I'll break this down into manageable parts and build them sequentially. Let's start with the foundational components first. <?php require_once 'config.php'; require_once 'functions.php'; session_start(); if (isset($_SESSION['user_id'])) { header('Location: dashboard.php'); exit; } header('Location: login.php'); ?> <?php // Database configuration define('DB_HOST', 'localhost'); define('DB_USER', 'root'); define('DB_PASS', ''); define('DB_NAME', 'donation_platform'); // Site configuration define('SITE_NAME', 'Peer2Peer Donation'); define('SITE_URL', 'http://localhost/donation'); // Email configuration define('SMTP_HOST', 'smtp.example.com'); define('SMTP_PORT', 587); define('SMTP_USER', 'noreply@example.com'); define('SMTP_PASS', 'password'); define('FROM_EMAIL', 'noreply@example.com'); define('FROM_NAME', SITE_NAME); // Security define('PEPPER', 'your-random-pepper-string-here'); // Connect to database try { $pdo = new PDO("mysql:host=".DB_HOST.";dbname=".DB_NAME, DB_USER, DB_PASS); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); } catch(PDOException $e) { die("Database connection failed: " . $e->getMessage()); } // Include other required files require_once 'classes/User.php'; require_once 'classes/Admin.php'; require_once 'classes/Transaction.php'; ?> <?php function sanitize($data) { return htmlspecialchars(trim($data), ENT_QUOTES, 'UTF-8'); } function redirect($url) { header("Location: $url"); exit; } function is_logged_in() { return isset($_SESSION['user_id']); } function is_admin() { return isset($_SESSION['role']) && $_SESSION['role'] === 'admin'; } function generate_csrf_token() { if (empty($_SESSION['csrf_token'])) { $_SESSION['csrf_token'] = bin2hex(random_bytes(32)); } return $_SESSION['csrf_token']; } function validate_csrf_token($token) { return isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token); } function send_email($to, $subject, $message) { $headers = "From: " . FROM_EMAIL . "\r\n"; $headers .= "Reply-To: " . FROM_EMAIL . "\r\n"; $headers .= "MIME-Version: 1.0\r\n"; $headers .= "Content-Type: text/html; charset=UTF-8\r\n"; return mail($to, $subject, $message, $headers); } function hash_password($password) { global $pdo; $pepper = PEPPER; return password_hash($password . $pepper, PASSWORD_BCRYPT); } function verify_password($password, $hash) { global $pdo; $pepper = PEPPER; return password_verify($password . $pepper, $hash); } function get_banks_list() { return [ 'Access Bank', 'Opay', 'PalmPay', 'Kuda', 'Moniepoint', 'First Bank', 'Zenith Bank', 'GTBank', 'UBA', 'Fidelity Bank', 'Stanbic IBTC', 'Union Bank', 'Polaris Bank', 'Ecobank', 'Heritage Bank', 'Keystone Bank', 'Sterling Bank', 'Wema Bank', 'Unity Bank', 'Jaiz Bank' ]; } ?> <?php class User { private $pdo; public function __construct($pdo) { $this->pdo = $pdo; } public function register($fullname, $email, $phone, $password, $referral_code = null) { $stmt = $this->pdo->prepare("INSERT INTO users (fullname, email, phone, password, referral_code, created_at) VALUES (?, ?, ?, ?, ?, NOW())"); $hashed_password = hash_password($password); $stmt->execute([$fullname, $email, $phone, $hashed_password, $referral_code]); return $this->pdo->lastInsertId(); } public function login($email, $password) { $stmt = $this->pdo->prepare("SELECT * FROM users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && verify_password($password, $user['password'])) { return $user; } return false; } public function updateBankDetails($user_id, $bank_name, $account_name, $account_number) { $stmt = $this->pdo->prepare("UPDATE users SET bank_name = ?, account_name = ?, account_number = ?, bank_verified = 0 WHERE id = ?"); return $stmt->execute([$bank_name, $account_name, $account_number, $user_id]); } public function getUserById($user_id) { $stmt = $this->pdo->prepare("SELECT * FROM users WHERE id = ?"); $stmt->execute([$user_id]); return $stmt->fetch(PDO::FETCH_ASSOC); } public function hasBankDetails($user_id) { $user = $this->getUserById($user_id); return !empty($user['bank_name']) && !empty($user['account_number']); } } ?> <?php class Admin { private $pdo; public function __construct($pdo) { $this->pdo = $pdo; } public function getAllUsers() { $stmt = $this->pdo->query("SELECT * FROM users ORDER BY created_at DESC"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } public function updateUserStatus($user_id, $status) { $stmt = $this->pdo->prepare("UPDATE users SET status = ? WHERE id = ?"); return $stmt->execute([$status, $user_id]); } public function getSystemSettings() { $stmt = $this->pdo->query("SELECT * FROM system_settings LIMIT 1"); return $stmt->fetch(PDO::FETCH_ASSOC); } public function updateSystemSettings($min_withdrawal, $donation_duration, $interest_rate, $auto_matching, $referral_enabled) { $stmt = $this->pdo->prepare("UPDATE system_settings SET min_withdrawal = ?, donation_duration = ?, interest_rate = ?, auto_matching = ?, referral_enabled = ?"); return $stmt->execute([$min_withdrawal, $donation_duration, $interest_rate, $auto_matching, $referral_enabled]); } } ?> <?php class Transaction { private $pdo; public function __construct($pdo) { $this->pdo = $pdo; } public function createDonation($user_id, $amount) { $stmt = $this->pdo->prepare("INSERT INTO donations (user_id, amount, status, created_at) VALUES (?, ?, 'pending', NOW())"); $stmt->execute([$user_id, $amount]); return $this->pdo->lastInsertId(); } public function getPendingDonations() { $stmt = $this->pdo->query("SELECT * FROM donations WHERE status = 'pending' ORDER BY created_at ASC"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } public function matchDonation($donation_id, $receiver_id) { $stmt = $this->pdo->prepare("UPDATE donations SET receiver_id = ?, status = 'matched', matched_at = NOW() WHERE id = ?"); return $stmt->execute([$receiver_id, $donation_id]); } public function getUserDonations($user_id) { $stmt = $this->pdo->prepare("SELECT * FROM donations WHERE user_id = ? ORDER BY created_at DESC"); $stmt->execute([$user_id]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } } ?> CREATE TABLE IF NOT EXISTS users ( id INT AUTO_INCREMENT PRIMARY KEY, fullname VARCHAR(100) NOT NULL, email VARCHAR(100) NOT NULL UNIQUE, phone VARCHAR(20) NOT NULL UNIQUE, password VARCHAR(255) NOT NULL, bank_name VARCHAR(100), account_name VARCHAR(100), account_number VARCHAR(20), bank_verified TINYINT(1) DEFAULT 0, referral_code VARCHAR(20), referred_by VARCHAR(20), status ENUM('active', 'banned', 'pending') DEFAULT 'pending', role ENUM('user', 'editor', 'admin') DEFAULT 'user', created_at DATETIME, updated_at DATETIME ); CREATE TABLE IF NOT EXISTS system_settings ( id INT AUTO_INCREMENT PRIMARY KEY, min_withdrawal DECIMAL(10,2) DEFAULT 1000.00, donation_duration INT DEFAULT 7, -- in days interest_rate DECIMAL(5,2) DEFAULT 20.00, -- percentage auto_matching TINYINT(1) DEFAULT 1, referral_enabled TINYINT(1) DEFAULT 1, email_notifications TINYINT(1) DEFAULT 1, recommitment_enabled TINYINT(1) DEFAULT 1 ); CREATE TABLE IF NOT EXISTS donations ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL, receiver_id INT, amount DECIMAL(10,2) NOT NULL, status ENUM('pending', 'matched', 'paid', 'completed', 'cancelled') DEFAULT 'pending', payment_proof VARCHAR(255), payment_approved TINYINT(1) DEFAULT 0, created_at DATETIME, matched_at DATETIME, paid_at DATETIME, completed_at DATETIME, FOREIGN KEY (user_id) REFERENCES users(id), FOREIGN KEY (receiver_id) REFERENCES users(id) ); CREATE TABLE IF NOT EXISTS withdrawal_requests ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL, amount DECIMAL(10,2) NOT NULL, status ENUM('pending', 'approved', 'rejected', 'processed') DEFAULT 'pending', created_at DATETIME, processed_at DATETIME, FOREIGN KEY (user_id) REFERENCES users(id) ); CREATE TABLE IF NOT EXISTS referral_earnings ( id INT AUTO_INCREMENT PRIMARY KEY, referrer_id INT NOT NULL, referred_id INT NOT NULL, amount DECIMAL(10,2) NOT NULL, level INT NOT NULL, created_at DATETIME, FOREIGN KEY (referrer_id) REFERENCES users(id), FOREIGN KEY (referred_id) REFERENCES users(id) ); CREATE TABLE IF NOT EXISTS notifications ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL, message TEXT NOT NULL, is_read TINYINT(1) DEFAULT 0, created_at DATETIME, FOREIGN KEY (user_id) REFERENCES users(id) ); -- Insert default system settings INSERT INTO system_settings (min_withdrawal, donation_duration, interest_rate, auto_matching, referral_enabled, email_notifications, recommitment_enabled) VALUES (1000.00, 7, 20.00, 1, 1, 1, 1); -- Create admin user (password: admin123) INSERT INTO users (fullname, email, phone, password, role, status, created_at) VALUES ('Admin User', 'admin@example.com', '08012345678', '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', 'admin', 'active', NOW()); This is Part 1 which includes: 1. Core configuration files 2. Basic functions and utilities 3. User, Admin, and Transaction classes 4. Complete database schema with all required tables 5. Initial admin user setup Would you like me to proceed with Part 2 which will include the registration and login system?