `user_id` VARCHAR(50) DEFAULT NULL, + `user_type` ENUM('admin', 'customer') DEFAULT NULL, + `data` TEXT, + `ip_address` VARCHAR(45) DEFAULT NULL, + `user_agent` VARCHAR(255) DEFAULT NULL, + `created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + `expires_at` TIMESTAMP NOT NULL, + INDEX `idx_session_id` (`session_id`), + INDEX `idx_expires_at` (`expires_at`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +-- -------------------------------------------------------- +-- Insert default settings +-- -------------------------------------------------------- +INSERT INTO `settings` (`setting_key`, `setting_value`) VALUES +('store_name', '"Tom\'s Java Jive"'), +('store_email', '"support@tomsjavajive.com"'), +('store_phone', '""'), +('store_address', '""'), +('currency', '"USD"'), +('currency_symbol', '"$"'), +('tax_rate', '0'), +('shipping', '{"flat_rate_enabled": true, "flat_rate_amount": 5.99, "free_shipping_threshold": 50, "weight_based_enabled": false}'), +('payment', '{"stripe_enabled": true, "paypal_enabled": false, "cod_enabled": false}'), +('email', '{"sendgrid_api_key": "", "sender_email": "noreply@tomsjavajive.com", "sender_name": "Tom\'s Java Jive"}'); + +COMMIT; diff --git a/login.php b/login.php new file mode 100644 index 0000000..40467e5 --- /dev/null +++ b/login.php @@ -0,0 +1,89 @@ + + +

Welcome Back

+ + +

+ + + + +

+ +

+ Don't have an account? Create one +

+ +

+ Or track your order with your order number +

+ + diff --git a/logout.php b/logout.php new file mode 100644 index 0000000..23933be --- /dev/null +++ b/logout.php @@ -0,0 +1,10 @@ + + + + + + Offline - Tom's Java Jive + + + +

+ +

You're Offline

It looks like you've lost your internet connection. Please check your connection and try again.

+ + + +

Some pages you've visited before may still be available offline.

+ + + + diff --git a/order-confirmation.php b/order-confirmation.php new file mode 100644 index 0000000..6080025 --- /dev/null +++ b/order-confirmation.php @@ -0,0 +1,128 @@ +fetch( + "SELECT * FROM orders WHERE order_id = :id", + ['id' => $orderId] +); + +if (!$order) { + redirect('/'); +} + +// Clear cart and pending order +clearCart(); +unset($_SESSION['pending_order_id']); + +$items = json_decode($order['items'], true) ?? []; +$shippingAddress = json_decode($order['shipping_address'], true) ?? []; + +require_once __DIR__ . '/includes/header.php'; +?> + +

+ +

Thank You!

+ Your order has been placed successfully. +

+ +

+ Order Number + +

+ +

+ Status + + + +

+ +

+ Total + +

+ +

Order Details

+ + +

+ + + x + + +

+ + +

+ Subtotal + +

+ +

+ Shipping + 0 ? formatCurrency($order['shipping_cost']) : 'FREE' ?> +

+ +

+ Total + +

+ +

Shipping Address

+
+
+ , + + +

+ +

+ A confirmation email has been sent to . + You will receive tracking information once your order ships. +

+ +

+ + Continue Shopping + + + + View Orders + + +

+ + diff --git a/payment.php b/payment.php new file mode 100644 index 0000000..36ed4be --- /dev/null +++ b/payment.php @@ -0,0 +1,287 @@ +fetch( + "SELECT * FROM orders WHERE order_id = :id", + ['id' => $orderId] +); + +if (!$order) { + redirect('/cart.php'); +} + +// If already paid, redirect to confirmation +if ($order['payment_status'] === 'paid') { + clearCart(); + redirect('/order-confirmation.php?order=' . $orderId); +} + +$stripePublishableKey = STRIPE_PUBLISHABLE_KEY; +$stripeConfigured = isStripeConfigured(); +$total = $order['total']; + +require_once __DIR__ . '/includes/header.php'; +?> + +

Complete Payment

+ +

+ Payment was cancelled. Please try again. +

+ + +

+ Order # + +

+ +

+ + + +

+ Demo Mode: Stripe is not configured. Click below to simulate a successful payment. +

+ + + +

+ +

or enter card details below

+ + + + + + +

+ Your payment is secure and encrypted +

+ + + + diff --git a/product.php b/product.php new file mode 100644 index 0000000..a7170ee --- /dev/null +++ b/product.php @@ -0,0 +1,252 @@ +fetch( + "SELECT * FROM products WHERE product_id = :id AND is_active = 1", + ['id' => $productId] +); + +if (!$product) { + header('Location: /shop.php'); + exit; +} + +$pageTitle = $product['name'] . " - Tom's Java Jive"; +$pageDescription = truncate(strip_tags($product['description']), 160); + +// Get product reviews +$reviews = db()->fetchAll( + "SELECT * FROM reviews WHERE product_id = :id AND is_approved = 1 ORDER BY created_at DESC LIMIT 10", + ['id' => $productId] +); + +$avgRating = 0; +$reviewCount = count($reviews); +if ($reviewCount > 0) { + $avgRating = array_sum(array_column($reviews, 'rating')) / $reviewCount; +} + +// Get related products +$relatedProducts = db()->fetchAll( + "SELECT * FROM products WHERE category = :category AND product_id != :id AND is_active = 1 LIMIT 4", + ['category' => $product['category'], 'id' => $productId] +); + +$images = json_decode($product['images'] ?? '[]', true); +$mainImage = !empty($images) ? $images[0] : '/assets/images/placeholder-product.svg'; +$salePrice = $product['sale_price']; +$price = $product['price']; +$inStock = $product['stock'] > 0; + +require_once __DIR__ . '/includes/header.php'; +?> + +

+ + +

<?= htmlspecialchars($product['name']) ?>

+ + 1): ?> +

+ $img): ?> +

+ +

+ + +

+ +

+ + + +

+ + +

+ + + 0): ?> +

+ + + +

+ ( reviews) +

+ + + +

+ + + + + Save % + + + + +

+ + +

+ + In Stock + + - Only left! + + + Out of Stock + +

+ + + + + + + + + +

Description

+ +

+ + +

Product Details

+ + + + + + + + + + + + + + + + + +

SKU
Weight	oz
Category

+ + +

Customer Reviews

+ + +

+ +

+ + + + Verified Purchase + + +

+ +

+ + + +

+ +

No reviews yet. Be the first to review this product!

+ +

+ + + +

Related Products

+ +

<?= htmlspecialchars($related['name']) ?>

+ +

+ + diff --git a/register.php b/register.php new file mode 100644 index 0000000..54eea9e --- /dev/null +++ b/register.php @@ -0,0 +1,127 @@ +fetch("SELECT id FROM email_subscribers WHERE email = :email", ['email' => strtolower($email)]); + if (!$existing) { + db()->insert('email_subscribers', [ + 'email' => strtolower($email), + 'name' => $name, + 'source' => 'registration' + ]); + } + } + + setFlash('success', 'Welcome! Your account has been created.'); + redirect('/account/'); + } + } +} + +require_once __DIR__ . '/includes/header.php'; +?> + +

Create Your Account

+ + +

+ Full Name + +

+ +

+ Email Address * + +

+ +

+ Phone Number + +

+ +

+ Password * + + Minimum 8 characters +

+ +

+ Confirm Password * + +

+ +

+ + + Subscribe to our newsletter for exclusive offers + +

+ + +

+ +

+ Already have an account? Sign in +

+ + diff --git a/shop.php b/shop.php new file mode 100644 index 0000000..d2bbc9f --- /dev/null +++ b/shop.php @@ -0,0 +1,164 @@ + 'COALESCE(sale_price, price) ASC', + 'price_high' => 'COALESCE(sale_price, price) DESC', + 'name' => 'name ASC', + default => 'created_at DESC' +}; + +// Get total count +$totalProducts = db()->count('products', $whereClause, $params); +$pagination = paginate($totalProducts, $page, 12); + +// Get products +$products = db()->fetchAll( + "SELECT * FROM products WHERE {$whereClause} ORDER BY {$orderBy} LIMIT :limit OFFSET :offset", + array_merge($params, ['limit' => $pagination['per_page'], 'offset' => $pagination['offset']]) +); + +// Get categories for filter +$categories = db()->fetchAll( + "SELECT DISTINCT category FROM products WHERE category IS NOT NULL AND category != '' AND is_active = 1 ORDER BY category" +); + +require_once __DIR__ . '/includes/header.php'; +?> + + +

Our Coffee Collection

Discover your perfect brew from our selection of premium coffees

+ +

+ All + + + + + +

+ +

+ + + +

+ + +

+ Showing of products + +

+ + + +

+ +

No products found

Try adjusting your search or filters

+ View All Products +

+ +

+ + <?= htmlspecialchars($product['name']) ?>

+ + Sale + + Featured + + +

+ +

+ + + + +

+ +

+ + + 1): ?> +

+ + + + + +

+ + +

+ + diff --git a/sw.js b/sw.js new file mode 100644 index 0000000..6145bc2 --- /dev/null +++ b/sw.js @@ -0,0 +1,269 @@ +const CACHE_NAME = 'tomsjavajive-v1'; +const STATIC_CACHE = 'tomsjavajive-static-v1'; +const DYNAMIC_CACHE = 'tomsjavajive-dynamic-v1'; + +// Static assets to cache immediately +const STATIC_ASSETS = [ + '/', + '/shop.php', + '/cart.php', + '/assets/css/style.css', + '/assets/js/main.js', + '/assets/images/logo.png', + '/manifest.json', + '/offline.html' +]; + +// Install event - cache static assets +self.addEventListener('install', (event) => { + console.log('[Service Worker] Installing...'); + + event.waitUntil( + caches.open(STATIC_CACHE) + .then((cache) => { + console.log('[Service Worker] Caching static assets'); + return cache.addAll(STATIC_ASSETS.map(url => { + return new Request(url, { cache: 'no-cache' }); + })).catch(err => { + console.log('[Service Worker] Some assets failed to cache:', err); + return Promise.resolve(); + }); + }) + .then(() => self.skipWaiting()) + ); +}); + +// Activate event - clean up old caches +self.addEventListener('activate', (event) => { + console.log('[Service Worker] Activating...'); + + event.waitUntil( + caches.keys().then((cacheNames) => { + return Promise.all( + cacheNames + .filter((cacheName) => { + return cacheName !== STATIC_CACHE && + cacheName !== DYNAMIC_CACHE && + cacheName.startsWith('tomsjavajive-'); + }) + .map((cacheName) => { + console.log('[Service Worker] Deleting old cache:', cacheName); + return caches.delete(cacheName); + }) + ); + }) + .then(() => self.clients.claim()) + ); +}); + +// Fetch event - serve from cache or network +self.addEventListener('fetch', (event) => { + const { request } = event; + const url = new URL(request.url); + + // Skip non-GET requests + if (request.method !== 'GET') { + return; + } + + // Skip admin panel + if (url.pathname.startsWith('/admin')) { + return; + } + + // Skip API requests (always network) + if (url.pathname.startsWith('/api')) { + return; + } + + // Handle navigation requests + if (request.mode === 'navigate') { + event.respondWith( + fetch(request) + .then((response) => { + // Clone and cache the response + const responseClone = response.clone(); + caches.open(DYNAMIC_CACHE).then((cache) => { + cache.put(request, responseClone); + }); + return response; + }) + .catch(() => { + // Try to serve from cache + return caches.match(request) + .then((cachedResponse) => { + if (cachedResponse) { + return cachedResponse; + } + // Serve offline page + return caches.match('/offline.html'); + }); + }) + ); + return; + } + + // Handle static assets (cache-first strategy) + if (isStaticAsset(url.pathname)) { + event.respondWith( + caches.match(request) + .then((cachedResponse) => { + if (cachedResponse) { + // Fetch in background to update cache + fetch(request).then((response) => { + if (response.ok) { + caches.open(STATIC_CACHE).then((cache) => { + cache.put(request, response); + }); + } + }).catch(() => {}); + + return cachedResponse; + } + + return fetch(request).then((response) => { + if (response.ok) { + const responseClone = response.clone(); + caches.open(STATIC_CACHE).then((cache) => { + cache.put(request, responseClone); + }); + } + return response; + }); + }) + ); + return; + } + + // Handle images (cache-first with network fallback) + if (isImageRequest(request)) { + event.respondWith( + caches.match(request) + .then((cachedResponse) => { + if (cachedResponse) { + return cachedResponse; + } + + return fetch(request) + .then((response) => { + if (response.ok) { + const responseClone = response.clone(); + caches.open(DYNAMIC_CACHE).then((cache) => { + cache.put(request, responseClone); + }); + } + return response; + }) + .catch(() => { + // Return placeholder image + return caches.match('/assets/images/placeholder-product.svg'); + }); + }) + ); + return; + } + + // Default: network-first with cache fallback + event.respondWith( + fetch(request) + .then((response) => { + if (response.ok) { + const responseClone = response.clone(); + caches.open(DYNAMIC_CACHE).then((cache) => { + cache.put(request, responseClone); + }); + } + return response; + }) + .catch(() => { + return caches.match(request); + }) + ); +}); + +// Helper functions +function isStaticAsset(pathname) { + return pathname.match(/\.(css|js|woff|woff2|ttf|eot)$/i); +} + +function isImageRequest(request) { + return request.destination === 'image' || + request.url.match(/\.(png|jpg|jpeg|gif|svg|webp|ico)$/i); +} + +// Push notification handling +self.addEventListener('push', (event) => { + console.log('[Service Worker] Push received'); + + let data = { title: "Tom's Java Jive", body: 'You have a new notification!' }; + + if (event.data) { + try { + data = event.data.json(); + } catch (e) { + data.body = event.data.text(); + } + } + + const options = { + body: data.body, + icon: '/assets/icons/icon-192.png', + badge: '/assets/icons/badge-72.png', + vibrate: [100, 50, 100], + data: { + url: data.url || '/' + }, + actions: [ + { action: 'view', title: 'View' }, + { action: 'close', title: 'Close' } + ] + }; + + event.waitUntil( + self.registration.showNotification(data.title, options) + ); +}); + +// Notification click handling +self.addEventListener('notificationclick', (event) => { + console.log('[Service Worker] Notification clicked'); + + event.notification.close(); + + if (event.action === 'close') { + return; + } + + const url = event.notification.data?.url || '/'; + + event.waitUntil( + clients.matchAll({ type: 'window', includeUncontrolled: true }) + .then((clientList) => { + // Focus existing window if available + for (const client of clientList) { + if (client.url === url && 'focus' in client) { + return client.focus(); + } + } + // Open new window + if (clients.openWindow) { + return clients.openWindow(url); + } + }) + ); +}); + +// Background sync for cart/orders +self.addEventListener('sync', (event) => { + console.log('[Service Worker] Background sync:', event.tag); + + if (event.tag === 'sync-cart') { + event.waitUntil(syncCart()); + } +}); + +async function syncCart() { + // Get pending cart actions from IndexedDB + // and sync with server + console.log('[Service Worker] Syncing cart...'); +} diff --git a/test.php b/test.php new file mode 100644 index 0000000..a04339f --- /dev/null +++ b/test.php @@ -0,0 +1,36 @@ +PHP Test Page"; +echo "

PHP Version: " . phpversion() . "

"; + +// Test database connection +try { + require_once __DIR__ . '/config/database.php'; + + $dsn = "mysql:host=" . DB_HOST . ";dbname=" . DB_NAME . ";charset=" . DB_CHARSET; + $pdo = new PDO($dsn, DB_USER, DB_PASS, DB_OPTIONS); + + echo "

✅ Database connection successful!

"; + + // Check if tables exist + $tables = $pdo->query("SHOW TABLES")->fetchAll(PDO::FETCH_COLUMN); + echo "

Tables found: " . count($tables) . "

"; + + if (empty($tables)) { + echo "

⚠️ No tables found. Please import schema.sql via phpMyAdmin.

"; + echo "

Schema file location: /public_html/install/schema.sql

"; + } else { + echo "

$table

"; + } + +} catch (PDOException $e) { + echo "

❌ Database error: " . htmlspecialchars($e->getMessage()) . "

"; +} +?>

My Addresses

No addresses saved

Add Address

Welcome back, !

Recent Orders

Order #

Recent Wallet Activity

Order #

Order Items

Shipping Information

Shipping Address

Tracking

Order Summary

Payment

My Orders

No orders yet

My Profile

Personal Information

Change Password

Communication Preferences

Danger Zone

My Reviews

Products to Review

My Reviews ()

No reviews yet

Write a Review

My Rewards

Loyalty Tiers

+ + +

Redeem Points

Points History

My Wallet

Have a Gift Card?

Earn More Points

Transaction History

Redeem Gift Card

My Wishlist

Your wishlist is empty

+ + + +

Advanced Analytics

Total Revenue

Total Orders

Average Order Value

Abandoned Carts

Revenue Trend

Top Selling Products

Sales by Category

Customer Insights

Top Customers

Payment Methods

Inventory Alerts

Sales by Hour of Day

Email Campaigns

Create Campaign

Quick Templates

Subscriber Stats

Recent Subscribers

Categories

Add Category

Coupons & Discounts

Create Coupon

Customers

Add Customer

Adjust Wallet Balance

Test Email

Email Settings

SendGrid Configuration

Email Notifications

Customer Notifications

Admin Notifications

Test Email

You've Received a Gift!

Gift Cards

Create Gift Card

Adjust Balance

Dashboard

Recent Orders

Overview

+ Low Stock +

Quick Actions