I'll help you create a modern bank application in PHP. Let's start with the database structure first, then we'll build the application components step by step. -- Database structure for modern bank application CREATE DATABASE IF NOT EXISTS modern_bank; USE modern_bank; -- Countries table CREATE TABLE countries ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(100) NOT NULL, code VARCHAR(5) NOT NULL, phone_code VARCHAR(10) NOT NULL, account_number_format VARCHAR(50) NOT NULL, account_number_length INT NOT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Account types CREATE TABLE account_types ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(50) NOT NULL, description TEXT, min_balance DECIMAL(15,2) DEFAULT 0, monthly_fee DECIMAL(15,2) DEFAULT 0, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Currencies CREATE TABLE currencies ( id INT AUTO_INCREMENT PRIMARY KEY, code VARCHAR(3) NOT NULL, name VARCHAR(50) NOT NULL, symbol VARCHAR(5) NOT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Users table CREATE TABLE users ( id INT AUTO_INCREMENT PRIMARY KEY, account_number VARCHAR(30) UNIQUE NOT NULL, first_name VARCHAR(50) NOT NULL, last_name VARCHAR(50) NOT NULL, email VARCHAR(100) UNIQUE NOT NULL, phone VARCHAR(20) NOT NULL, username VARCHAR(50) UNIQUE NOT NULL, password VARCHAR(255) NOT NULL, security_pin VARCHAR(4) NOT NULL, country_id INT NOT NULL, account_type_id INT NOT NULL, currency_id INT NOT NULL, cot_code VARCHAR(8) NOT NULL, imf_code VARCHAR(8) NOT NULL, tax_code VARCHAR(8) NOT NULL, ssn VARCHAR(20), id_card_number VARCHAR(30), id_card_path VARCHAR(255), passport_path VARCHAR(255), profile_picture VARCHAR(255), is_active BOOLEAN DEFAULT FALSE, two_factor_enabled BOOLEAN DEFAULT FALSE, last_login TIMESTAMP NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, FOREIGN KEY (country_id) REFERENCES countries(id), FOREIGN KEY (account_type_id) REFERENCES account_types(id), FOREIGN KEY (currency_id) REFERENCES currencies(id) ); -- KYC documents CREATE TABLE kyc_documents ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL, document_type VARCHAR(50) NOT NULL, document_number VARCHAR(50) NOT NULL, document_path VARCHAR(255) NOT NULL, is_verified BOOLEAN DEFAULT FALSE, verified_by INT, verified_at TIMESTAMP NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id) ); -- Account balances CREATE TABLE account_balances ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL, account_number VARCHAR(30) NOT NULL, available_balance DECIMAL(15,2) DEFAULT 0, ledger_balance DECIMAL(15,2) DEFAULT 0, currency_id INT NOT NULL, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id), FOREIGN KEY (currency_id) REFERENCES currencies(id) ); -- Transaction types CREATE TABLE transaction_types ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(50) NOT NULL, description TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Transactions CREATE TABLE transactions ( id INT AUTO_INCREMENT PRIMARY KEY, reference VARCHAR(50) UNIQUE NOT NULL, user_id INT NOT NULL, account_number VARCHAR(30) NOT NULL, transaction_type_id INT NOT NULL, amount DECIMAL(15,2) NOT NULL, fee DECIMAL(15,2) DEFAULT 0, currency_id INT NOT NULL, beneficiary_name VARCHAR(100), beneficiary_account VARCHAR(30), beneficiary_bank VARCHAR(100), beneficiary_bank_code VARCHAR(20), narration TEXT, cot_code VARCHAR(8), imf_code VARCHAR(8), tax_code VARCHAR(8), status ENUM('pending', 'processing', 'completed', 'failed', 'rejected') DEFAULT 'pending', otp_verified BOOLEAN DEFAULT FALSE, admin_approved BOOLEAN DEFAULT FALSE, approved_by INT, approved_at TIMESTAMP NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id), FOREIGN KEY (transaction_type_id) REFERENCES transaction_types(id), FOREIGN KEY (currency_id) REFERENCES currencies(id) ); -- Deposit methods CREATE TABLE deposit_methods ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(50) NOT NULL, description TEXT, account_name VARCHAR(100), account_number VARCHAR(50), bank_name VARCHAR(100), bank_code VARCHAR(20), wallet_address VARCHAR(100), qr_code_path VARCHAR(255), is_active BOOLEAN DEFAULT TRUE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Deposits CREATE TABLE deposits ( id INT AUTO_INCREMENT PRIMARY KEY, reference VARCHAR(50) UNIQUE NOT NULL, user_id INT NOT NULL, deposit_method_id INT NOT NULL, amount DECIMAL(15,2) NOT NULL, currency_id INT NOT NULL, receipt_path VARCHAR(255), status ENUM('pending', 'verified', 'rejected') DEFAULT 'pending', verified_by INT, verified_at TIMESTAMP NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id), FOREIGN KEY (deposit_method_id) REFERENCES deposit_methods(id), FOREIGN KEY (currency_id) REFERENCES currencies(id) ); -- Virtual card types CREATE TABLE virtual_card_types ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(50) NOT NULL, description TEXT, fee DECIMAL(15,2) DEFAULT 0, is_active BOOLEAN DEFAULT TRUE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Virtual cards CREATE TABLE virtual_cards ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL, card_type_id INT NOT NULL, card_number VARCHAR(16) NOT NULL, card_name VARCHAR(100) NOT NULL, expiry_month VARCHAR(2) NOT NULL, expiry_year VARCHAR(4) NOT NULL, cvv VARCHAR(3) NOT NULL, is_active BOOLEAN DEFAULT TRUE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id), FOREIGN KEY (card_type_id) REFERENCES virtual_card_types(id) ); -- Loan products CREATE TABLE loan_products ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(100) NOT NULL, description TEXT, min_amount DECIMAL(15,2) NOT NULL, max_amount DECIMAL(15,2) NOT NULL, interest_rate DECIMAL(5,2) NOT NULL, duration INT NOT NULL, -- in months is_active BOOLEAN DEFAULT TRUE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Loan applications CREATE TABLE loan_applications ( id INT AUTO_INCREMENT PRIMARY KEY, reference VARCHAR(50) UNIQUE NOT NULL, user_id INT NOT NULL, loan_product_id INT NOT NULL, amount DECIMAL(15,2) NOT NULL, purpose TEXT, status ENUM('pending', 'approved', 'rejected', 'disbursed', 'completed') DEFAULT 'pending', approved_by INT, approved_at TIMESTAMP NULL, disbursed_by INT, disbursed_at TIMESTAMP NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id), FOREIGN KEY (loan_product_id) REFERENCES loan_products(id) ); -- Support tickets CREATE TABLE support_tickets ( id INT AUTO_INCREMENT PRIMARY KEY, reference VARCHAR(50) UNIQUE NOT NULL, user_id INT NOT NULL, subject VARCHAR(255) NOT NULL, message TEXT NOT NULL, status ENUM('open', 'in_progress', 'resolved', 'closed') DEFAULT 'open', assigned_to INT, resolved_by INT, resolved_at TIMESTAMP NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id) ); -- Ticket replies CREATE TABLE ticket_replies ( id INT AUTO_INCREMENT PRIMARY KEY, ticket_id INT NOT NULL, user_id INT NOT NULL, message TEXT NOT NULL, attachment_path VARCHAR(255), is_admin BOOLEAN DEFAULT FALSE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (ticket_id) REFERENCES support_tickets(id), FOREIGN KEY (user_id) REFERENCES users(id) ); -- System settings CREATE TABLE system_settings ( id INT AUTO_INCREMENT PRIMARY KEY, bank_name VARCHAR(100) NOT NULL, bank_logo_path VARCHAR(255), favicon_path VARCHAR(255), address TEXT NOT NULL, phone VARCHAR(20) NOT NULL, email VARCHAR(100) NOT NULL, support_email VARCHAR(100) NOT NULL, default_currency_id INT NOT NULL, otp_expiry_minutes INT DEFAULT 5, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, FOREIGN KEY (default_currency_id) REFERENCES currencies(id) ); -- Admin users CREATE TABLE admin_users ( id INT AUTO_INCREMENT PRIMARY KEY, first_name VARCHAR(50) NOT NULL, last_name VARCHAR(50) NOT NULL, email VARCHAR(100) UNIQUE NOT NULL, password VARCHAR(255) NOT NULL, is_super_admin BOOLEAN DEFAULT FALSE, last_login TIMESTAMP NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP ); -- Audit logs CREATE TABLE audit_logs ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT, admin_id INT, action VARCHAR(100) NOT NULL, description TEXT, ip_address VARCHAR(50), user_agent TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Insert initial data INSERT INTO countries (name, code, phone_code, account_number_format, account_number_length) VALUES ('United States', 'US', '+1', '##########', 10), ('United Kingdom', 'UK', '+44', '##########', 10), ('Nigeria', 'NG', '+234', '##########', 10), ('Canada', 'CA', '+1', '##########', 10), ('Germany', 'DE', '+49', '##########', 10); INSERT INTO account_types (name, description, min_balance, monthly_fee) VALUES ('Savings Account', 'Basic savings account with interest', 1000.00, 0.00), ('Current Account', 'Regular checking account', 5000.00, 10.00), ('Premium Account', 'Premium account with extra benefits', 10000.00, 25.00), ('Business Account', 'Account for business transactions', 20000.00, 50.00); INSERT INTO currencies (code, name, symbol) VALUES ('USD', 'US Dollar', '$'), ('GBP', 'British Pound', '£'), ('EUR', 'Euro', '€'), ('NGN', 'Naira', '₦'), ('CAD', 'Canadian Dollar', 'CA$'); INSERT INTO transaction_types (name, description) VALUES ('Local Transfer', 'Transfer within the same bank'), ('Wire Transfer', 'Transfer to another bank'), ('International Transfer', 'International money transfer'), ('Deposit', 'Funds deposited into account'), ('Withdrawal', 'Funds withdrawn from account'), ('Card Payment', 'Payment using virtual card'), ('Loan Disbursement', 'Loan amount disbursed'), ('Loan Repayment', 'Loan amount repaid'); INSERT INTO system_settings (bank_name, address, phone, email, support_email, default_currency_id) VALUES ('Modern Bank', '123 Financial District, New York, NY 10001', '+1 800-123-4567', 'info@modernbank.com', 'support@modernbank.com', 1); INSERT INTO admin_users (first_name, last_name, email, password, is_super_admin) VALUES ('Admin', 'User', 'admin@modernbank.com', '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', TRUE); setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); } catch (PDOException $e) { die("Database connection failed: " . $e->getMessage()); } // Include helper functions require_once 'functions.php'; // Start session session_start(); prepare("SELECT account_number_format, account_number_length FROM countries WHERE id = ?"); $stmt->execute([$countryId]); $country = $stmt->fetch(PDO::FETCH_ASSOC); if (!$country) { return false; } $format = $country['account_number_format']; $length = $country['account_number_length']; // Replace # with random digits $accountNumber = ''; for ($i = 0; $i < $length; $i++) { $accountNumber .= rand(0, 9); } return $accountNumber; } // Generate secure codes (COT, IMF, TAX) function generateSecureCode($length = 6) { $code = ''; for ($i = 0; $i < $length; $i++) { $code .= rand(0, 9); } return $code; } // Send email function sendEmail($to, $subject, $message) { $headers = "From: " . MAIL_FROM_NAME . " <" . MAIL_FROM . ">\r\n"; $headers .= "Reply-To: " . MAIL_FROM . "\r\n"; $headers .= "MIME-Version: 1.0\r\n"; $headers .= "Content-Type: text/html; charset=UTF-8\r\n"; return mail($to, $subject, $message, $headers); } // Format currency function formatCurrency($amount, $currencyId) { global $pdo; $stmt = $pdo->prepare("SELECT symbol FROM currencies WHERE id = ?"); $stmt->execute([$currencyId]); $currency = $stmt->fetch(PDO::FETCH_ASSOC); if (!$currency) { return number_format($amount, 2); } return $currency['symbol'] . number_format($amount, 2); } // Get user IP address function getUserIP() { if (!empty($_SERVER['HTTP_CLIENT_IP'])) { return $_SERVER['HTTP_CLIENT_IP']; } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { return $_SERVER['HTTP_X_FORWARDED_FOR']; } else { return $_SERVER['REMOTE_ADDR']; } } // Log audit trail function logAudit($userId = null, $adminId = null, $action, $description = '') { global $pdo; $stmt = $pdo->prepare("INSERT INTO audit_logs (user_id, admin_id, action, description, ip_address, user_agent) VALUES (?, ?, ?, ?, ?, ?)"); $stmt->execute([ $userId, $adminId, $action, $description, getUserIP(), $_SERVER['HTTP_USER_AGENT'] ?? '' ]); } // Validate security pin function validateSecurityPin($userId, $pin) { global $pdo; $stmt = $pdo->prepare("SELECT security_pin FROM users WHERE id = ?"); $stmt->execute([$userId]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if (!$user) { return false; } return $pin === $user['security_pin']; } // Generate OTP function generateOTP($length = 6) { $otp = ''; for ($i = 0; $i < $length; $i++) { $otp .= rand(0, 9); } return $otp; } // Verify OTP function verifyOTP($userId, $otp) { if (!isset($_SESSION['otp']) || !isset($_SESSION['otp_expiry']) || !isset($_SESSION['otp_user_id'])) { return false; } if ($_SESSION['otp_user_id'] != $userId) { return false; } if (time() > $_SESSION['otp_expiry']) { return false; } return $_SESSION['otp'] === $otp; } // Upload file function uploadFile($file, $targetDir) { if (!file_exists($targetDir)) { mkdir($targetDir, 0777, true); } $fileName = uniqid() . '_' . basename($file['name']); $targetFile = $targetDir . $fileName; // Check if file already exists if (file_exists($targetFile)) { return false; } // Check file size (5MB max) if ($file['size'] > 5000000) { return false; } // Allow certain file formats $allowedTypes = ['jpg', 'jpeg', 'png', 'gif', 'pdf']; $fileType = strtolower(pathinfo($targetFile, PATHINFO_EXTENSION)); if (!in_array($fileType, $allowedTypes)) { return false; } // Upload file if (move_uploaded_file($file['tmp_name'], $targetFile)) { return $fileName; } return false; } // Get user by ID function getUserById($userId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM users WHERE id = ?"); $stmt->execute([$userId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get admin by ID function getAdminById($adminId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM admin_users WHERE id = ?"); $stmt->execute([$adminId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get account balance function getAccountBalance($userId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM account_balances WHERE user_id = ?"); $stmt->execute([$userId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get transaction by reference function getTransactionByReference($reference) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM transactions WHERE reference = ?"); $stmt->execute([$reference]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get deposit by reference function getDepositByReference($reference) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM deposits WHERE reference = ?"); $stmt->execute([$reference]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get loan application by reference function getLoanApplicationByReference($reference) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM loan_applications WHERE reference = ?"); $stmt->execute([$reference]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get support ticket by reference function getSupportTicketByReference($reference) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM support_tickets WHERE reference = ?"); $stmt->execute([$reference]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get virtual card by ID function getVirtualCardById($cardId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM virtual_cards WHERE id = ?"); $stmt->execute([$cardId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get all countries function getAllCountries() { global $pdo; $stmt = $pdo->query("SELECT * FROM countries ORDER BY name"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get all account types function getAllAccountTypes() { global $pdo; $stmt = $pdo->query("SELECT * FROM account_types ORDER BY name"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get all currencies function getAllCurrencies() { global $pdo; $stmt = $pdo->query("SELECT * FROM currencies ORDER BY name"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get all deposit methods function getAllDepositMethods() { global $pdo; $stmt = $pdo->query("SELECT * FROM deposit_methods WHERE is_active = 1 ORDER BY name"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get all virtual card types function getAllVirtualCardTypes() { global $pdo; $stmt = $pdo->query("SELECT * FROM virtual_card_types WHERE is_active = 1 ORDER BY name"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get all loan products function getAllLoanProducts() { global $pdo; $stmt = $pdo->query("SELECT * FROM loan_products WHERE is_active = 1 ORDER BY name"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get all transaction types function getAllTransactionTypes() { global $pdo; $stmt = $pdo->query("SELECT * FROM transaction_types ORDER BY name"); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get system settings function getSystemSettings() { global $pdo; $stmt = $pdo->query("SELECT * FROM system_settings LIMIT 1"); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get user transactions function getUserTransactions($userId, $limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT t.*, tt.name as transaction_type, c.symbol as currency_symbol FROM transactions t JOIN transaction_types tt ON t.transaction_type_id = tt.id JOIN currencies c ON t.currency_id = c.id WHERE t.user_id = ? ORDER BY t.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$userId, $limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get user deposits function getUserDeposits($userId, $limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT d.*, dm.name as deposit_method, c.symbol as currency_symbol FROM deposits d JOIN deposit_methods dm ON d.deposit_method_id = dm.id JOIN currencies c ON d.currency_id = c.id WHERE d.user_id = ? ORDER BY d.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$userId, $limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get user loan applications function getUserLoanApplications($userId, $limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT l.*, lp.name as loan_product FROM loan_applications l JOIN loan_products lp ON l.loan_product_id = lp.id WHERE l.user_id = ? ORDER BY l.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$userId, $limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get user support tickets function getUserSupportTickets($userId, $limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT * FROM support_tickets WHERE user_id = ? ORDER BY created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$userId, $limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get user virtual cards function getUserVirtualCards($userId) { global $pdo; $stmt = $pdo->prepare(" SELECT v.*, vt.name as card_type FROM virtual_cards v JOIN virtual_card_types vt ON v.card_type_id = vt.id WHERE v.user_id = ? ORDER BY v.created_at DESC "); $stmt->execute([$userId]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get pending transactions (for admin) function getPendingTransactions($limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT t.*, tt.name as transaction_type, c.symbol as currency_symbol, u.first_name, u.last_name, u.account_number FROM transactions t JOIN transaction_types tt ON t.transaction_type_id = tt.id JOIN currencies c ON t.currency_id = c.id JOIN users u ON t.user_id = u.id WHERE t.status = 'pending' ORDER BY t.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get pending deposits (for admin) function getPendingDeposits($limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT d.*, dm.name as deposit_method, c.symbol as currency_symbol, u.first_name, u.last_name, u.account_number FROM deposits d JOIN deposit_methods dm ON d.deposit_method_id = dm.id JOIN currencies c ON d.currency_id = c.id JOIN users u ON d.user_id = u.id WHERE d.status = 'pending' ORDER BY d.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get pending loan applications (for admin) function getPendingLoanApplications($limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT l.*, lp.name as loan_product, u.first_name, u.last_name, u.account_number FROM loan_applications l JOIN loan_products lp ON l.loan_product_id = lp.id JOIN users u ON l.user_id = u.id WHERE l.status = 'pending' ORDER BY l.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get open support tickets (for admin) function getOpenSupportTickets($limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT s.*, u.first_name, u.last_name, u.account_number FROM support_tickets s JOIN users u ON s.user_id = u.id WHERE s.status = 'open' ORDER BY s.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get all users (for admin) function getAllUsers($limit = 10, $offset = 0) { global $pdo; $stmt = $pdo->prepare(" SELECT u.*, c.name as country, at.name as account_type, cu.symbol as currency_symbol FROM users u JOIN countries c ON u.country_id = c.id JOIN account_types at ON u.account_type_id = at.id JOIN currencies cu ON u.currency_id = cu.id ORDER BY u.created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$limit, $offset]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Get user by email or account number function getUserByEmailOrAccountNumber($identifier) { global $pdo; $stmt = $pdo->prepare(" SELECT * FROM users WHERE email = ? OR account_number = ? LIMIT 1 "); $stmt->execute([$identifier, $identifier]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Verify user credentials function verifyUserCredentials($identifier, $password) { $user = getUserByEmailOrAccountNumber($identifier); if (!$user) { return false; } return password_verify($password, $user['password']); } // Verify admin credentials function verifyAdminCredentials($email, $password) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM admin_users WHERE email = ? LIMIT 1"); $stmt->execute([$email]); $admin = $stmt->fetch(PDO::FETCH_ASSOC); if (!$admin) { return false; } return password_verify($password, $admin['password']); } // Check if email exists function emailExists($email) { global $pdo; $stmt = $pdo->prepare("SELECT id FROM users WHERE email = ? LIMIT 1"); $stmt->execute([$email]); return $stmt->fetch(PDO::FETCH_ASSOC) !== false; } // Check if username exists function usernameExists($username) { global $pdo; $stmt = $pdo->prepare("SELECT id FROM users WHERE username = ? LIMIT 1"); $stmt->execute([$username]); return $stmt->fetch(PDO::FETCH_ASSOC) !== false; } // Check if account number exists function accountNumberExists($accountNumber) { global $pdo; $stmt = $pdo->prepare("SELECT id FROM users WHERE account_number = ? LIMIT 1"); $stmt->execute([$accountNumber]); return $stmt->fetch(PDO::FETCH_ASSOC) !== false; } // Get country by ID function getCountryById($countryId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM countries WHERE id = ?"); $stmt->execute([$countryId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get account type by ID function getAccountTypeById($accountTypeId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM account_types WHERE id = ?"); $stmt->execute([$accountTypeId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get currency by ID function getCurrencyById($currencyId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM currencies WHERE id = ?"); $stmt->execute([$currencyId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get deposit method by ID function getDepositMethodById($depositMethodId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM deposit_methods WHERE id = ?"); $stmt->execute([$depositMethodId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get virtual card type by ID function getVirtualCardTypeById($cardTypeId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM virtual_card_types WHERE id = ?"); $stmt->execute([$cardTypeId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get loan product by ID function getLoanProductById($loanProductId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM loan_products WHERE id = ?"); $stmt->execute([$loanProductId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get transaction type by ID function getTransactionTypeById($transactionTypeId) { global $pdo; $stmt = $pdo->prepare("SELECT * FROM transaction_types WHERE id = ?"); $stmt->execute([$transactionTypeId]); return $stmt->fetch(PDO::FETCH_ASSOC); } // Get ticket replies function getTicketReplies($ticketId) { global $pdo; $stmt = $pdo->prepare(" SELECT r.*, CASE WHEN r.is_admin THEN CONCAT(a.first_name, ' ', a.last_name) ELSE CONCAT(u.first_name, ' ', u.last_name) END as author_name, CASE WHEN r.is_admin THEN 'Admin' ELSE 'Customer' END as author_role FROM ticket_replies r LEFT JOIN users u ON r.user_id = u.id AND NOT r.is_admin LEFT JOIN admin_users a ON r.user_id = a.id AND r.is_admin WHERE r.ticket_id = ? ORDER BY r.created_at ASC "); $stmt->execute([$ticketId]); return $stmt->fetchAll(PDO::FETCH_ASSOC); } // Count user transactions function countUserTransactions($userId) { global $pdo; $stmt = $pdo->prepare("SELECT COUNT(*) as count FROM transactions WHERE user_id = ?"); $stmt->execute([$userId]); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count user deposits function countUserDeposits($userId) { global $pdo; $stmt = $pdo->prepare("SELECT COUNT(*) as count FROM deposits WHERE user_id = ?"); $stmt->execute([$userId]); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count user loan applications function countUserLoanApplications($userId) { global $pdo; $stmt = $pdo->prepare("SELECT COUNT(*) as count FROM loan_applications WHERE user_id = ?"); $stmt->execute([$userId]); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count user support tickets function countUserSupportTickets($userId) { global $pdo; $stmt = $pdo->prepare("SELECT COUNT(*) as count FROM support_tickets WHERE user_id = ?"); $stmt->execute([$userId]); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count pending transactions (for admin) function countPendingTransactions() { global $pdo; $stmt = $pdo->query("SELECT COUNT(*) as count FROM transactions WHERE status = 'pending'"); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count pending deposits (for admin) function countPendingDeposits() { global $pdo; $stmt = $pdo->query("SELECT COUNT(*) as count FROM deposits WHERE status = 'pending'"); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count pending loan applications (for admin) function countPendingLoanApplications() { global $pdo; $stmt = $pdo->query("SELECT COUNT(*) as count FROM loan_applications WHERE status = 'pending'"); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count open support tickets (for admin) function countOpenSupportTickets() { global $pdo; $stmt = $pdo->query("SELECT COUNT(*) as count FROM support_tickets WHERE status = 'open'"); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Count all users (for admin) function countAllUsers() { global $pdo; $stmt = $pdo->query("SELECT COUNT(*) as count FROM users"); return $stmt->fetch(PDO::FETCH_ASSOC)['count']; } // Generate virtual card number function generateVirtualCardNumber($cardTypeId) { // This is a simplified version - in a real app you'd use a proper algorithm $prefixes = [ 1 => '4', // Visa 2 => '5', // Mastercard 3 => '3' // American Express ]; $prefix = $prefixes[$cardTypeId] ?? '4'; $cardNumber = $prefix; for ($i = 0; $i < 15; $i++) { $cardNumber .= rand(0, 9); } return $cardNumber; } // Generate CVV function generateCVV() { return str_pad(rand(0, 999), 3, '0', STR_PAD_LEFT); } // Generate expiry date (3 years from now) function generateExpiryDate() { $month = str_pad(rand(1, 12), 2, '0', STR_PAD_LEFT); $year = date('y') + 3; return [$month, $year]; } // Check if user is logged in function isUserLoggedIn() { return isset($_SESSION['user_id']); } // Check if admin is logged in function isAdminLoggedIn() { return isset($_SESSION['admin_id']); } // Redirect if not logged in function redirectIfNotLoggedIn() { if (!isUserLoggedIn()) { header("Location: login.php"); exit(); } } // Redirect if not admin function redirectIfNotAdmin() { if (!isAdminLoggedIn()) { header("Location: admin/login.php"); exit(); } } // Get current user function getCurrentUser() { if (!isUserLoggedIn()) { return null; } return getUserById($_SESSION['user_id']); } // Get current admin function getCurrentAdmin() { if (!isAdminLoggedIn()) { return null; } return getAdminById($_SESSION['admin_id']); } // Get user dashboard URL function getUserDashboardUrl() { return 'dashboard.php'; } // Get admin dashboard URL function getAdminDashboardUrl() { return 'admin/dashboard.php'; } // Generate pagination links function generatePagination($totalItems, $itemsPerPage, $currentPage, $url) { $totalPages = ceil($totalItems / $itemsPerPage); $pagination = '

«
' . $i . '
»

'; return $pagination; } // Sanitize input function sanitizeInput($input) { return htmlspecialchars(strip_tags(trim($input)), ENT_QUOTES, 'UTF-8'); } // Validate email function validateEmail($email) { return filter_var($email, FILTER_VALIDATE_EMAIL); } // Validate phone number (basic validation) function validatePhoneNumber($phone) { return preg_match('/^\+?[0-9]{10,15}$/', $phone); } // Validate password strength function validatePasswordStrength($password) { return strlen($password) >= 8; } // Validate security pin function validateSecurityPinFormat($pin) { return preg_match('/^[0-9]{4}$/', $pin); } // Generate CSRF token function generateCsrfToken() { if (empty($_SESSION['csrf_token'])) { $_SESSION['csrf_token'] = bin2hex(random_bytes(32)); } return $_SESSION['csrf_token']; } // Verify CSRF token function verifyCsrfToken($token) { return isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token); } // Get current date and time function getCurrentDateTime() { return date('Y-m-d H:i:s'); } // Format date for display function formatDateForDisplay($date) { return date('M j, Y g:i A', strtotime($date)); } // Get time ago string function getTimeAgo($date) { $time = strtotime($date); $timeDiff = time() - $time; if ($timeDiff < 60) { return 'just now'; } elseif ($timeDiff < 3600) { $mins = floor($timeDiff / 60); return $mins . ' min' . ($mins > 1 ? 's' : '') . ' ago'; } elseif ($timeDiff < 86400) { $hours = floor($timeDiff / 3600); return $hours . ' hour' . ($hours > 1 ? 's' : '') . ' ago'; } elseif ($timeDiff < 604800) { $days = floor($timeDiff / 86400); return $days . ' day' . ($days > 1 ? 's' : '') . ' ago'; } elseif ($timeDiff < 2592000) { $weeks = floor($timeDiff / 604800); return $weeks . ' week' . ($weeks > 1 ? 's' : '') . ' ago'; } elseif ($timeDiff < 31536000) { $months = floor($timeDiff / 2592000); return $months . ' month' . ($months > 1 ? 's' : '') . ' ago'; } else { $years = floor($timeDiff / 31536000); return $years . ' year' . ($years > 1 ? 's' : '') . ' ago'; } } // Get transaction status badge function getTransactionStatusBadge($status) { $badges = [ 'pending' => 'warning', 'processing' => 'info', 'completed' => 'success', 'failed' => 'danger', 'rejected' => 'danger' ]; $color = $badges[$status] ?? 'secondary'; return '' . ucfirst($status) . ''; } // Get deposit status badge function getDepositStatusBadge($status) { $badges = [ 'pending' => 'warning', 'verified' => 'success', 'rejected' => 'danger' ]; $color = $badges[$status] ?? 'secondary'; return '' . ucfirst($status) . ''; } // Get loan status badge function getLoanStatusBadge($status) { $badges = [ 'pending' => 'warning', 'approved' => 'info', 'rejected' => 'danger', 'disbursed' => 'primary', 'completed' => 'success' ]; $color = $badges[$status] ?? 'secondary'; return '' . ucfirst($status) . ''; } // Get ticket status badge function getTicketStatusBadge($status) { $badges = [ 'open' => 'danger', 'in_progress' => 'warning', 'resolved' => 'success', 'closed' => 'secondary' ]; $color = $badges[$status] ?? 'secondary'; return '' . ucfirst(str_replace('_', ' ', $status)) . ''; } // Get user status badge function getUserStatusBadge($isActive) { $color = $isActive ? 'success' : 'danger'; $text = $isActive ? 'Active' : 'Inactive'; return '' . $text . ''; } // Get admin status badge function getAdminStatusBadge($isSuperAdmin) { $color = $isSuperAdmin ? 'primary' : 'info'; $text = $isSuperAdmin ? 'Super Admin' : 'Admin'; return '' . $text . ''; } // Get KYC verification badge function getKycVerificationBadge($isVerified) { $color = $isVerified ? 'success' : 'warning'; $text = $isVerified ? 'Verified' : 'Pending'; return '' . $text . ''; } // Get virtual card status badge function getVirtualCardStatusBadge($isActive) { $color = $isActive ? 'success' : 'danger'; $text = $isActive ? 'Active' : 'Inactive'; return '' . $text . ''; } // Get deposit method status badge function getDepositMethodStatusBadge($isActive) { $color = $isActive ? 'success' : 'danger'; $text = $isActive ? 'Active' : 'Inactive'; return '' . $text . ''; } // Get loan product status badge function getLoanProductStatusBadge($isActive) { $color = $isActive ? 'success' : 'danger'; $text = $isActive ? 'Active' : 'Inactive'; return '' . $text . ''; } // Get virtual card type status badge function getVirtualCardTypeStatusBadge($isActive) { $color = $isActive ? 'success' : 'danger'; $text = $isActive ? 'Active' : 'Inactive'; return '' . $text . ''; } // Get account type badge function getAccountTypeBadge($accountTypeId) { $colors = [ 1 => 'primary', // Savings 2 => 'info', // Current 3 => 'warning', // Premium 4 => 'success