HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ip-172-26-0-120 6.17.0-1009-aws #9~24.04.2-Ubuntu SMP Fri Mar 6 23:50:29 UTC 2026 x86_64
User: ubuntu (1000)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /var/www/html/spion/app/Http/Controllers/StaffController.php
<?php

namespace App\Http\Controllers;

use App\Models\Admin;
use App\Models\Role;
use App\models\AdminRole;
use Illuminate\Http\Request;
use Illuminate\Validation\Rule;
use Yajra\DataTables\Facades\DataTables;
use Illuminate\Support\Facades\DB;

use Validator;

class StaffController extends Controller
{
    public function staffs(Request $request)
    {
        return view('admin.staffs');
    }

    public function getStaffs(Request $request)
    {
        if ($request->ajax()) {
            $search_keyword = '';
            $status = 'all'; // all status
            $start_date = '';
            $end_date = '';
            $request_data = $request->all();
            if ($request->has('search_keyword')) {
                $search_keyword = $request->search_keyword;
            }
            if ($request->has('status_filter')) {
                $status = $request->status_filter;
            }
            // avoid zero column as it's checkbox so we can't sort by it
            if ($request->has('order') && $request->order[0]['column'] != 0) {
                $sort_column_number = $request->order[0]['column'];
                $sort_column_dir = $request->order[0]['dir'];
                $sort_column_key = $request->columns[$sort_column_number]['data'];
            }
            if ($request->has('date_range_filter') && $request->date_range_filter != '') {
                $date_range_filter_arr = explode(' - ', $request->date_range_filter);
                $start_date = formatDate($date_range_filter_arr[0]);
                $end_date = formatDate($date_range_filter_arr[1]);
            }

            $main_query = Admin::query();
            $query = $main_query;
            if (!empty($search_keyword)) {
                $query = $query->where('first_name', 'LIKE', '%' . $search_keyword . '%')->orWhere('last_name', 'LIKE', '%' . $search_keyword . '%');
            }
            if ($status != 'all' && $status != '') {
                $query = $query->where('status', $status);
            }
            if (!empty($sort_column_key)) {
                $query = $query->orderBy($sort_column_key, $sort_column_dir);
            } else {
                $query = $query->latest();
            }
            if ($start_date != '' && $end_date != '') {
                $query = $query->whereDate('created_at', '>=', $start_date)->whereDate('created_at', '<=', $end_date);
            }

            $data = $query->get();
            $count_total = $main_query->count();
            $count_filter = $count_total;
            return DataTables::of($data)

                ->addColumn('first_name', function ($row) {
                    return $row->first_name . ' ' . $row->last_name;
                })
                ->addColumn('email', function ($row) {
                    return $row->email;
                })
                ->editColumn('status', function ($row) {
                    $update_url = route('admin.update.staff.status', $row->id);
                    return setStatus($row, $update_url);
                })

                ->addColumn('role', function ($row) {
                    if (isset($row->adminRole) && isset($row->adminRole->role)) {
                        return $row->adminRole->role->name;
                    }
                    return '';
                })

                ->editColumn('created_at', function ($row) {
                    return formatDate($row->created_at);
                })
                ->addColumn('action', function ($row) {

                    if ($row->is_admin !== 1) {

                        return view('admin.delete', compact('row'));
                    }
                })
                ->rawColumns(['action', 'status'])
                ->with([
                    "recordsTotal"    => $count_total,
                    "recordsFiltered" => $count_filter,
                ])
                ->make(true);
        }
    }

    public function addStaff()
    {
        $roles = Role::all();

        return view('admin.add-staff', compact('roles'));
    }
    public function storeStaff(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'first_name' => 'required',
            'last_name' => 'required',
            'email' => 'required|string|lowercase|email|max:255|unique:admins',
            'password' => 'required|string|min:8|confirmed',
            'role_id' => 'required|exists:roles,id',


        ]);

        if ($validator->fails()) {
            return redirect()->back()->withErrors($validator)->withInput();
        }

        DB::beginTransaction();
        try {
            $staff = new Admin();
            $staff->first_name = $request->first_name;
            $staff->last_name = $request->last_name;
            $staff->status = $request->has('is_active') ? 1 : 0;
            $staff->email = $request->email;
            $staff->password = bcrypt($request->password);
            $staff->save();

            $adminRole = new AdminRole();
            $adminRole->role_id = $request->role_id;
            $adminRole->admin_id = $staff->id;
            $adminRole->save();
            DB::commit();

            return redirect()->route('admin.staffs')->with('success', 'Staff has been added successfully.');
        } catch (\Exception $e) {
            DB::rollback();
            return response()->json(['success' => false, 'message' => $e->getMessage()]);
        }
    }
    public function editStaff($staff_id)
    {
        $staff = Admin::find($staff_id);
        $roles = Role::all();

        if (isset($staff)) {
            return view('admin.edit-staff', ['staff' => $staff, 'roles' => $roles]);
        } else {
            return back()->with('error', 'Staff does not exist');
        }
    }


    public function updateStaff(Request $request, $staff_id)
    {


        $validator = Validator::make($request->all(), [
            'first_name' => 'required',
            'last_name' => 'required',
            'email' => ['required', 'string', 'lowercase', 'email', 'max:255',  Rule::unique('admins')->ignore($staff_id)],
            'role_id' => 'required|exists:roles,id',
        ]);

        if ($validator->fails()) {
            return redirect()->back()->withErrors($validator)->withInput();
        }

        DB::beginTransaction();
        try {

            $staff = Admin::find($staff_id);


            if (isset($staff_id)) {
                $staff->first_name = $request->input('first_name');
                $staff->last_name = $request->input('last_name');
                $staff->status = $request->has('is_active') ? 1 : 0;
                $staff->email = $request->input('email');
                $staff->save();

                $adminRole = AdminRole::where('admin_id', $staff_id)->first();
                $adminRole->role_id = $request->role_id;
                $adminRole->save();
                DB::commit();
                return redirect()->route('admin.staffs')->with('success', 'Staff has been updated successfully');
            } else {
                return back()->with('error', 'Staff does not exist');
            }
        } catch (\Exception $e) {
            DB::rollback();
            return response()->json(['success' => false, 'message' => $e->getMessage()]);
        }
    }


    public function updateStaffStatus(Request $request, $staff_id)
    {
        if ($request->has('new_status')) {
            $staff = Admin::find($staff_id);

            if ($staff) {
                $staff->status = $request->new_status;
                $staff->save();
                return response()->json(['status' => 'success', 'message' => 'Staff status has been updated successfully']);
            } else {
                return response()->json(['status' => 'error', 'message' => 'User not found'], 404);
            }
        } else {
            return response()->json(['status' => 'error', 'message' => 'Missing status value'], 404);
        }
    }

    public function deleteStaff($staff_id, Admin $admin)
    {
        $result = $admin->deleteStaff($staff_id);
        if (isset($result)) {

            return redirect()->back()->with($result['status'], $result['message']);
        } else {
            return back()->with('error', 'Permission does not exist');
        }
    }
}