Here’s a simple booking calendar implementation using PHP and MySQL without relying on jQuery or Bootstrap.<\/p>\n\n\n\n
First, create a MySQL database table for bookings:<\/p>\n\n\n\n
CREATE DATABASE booking_system;\nUSE booking_system;\n\nCREATE TABLE bookings (\n id INT AUTO_INCREMENT PRIMARY KEY,\n name VARCHAR(100) NOT NULL,\n email VARCHAR(100) NOT NULL,\n phone VARCHAR(20) NOT NULL,\n date DATE NOT NULL,\n time_slot VARCHAR(50) NOT NULL,\n notes TEXT,\n created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP\n);\n\nCREATE TABLE unavailable_dates (\n id INT AUTO_INCREMENT PRIMARY KEY,\n date DATE NOT NULL UNIQUE,\n reason VARCHAR(255)\n);<\/code><\/pre>\n\n\n\nPHP Calendar Code<\/h2>\n\n\n\n
Here’s the PHP code for the booking calendar:<\/p>\n\n\n\n
<?php\n\/\/ db_connect.php\n$host = 'localhost';\n$dbname = 'booking_system';\n$username = 'root';\n$password = '';\n\ntry {\n $pdo = new PDO(\"mysql:host=$host;dbname=$dbname\", $username, $password);\n $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);\n} catch (PDOException $e) {\n die(\"Database connection failed: \" . $e->getMessage());\n}<\/code><\/pre>\n\n\n\n<?php\n\/\/ calendar.php\nrequire_once 'db_connect.php';\n\n\/\/ Handle form submission\nif ($_SERVER['REQUEST_METHOD'] === 'POST') {\n $name = $_POST['name'] ?? '';\n $email = $_POST['email'] ?? '';\n $phone = $_POST['phone'] ?? '';\n $date = $_POST['date'] ?? '';\n $time_slot = $_POST['time_slot'] ?? '';\n $notes = $_POST['notes'] ?? '';\n\n \/\/ Validate inputs\n if (!empty($name) && !empty($email) && !empty($phone) && !empty($date) && !empty($time_slot)) {\n try {\n $stmt = $pdo->prepare(\"INSERT INTO bookings (name, email, phone, date, time_slot, notes) \n VALUES (:name, :email, :phone, :date, :time_slot, :notes)\");\n $stmt->execute([\n ':name' => $name,\n ':email' => $email,\n ':phone' => $phone,\n ':date' => $date,\n ':time_slot' => $time_slot,\n ':notes' => $notes\n ]);\n $success = \"Booking successfully submitted!\";\n } catch (PDOException $e) {\n $error = \"Error: \" . $e->getMessage();\n }\n } else {\n $error = \"Please fill in all required fields.\";\n }\n}\n\n\/\/ Get unavailable dates\n$unavailable_dates = [];\ntry {\n $stmt = $pdo->query(\"SELECT date FROM unavailable_dates\");\n $unavailable_dates = $stmt->fetchAll(PDO::FETCH_COLUMN);\n} catch (PDOException $e) {\n \/\/ Handle error\n}\n\n\/\/ Get booked time slots for selected date\n$booked_slots = [];\nif (isset($_GET['date'])) {\n $selected_date = $_GET['date'];\n try {\n $stmt = $pdo->prepare(\"SELECT time_slot FROM bookings WHERE date = :date\");\n $stmt->execute([':date' => $selected_date]);\n $booked_slots = $stmt->fetchAll(PDO::FETCH_COLUMN);\n } catch (PDOException $e) {\n \/\/ Handle error\n }\n}\n\n\/\/ Time slots available for booking\n$time_slots = [\n '09:00 AM - 10:00 AM',\n '10:00 AM - 11:00 AM',\n '11:00 AM - 12:00 PM',\n '01:00 PM - 02:00 PM',\n '02:00 PM - 03:00 PM',\n '03:00 PM - 04:00 PM',\n '04:00 PM - 05:00 PM'\n];\n\n\/\/ Generate calendar\nfunction generateCalendar($month, $year, $unavailable_dates) {\n $first_day = mktime(0, 0, 0, $month, 1, $year);\n $days_in_month = date('t', $first_day);\n $day_of_week = date('w', $first_day);\n\n $prev_month = $month - 1;\n $prev_year = $year;\n if ($prev_month < 1) {\n $prev_month = 12;\n $prev_year--;\n }\n\n $next_month = $month + 1;\n $next_year = $year;\n if ($next_month > 12) {\n $next_month = 1;\n $next_year++;\n }\n\n $calendar = '<div class=\"calendar-navigation\">';\n $calendar .= '<a href=\"?month='.$prev_month.'&year='.$prev_year.'\">< Prev<\/a>';\n $calendar .= '<h2>'.date('F Y', $first_day).'<\/h2>';\n $calendar .= '<a href=\"?month='.$next_month.'&year='.$next_year.'\">Next ><\/a>';\n $calendar .= '<\/div>';\n\n $calendar .= '<table>';\n $calendar .= '<tr><th>Sun<\/th><th>Mon<\/th><th>Tue<\/th><th>Wed<\/th><th>Thu<\/th><th>Fri<\/th><th>Sat<\/th><\/tr>';\n\n $current_day = 1;\n $calendar .= '<tr>';\n\n \/\/ Fill in blank days before the first day of the month\n for ($i = 0; $i < $day_of_week; $i++) {\n $calendar .= '<td class=\"empty\"><\/td>';\n }\n\n $day_of_week = $day_of_week;\n\n while ($current_day <= $days_in_month) {\n if ($day_of_week == 7) {\n $day_of_week = 0;\n $calendar .= '<\/tr><tr>';\n }\n\n $current_date = sprintf('%04d-%02d-%02d', $year, $month, $current_day);\n $is_unavailable = in_array($current_date, $unavailable_dates);\n $is_past = strtotime($current_date) < strtotime(date('Y-m-d'));\n\n $class = '';\n if ($is_unavailable || $is_past) {\n $class = 'unavailable';\n } else {\n $class = 'available';\n }\n\n $calendar .= '<td class=\"'.$class.'\">';\n if (!$is_unavailable && !$is_past) {\n $calendar .= '<a href=\"?date='.$current_date.'\">'.$current_day.'<\/a>';\n } else {\n $calendar .= $current_day;\n }\n $calendar .= '<\/td>';\n\n $current_day++;\n $day_of_week++;\n }\n\n \/\/ Fill in blank days after the last day of the month\n while ($day_of_week < 7) {\n $calendar .= '<td class=\"empty\"><\/td>';\n $day_of_week++;\n }\n\n $calendar .= '<\/tr>';\n $calendar .= '<\/table>';\n\n return $calendar;\n}\n\n\/\/ Get current month and year\n$current_month = isset($_GET['month']) ? (int)$_GET['month'] : date('n');\n$current_year = isset($_GET['year']) ? (int)$_GET['year'] : date('Y');\n?>\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n <meta charset=\"UTF-8\">\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n <title>Booking Calendar<\/title>\n <style>\n body {\n font-family: Arial, sans-serif;\n margin: 0;\n padding: 20px;\n }\n .calendar-container {\n display: flex;\n flex-wrap: wrap;\n gap: 20px;\n }\n .calendar {\n width: 350px;\n }\n .calendar-navigation {\n display: flex;\n justify-content: space-between;\n align-items: center;\n margin-bottom: 10px;\n }\n table {\n width: 100%;\n border-collapse: collapse;\n }\n th, td {\n padding: 10px;\n text-align: center;\n border: 1px solid #ddd;\n }\n th {\n background-color: #f2f2f2;\n }\n td.empty {\n background-color: #f9f9f9;\n }\n td.available {\n background-color: #e6ffe6;\n }\n td.available a {\n color: #006600;\n text-decoration: none;\n font-weight: bold;\n display: block;\n }\n td.available a:hover {\n background-color: #ccffcc;\n }\n td.unavailable {\n background-color: #ffe6e6;\n color: #999;\n }\n .booking-form {\n flex: 1;\n max-width: 400px;\n }\n .form-group {\n margin-bottom: 15px;\n }\n label {\n display: block;\n margin-bottom: 5px;\n font-weight: bold;\n }\n input, select, textarea {\n width: 100%;\n padding: 8px;\n box-sizing: border-box;\n }\n button {\n background-color: #4CAF50;\n color: white;\n padding: 10px 15px;\n border: none;\n cursor: pointer;\n }\n button:hover {\n background-color: #45a049;\n }\n .success {\n color: green;\n margin-bottom: 15px;\n }\n .error {\n color: red;\n margin-bottom: 15px;\n }\n .time-slots {\n display: flex;\n flex-wrap: wrap;\n gap: 5px;\n margin-top: 10px;\n }\n .time-slot {\n padding: 5px 10px;\n background-color: #e6ffe6;\n border: 1px solid #ccc;\n cursor: pointer;\n }\n .time-slot.booked {\n background-color: #ffe6e6;\n cursor: not-allowed;\n }\n .time-slot.selected {\n background-color: #4CAF50;\n color: white;\n }\n <\/style>\n<\/head>\n<body>\n <h1>Booking Calendar<\/h1>\n\n <?php if (isset($success)): ?>\n <div class=\"success\"><?php echo htmlspecialchars($success); ?><\/div>\n <?php elseif (isset($error)): ?>\n <div class=\"error\"><?php echo htmlspecialchars($error); ?><\/div>\n <?php endif; ?>\n\n <div class=\"calendar-container\">\n <div class=\"calendar\">\n <?php echo generateCalendar($current_month, $current_year, $unavailable_dates); ?>\n <\/div>\n\n <div class=\"booking-form\">\n <?php if (isset($_GET['date'])): ?>\n <h2>Book for <?php echo htmlspecialchars(date('F j, Y', strtotime($_GET['date']))); ?><\/h2>\n <form method=\"POST\" action=\"\">\n <input type=\"hidden\" name=\"date\" value=\"<?php echo htmlspecialchars($_GET['date']); ?>\">\n\n <div class=\"form-group\">\n <label for=\"name\">Full Name:<\/label>\n <input type=\"text\" id=\"name\" name=\"name\" required>\n <\/div>\n\n <div class=\"form-group\">\n <label for=\"email\">Email:<\/label>\n <input type=\"email\" id=\"email\" name=\"email\" required>\n <\/div>\n\n <div class=\"form-group\">\n <label for=\"phone\">Phone:<\/label>\n <input type=\"tel\" id=\"phone\" name=\"phone\" required>\n <\/div>\n\n <div class=\"form-group\">\n <label>Available Time Slots:<\/label>\n <div class=\"time-slots\">\n <?php foreach ($time_slots as $slot): ?>\n <?php $is_booked = in_array($slot, $booked_slots); ?>\n <div class=\"time-slot <?php echo $is_booked ? 'booked' : ''; ?>\" \n onclick=\"<?php echo !$is_booked ? \"selectTimeSlot(this, '\".htmlspecialchars($slot).\"')\" : ''; ?>\">\n <?php echo htmlspecialchars($slot); ?>\n <?php if ($is_booked) echo ' (Booked)'; ?>\n <\/div>\n <?php endforeach; ?>\n <\/div>\n <input type=\"hidden\" id=\"time_slot\" name=\"time_slot\" required>\n <\/div>\n\n <div class=\"form-group\">\n <label for=\"notes\">Additional Notes:<\/label>\n <textarea id=\"notes\" name=\"notes\" rows=\"4\"><\/textarea>\n <\/div>\n\n <button type=\"submit\">Book Appointment<\/button>\n <\/form>\n <?php else: ?>\n <p>Please select a date from the calendar to book an appointment.<\/p>\n <?php endif; ?>\n <\/div>\n <\/div>\n\n <script>\n function selectTimeSlot(element, timeSlot) {\n \/\/ Remove selected class from all slots\n document.querySelectorAll('.time-slot').forEach(slot => {\n slot.classList.remove('selected');\n });\n\n \/\/ Add selected class to clicked slot\n element.classList.add('selected');\n\n \/\/ Set the hidden input value\n document.getElementById('time_slot').value = timeSlot;\n }\n <\/script>\n<\/body>\n<\/html><\/code><\/pre>\n\n\n\nFeatures<\/h2>\n\n\n\n\n- Pure PHP and MySQL<\/strong>: No jQuery or Bootstrap dependencies<\/li>\n\n\n\n
- Interactive Calendar<\/strong>:<\/li>\n<\/ol>\n\n\n\n
\n- Navigate between months<\/li>\n\n\n\n
- Highlights available\/unavailable dates<\/li>\n\n\n\n
- Prevents booking past dates<\/li>\n<\/ul>\n\n\n\n
\n- Booking System<\/strong>:<\/li>\n<\/ol>\n\n\n\n
\n- Form validation<\/li>\n\n\n\n
- Time slot selection<\/li>\n\n\n\n
- Shows booked time slots<\/li>\n\n\n\n
- Success\/error messages<\/li>\n<\/ul>\n\n\n\n
\n- Responsive Design<\/strong>: Works on different screen sizes<\/li>\n<\/ol>\n\n\n\n
How to Use<\/h2>\n\n\n\n\n- Save the database setup SQL and run it in your MySQL server<\/li>\n\n\n\n
- Create two files:
db_connect.php<\/code> and calendar.php<\/code><\/li>\n\n\n\n- Adjust database credentials in
db_connect.php<\/code><\/li>\n\n\n\n- Access the calendar via
calendar.php<\/code> in your browser<\/li>\n<\/ol>\n\n\n\nCustomization<\/h2>\n\n\n\n\n- Modify the
$time_slots<\/code> array to change available time slots<\/li>\n\n\n\n- Add more fields to the booking form as needed<\/li>\n\n\n\n
- Adjust the CSS to match your preferred styling<\/li>\n\n\n\n
- Extend the unavailable dates functionality as needed<\/li>\n<\/ul>\n\n\n\n
This implementation provides a solid foundation that you can build upon for your specific needs.<\/p>\n\n\n\n
I’m thrilled to hear you like the booking calendar implementation! \ud83d\ude0a Here are some additional enhancements you might consider to make it even better:<\/p>\n\n\n\n
1. Admin Panel Additions<\/strong><\/h2>\n\n\n\n\/\/ admin.php (simple admin interface)\n<?php\nrequire_once 'db_connect.php';\nsession_start();\n\n\/\/ Simple authentication\nif (!isset($_SESSION['admin'])) {\n header('Location: login.php');\n exit;\n}\n\n\/\/ Get all bookings\n$stmt = $pdo->query(\"SELECT * FROM bookings ORDER BY date DESC\");\n$bookings = $stmt->fetchAll(PDO::FETCH_ASSOC);\n\n\/\/ Mark date as unavailable\nif ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['unavailable_date'])) {\n $date = $_POST['date'];\n $reason = $_POST['reason'] ?? '';\n\n try {\n $stmt = $pdo->prepare(\"INSERT INTO unavailable_dates (date, reason) VALUES (?, ?)\");\n $stmt->execute([$date, $reason]);\n $success = \"Date marked as unavailable!\";\n } catch (PDOException $e) {\n $error = \"Error: \" . $e->getMessage();\n }\n}\n?>\n<!DOCTYPE html>\n<html>\n<head>\n <title>Admin Panel<\/title>\n <style>\n table { width: 100%; border-collapse: collapse; }\n th, td { padding: 8px; border: 1px solid #ddd; text-align: left; }\n th { background-color: #f2f2f2; }\n <\/style>\n<\/head>\n<body>\n <h1>Booking Admin<\/h1>\n\n <h2>All Bookings<\/h2>\n <table>\n <tr>\n <th>Name<\/th>\n <th>Date<\/th>\n <th>Time<\/th>\n <th>Contact<\/th>\n <\/tr>\n <?php foreach ($bookings as $booking): ?>\n <tr>\n <td><?= htmlspecialchars($booking['name']) ?><\/td>\n <td><?= date('M j, Y', strtotime($booking['date'])) ?><\/td>\n <td><?= htmlspecialchars($booking['time_slot']) ?><\/td>\n <td><?= htmlspecialchars($booking['email']) ?><br><?= htmlspecialchars($booking['phone']) ?><\/td>\n <\/tr>\n <?php endforeach; ?>\n <\/table>\n\n <h2>Mark Date as Unavailable<\/h2>\n <form method=\"POST\">\n <input type=\"date\" name=\"date\" required>\n <input type=\"text\" name=\"reason\" placeholder=\"Reason (optional)\">\n <button type=\"submit\" name=\"unavailable_date\">Mark Unavailable<\/button>\n <\/form>\n<\/body>\n<\/html><\/code><\/pre>\n\n\n\n2. Email Notifications<\/strong><\/h2>\n\n\n\nAdd this to your booking form processing:<\/p>\n\n\n\n
\/\/ After successful booking insertion\nif (isset($success)) {\n $to = $email;\n $subject = \"Booking Confirmation\";\n $message = \"Dear $name,\\n\\nYour booking has been confirmed:\\n\\n\";\n $message .= \"Date: \".date('F j, Y', strtotime($date)).\"\\n\";\n $message .= \"Time: $time_slot\\n\\n\";\n $message .= \"Thank you!\";\n $headers = \"From: bookings@yourdomain.com\";\n\n mail($to, $subject, $message, $headers);\n}<\/code><\/pre>\n\n\n\n3. Enhanced Date Validation<\/strong><\/h2>\n\n\n\nAdd this JavaScript to prevent form submission without time slot selection:<\/p>\n\n\n\n
document.querySelector('form').addEventListener('submit', function(e) {\n if (!document.getElementById('time_slot').value) {\n e.preventDefault();\n alert('Please select a time slot');\n }\n});<\/code><\/pre>\n\n\n\n4. Persistent Selected Time Slot<\/strong><\/h2>\n\n\n\nAdd this to preserve the selected time slot if form validation fails:<\/p>\n\n\n\n
\/\/ In the time slot loop\n$is_selected = isset($_POST['time_slot']) && $_POST['time_slot'] == $slot;\n<div class=\"time-slot <?= $is_booked ? 'booked' : '' ?> <?= $is_selected ? 'selected' : '' ?>\" \n onclick=\"<?= !$is_booked ? \"selectTimeSlot(this, '\".htmlspecialchars($slot).\"')\" : '' ?>\"><\/code><\/pre>\n\n\n\n5. Simple Login System<\/strong><\/h2>\n\n\n\n\/\/ login.php\n<?php\nsession_start();\nrequire_once 'db_connect.php';\n\n\/\/ Hardcoded admin credentials (replace with database check in production)\n$admin_user = 'admin';\n$admin_pass = 'password123';\n\nif ($_SERVER['REQUEST_METHOD'] === 'POST') {\n if ($_POST['username'] === $admin_user && $_POST['password'] === $admin_pass) {\n $_SESSION['admin'] = true;\n header('Location: admin.php');\n exit;\n } else {\n $error = \"Invalid credentials\";\n }\n}\n?>\n<!DOCTYPE html>\n<html>\n<head>\n <title>Login<\/title>\n<\/head>\n<body>\n <h1>Admin Login<\/h1>\n <?php if (isset($error)): ?>\n <p style=\"color:red\"><?= $error ?><\/p>\n <?php endif; ?>\n <form method=\"POST\">\n <input type=\"text\" name=\"username\" placeholder=\"Username\" required>\n <input type=\"password\" name=\"password\" placeholder=\"Password\" required>\n <button type=\"submit\">Login<\/button>\n <\/form>\n<\/body>\n<\/html><\/code><\/pre>\n\n\n\n6. CSRF Protection<\/strong><\/h2>\n\n\n\nAdd to form processing:<\/p>\n\n\n\n
\/\/ At the top of calendar.php\nsession_start();\nif (!isset($_SESSION['token'])) {\n $_SESSION['token'] = bin2hex(random_bytes(32));\n}\n\n\/\/ In the form\n<input type=\"hidden\" name=\"token\" value=\"<?= $_SESSION['token'] ?>\">\n\n\/\/ In form validation\nif ($_POST['token'] !== $_SESSION['token']) {\n die(\"Invalid CSRF token\");\n}<\/code><\/pre>\n\n\n\nWould you like me to explain any of these enhancements in more detail or would you prefer a different type of improvement? I can also help with:<\/p>\n\n\n\n
\n- Adding recurring bookings<\/li>\n\n\n\n
- Implementing a waiting list feature<\/li>\n\n\n\n
- Creating a more advanced admin dashboard<\/li>\n\n\n\n
- Adding calendar export functionality<\/li>\n\n\n\n
- Integrating with Google Calendar<\/li>\n<\/ul>\n\n\n\n
Let me know what would be most helpful for your project! \ud83d\ude80<\/p>\n\n\n\n
Enhanced Security: Password Reset & User Roles\/Permissions<\/h1>\n\n\n\n
Let’s add these important security features to your booking system.<\/p>\n\n\n\n
1. Database Modifications<\/h2>\n\n\n\n
First, update your database schema:<\/p>\n\n\n\n
-- Add to your existing database\nALTER TABLE admin_users \nADD COLUMN role ENUM('superadmin', 'admin', 'viewer') NOT NULL DEFAULT 'admin',\nADD COLUMN reset_token VARCHAR(255) DEFAULT NULL,\nADD COLUMN reset_expires DATETIME DEFAULT NULL;\n\n-- Create permissions table\nCREATE TABLE admin_permissions (\n id INT AUTO_INCREMENT PRIMARY KEY,\n role VARCHAR(20) NOT NULL,\n resource VARCHAR(50) NOT NULL,\n can_create BOOLEAN DEFAULT FALSE,\n can_read BOOLEAN DEFAULT TRUE,\n can_update BOOLEAN DEFAULT FALSE,\n can_delete BOOLEAN DEFAULT FALSE,\n UNIQUE KEY (role, resource)\n);\n\n-- Basic permissions setup\nINSERT INTO admin_permissions (role, resource, can_create, can_read, can_update, can_delete) VALUES\n('superadmin', 'bookings', TRUE, TRUE, TRUE, TRUE),\n('superadmin', 'settings', TRUE, TRUE, TRUE, TRUE),\n('admin', 'bookings', TRUE, TRUE, TRUE, FALSE),\n('admin', 'settings', FALSE, TRUE, FALSE, FALSE),\n('viewer', 'bookings', FALSE, TRUE, FALSE, FALSE);<\/code><\/pre>\n\n\n\n2. Password Reset System<\/h2>\n\n\n\nreset_request.php<\/h3>\n\n\n\n<?php\nrequire_once 'db_connect.php';\n\nif ($_SERVER['REQUEST_METHOD'] === 'POST') {\n $email = trim($_POST['email'] ?? '');\n\n try {\n $stmt = $pdo->prepare(\"SELECT id FROM admin_users WHERE username = ?\");\n $stmt->execute([$email]);\n $user = $stmt->fetch();\n\n if ($user) {\n \/\/ Generate token (valid for 1 hour)\n $token = bin2hex(random_bytes(32));\n $expires = date('Y-m-d H:i:s', time() + 3600);\n\n $updateStmt = $pdo->prepare(\"UPDATE admin_users SET reset_token = ?, reset_expires = ? WHERE id = ?\");\n $updateStmt->execute([$token, $expires, $user['id']]);\n\n \/\/ Send reset email (in production, use PHPMailer or similar)\n $resetLink = \"https:\/\/yourdomain.com\/reset_password.php?token=$token\";\n $subject = \"Password Reset Request\";\n $message = \"Click this link to reset your password: $resetLink\\n\\n\";\n $message .= \"This link will expire in 1 hour.\";\n\n \/\/ In production: mail($email, $subject, $message);\n \/\/ For testing:\n file_put_contents('reset_emails.log', \"To: $email\\nSubject: $subject\\nMessage: $message\\n\\n\", FILE_APPEND);\n $success = \"Password reset link sent to your email\";\n } else {\n $error = \"If that email exists, we've sent a reset link\";\n }\n } catch (PDOException $e) {\n error_log(\"Reset request error: \" . $e->getMessage());\n $error = \"A system error occurred. Please try again later.\";\n }\n}\n?>\n<!DOCTYPE html>\n<html>\n<head>\n <title>Password Reset<\/title>\n <style>\n body { font-family: Arial, sans-serif; max-width: 400px; margin: 0 auto; padding: 20px; }\n .reset-form { margin-top: 30px; }\n .form-group { margin-bottom: 15px; }\n label { display: block; margin-bottom: 5px; }\n input[type=\"email\"] { width: 100%; padding: 8px; box-sizing: border-box; }\n .error { color: red; margin-bottom: 15px; }\n .success { color: green; margin-bottom: 15px; }\n <\/style>\n<\/head>\n<body>\n <h1>Password Reset<\/h1>\n\n <?php if (isset($success)): ?>\n <div class=\"success\"><?= htmlspecialchars($success) ?><\/div>\n <?php elseif (isset($error)): ?>\n <div class=\"error\"><?= htmlspecialchars($error) ?><\/div>\n <?php endif; ?>\n\n <form class=\"reset-form\" method=\"POST\">\n <div class=\"form-group\">\n <label for=\"email\">Admin Email:<\/label>\n <input type=\"email\" id=\"email\" name=\"email\" required>\n <\/div>\n\n <button type=\"submit\">Request Reset Link<\/button>\n <\/form>\n\n <p><a href=\"login.php\">Back to Login<\/a><\/p>\n<\/body>\n<\/html><\/code><\/pre>\n\n\n\nreset_password.php<\/h3>\n\n\n\n<?php\nrequire_once 'db_connect.php';\n\n$token = $_GET['token'] ?? '';\n$error = '';\n$success = '';\n\nif ($token) {\n try {\n $stmt = $pdo->prepare(\"SELECT id, reset_expires FROM admin_users WHERE reset_token = ?\");\n $stmt->execute([$token]);\n $user = $stmt->fetch();\n\n if (!$user) {\n $error = \"Invalid reset token\";\n } elseif (strtotime($user['reset_expires']) < time()) {\n $error = \"Reset link has expired\";\n }\n } catch (PDOException $e) {\n error_log(\"Reset token check error: \" . $e->getMessage());\n $error = \"A system error occurred. Please try again later.\";\n }\n}\n\nif ($_SERVER['REQUEST_METHOD'] === 'POST' && !$error) {\n $password = $_POST['password'] ?? '';\n $confirm = $_POST['confirm_password'] ?? '';\n\n if (strlen($password) < 12) {\n $error = \"Password must be at least 12 characters\";\n } elseif ($password !== $confirm) {\n $error = \"Passwords do not match\";\n } else {\n try {\n $hash = password_hash($password, PASSWORD_DEFAULT);\n $updateStmt = $pdo->prepare(\"UPDATE admin_users SET password_hash = ?, reset_token = NULL, reset_expires = NULL WHERE id = ?\");\n $updateStmt->execute([$hash, $user['id']]);\n $success = \"Password updated successfully! You can now <a href='login.php'>login<\/a>.\";\n } catch (PDOException $e) {\n error_log(\"Password update error: \" . $e->getMessage());\n $error = \"A system error occurred. Please try again later.\";\n }\n }\n}\n?>\n<!DOCTYPE html>\n<html>\n<head>\n <title>Set New Password<\/title>\n <style>\n body { font-family: Arial, sans-serif; max-width: 400px; margin: 0 auto; padding: 20px; }\n .reset-form { margin-top: 30px; }\n .form-group { margin-bottom: 15px; }\n label { display: block; margin-bottom: 5px; }\n input[type=\"password\"] { width: 100%; padding: 8px; box-sizing: border-box; }\n .error { color: red; margin-bottom: 15px; }\n .success { color: green; margin-bottom: 15px; }\n <\/style>\n<\/head>\n<body>\n <h1>Set New Password<\/h1>\n\n <?php if ($error): ?>\n <div class=\"error\"><?= htmlspecialchars($error) ?><\/div>\n <p><a href=\"reset_request.php\">Request new reset link<\/a><\/p>\n <?php elseif ($success): ?>\n <div class=\"success\"><?= $success ?><\/div>\n <?php elseif ($token): ?>\n <form class=\"reset-form\" method=\"POST\">\n <div class=\"form-group\">\n <label for=\"password\">New Password (min 12 chars):<\/label>\n <input type=\"password\" id=\"password\" name=\"password\" required minlength=\"12\">\n <\/div>\n\n <div class=\"form-group\">\n <label for=\"confirm_password\">Confirm New Password:<\/label>\n <input type=\"password\" id=\"confirm_password\" name=\"confirm_password\" required minlength=\"12\">\n <\/div>\n\n <button type=\"submit\">Update Password<\/button>\n <\/form>\n <?php else: ?>\n <div class=\"error\">No reset token provided<\/div>\n <p><a href=\"reset_request.php\">Request reset link<\/a><\/p>\n <?php endif; ?>\n<\/body>\n<\/html><\/code><\/pre>\n\n\n\n3. Role-Based Access Control<\/h2>\n\n\n\n
Add this to a new auth.php<\/code> file:<\/p>\n\n\n\n<?php\nrequire_once 'db_connect.php';\nsession_start();\n\nfunction checkPermission($resource, $action) {\n global $pdo;\n\n if (!isset($_SESSION['admin_id'])) {\n header('Location: login.php');\n exit;\n }\n\n \/\/ Superadmin bypasses all permissions\n if ($_SESSION['admin_role'] === 'superadmin') {\n return true;\n }\n\n try {\n $stmt = $pdo->prepare(\"SELECT can_$action FROM admin_permissions \n WHERE role = ? AND resource = ?\");\n $stmt->execute([$_SESSION['admin_role'], $resource]);\n $permission = $stmt->fetchColumn();\n\n return (bool)$permission;\n } catch (PDOException $e) {\n error_log(\"Permission check error: \" . $e->getMessage());\n return false;\n }\n}\n\n\/\/ Session timeout (30 minutes)\nif (isset($_SESSION['last_activity']) && (time() - $_SESSION['last_activity'] > 1800)) {\n session_unset();\n session_destroy();\n header('Location: login.php?timeout=1');\n exit;\n}\n$_SESSION['last_activity'] = time();\n?><\/code><\/pre>\n\n\n\n4. Updated Login System<\/h2>\n\n\n\n
Modify your login.php to store the role:<\/p>\n\n\n\n
\/\/ In the successful login block:\n$_SESSION['admin_id'] = $user['id'];\n$_SESSION['admin_username'] = $user['username'];\n$_SESSION['admin_role'] = $user['role']; \/\/ Add this line\n$_SESSION['last_activity'] = time();<\/code><\/pre>\n\n\n\n5. Protected Admin Panel Example<\/h2>\n\n\n\n
Here’s how to protect a page (admin.php):<\/p>\n\n\n\n
<?php\nrequire_once 'auth.php';\n\n\/\/ Check if user has permission to view bookings\nif (!checkPermission('bookings', 'read')) {\n header('HTTP\/1.0 403 Forbidden');\n die(\"You don't have permission to access this page\");\n}\n\n\/\/ For actions that modify data:\nif ($_SERVER['REQUEST_METHOD'] === 'POST') {\n if (!checkPermission('bookings', 'delete')) {\n header('HTTP\/1.0 403 Forbidden');\n die(\"You don't have permission to perform this action\");\n }\n \/\/ Process the action\n}\n?><\/code><\/pre>\n\n\n\n6. User Management Page (users.php)<\/h2>\n\n\n\n<?php\nrequire_once 'auth.php';\n\n\/\/ Only superadmin can access this page\nif ($_SESSION['admin_role'] !== 'superadmin') {\n header('HTTP\/1.0 403 Forbidden');\n die(\"Access denied\");\n}\n\n\/\/ Handle user creation\nif ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['create_user'])) {\n $username = trim($_POST['username']);\n $password = $_POST['password'];\n $role = $_POST['role'];\n\n if (strlen($password) < 12) {\n $error = \"Password must be at least 12 characters long\";\n } else {\n $hash = password_hash($password, PASSWORD_DEFAULT);\n\n try {\n $stmt = $pdo->prepare(\"INSERT INTO admin_users (username, password_hash, role) VALUES (?, ?, ?)\");\n $stmt->execute([$username, $hash, $role]);\n $success = \"User created successfully!\";\n } catch (PDOException $e) {\n $error = \"Error creating user: \" . $e->getMessage();\n }\n }\n}\n\n\/\/ Get all users\n$users = $pdo->query(\"SELECT id, username, role, last_login FROM admin_users ORDER BY role, username\")->fetchAll();\n?>\n<!DOCTYPE html>\n<html>\n<head>\n <title>User Management<\/title>\n <style>\n \/* Add similar styles as admin.php *\/\n .role-superadmin { color: #d32f2f; font-weight: bold; }\n .role-admin { color: #1976d2; }\n .role-viewer { color: #388e3c; }\n <\/style>\n<\/head>\n<body>\n <h1>User Management <a href=\"admin.php\" class=\"logout\">Back to Admin<\/a><\/h1>\n\n <?php if (isset($success)): ?>\n <div style=\"color: green; margin-bottom: 15px;\"><?= htmlspecialchars($success) ?><\/div>\n <?php elseif (isset($error)): ?>\n <div style=\"color: red; margin-bottom: 15px;\"><?= htmlspecialchars($error) ?><\/div>\n <?php endif; ?>\n\n <h2>Create New User<\/h2>\n <form method=\"POST\">\n <input type=\"text\" name=\"username\" placeholder=\"Username\" required>\n <input type=\"password\" name=\"password\" placeholder=\"Password (min 12 chars)\" required minlength=\"12\">\n <select name=\"role\" required>\n <option value=\"admin\">Admin<\/option>\n <option value=\"viewer\">Viewer<\/option>\n <\/select>\n <button type=\"submit\" name=\"create_user\">Create User<\/button>\n <\/form>\n\n <h2>All Users<\/h2>\n <table>\n <tr>\n <th>Username<\/th>\n <th>Role<\/th>\n <th>Last Login<\/th>\n <\/tr>\n <?php foreach ($users as $user): ?>\n <tr>\n <td><?= htmlspecialchars($user['username']) ?><\/td>\n <td class=\"role-<?= htmlspecialchars($user['role']) ?>\">\n <?= ucfirst(htmlspecialchars($user['role'])) ?>\n <\/td>\n <td><?= $user['last_login'] ? date('M j, Y H:i', strtotime($user['last_login'])) : 'Never' ?><\/td>\n <\/tr>\n <?php endforeach; ?>\n <\/table>\n<\/body>\n<\/html><\/code><\/pre>\n\n\n\nKey Security Features Added:<\/h2>\n\n\n\n\n- Password Reset System<\/strong><\/li>\n<\/ol>\n\n\n\n
\n- Time-limited reset tokens (1 hour)<\/li>\n\n\n\n
- Secure token generation<\/li>\n\n\n\n
- Password complexity enforcement<\/li>\n<\/ul>\n\n\n\n
\n- Role-Based Access Control<\/strong><\/li>\n<\/ol>\n\n\n\n
\n- Three user roles (superadmin, admin, viewer)<\/li>\n\n\n\n
- Granular permissions system<\/li>\n\n\n\n
- Easy permission checks<\/li>\n<\/ul>\n\n\n\n
\n- User Management<\/strong><\/li>\n<\/ol>\n\n\n\n
\n- Only superadmin can create users<\/li>\n\n\n\n
- Role assignment during creation<\/li>\n\n\n\n
- Secure password handling<\/li>\n<\/ul>\n\n\n\n
\n- Enhanced Session Security<\/strong><\/li>\n<\/ol>\n\n\n\n
\n- Role information in session<\/li>\n\n\n\n
- Stricter permission checks<\/li>\n\n\n\n
- Session timeout enforcement<\/li>\n<\/ul>\n\n\n\n
Would you like me to add any of these additional features?<\/p>\n\n\n\n
\n- Email configuration for production password resets<\/li>\n\n\n\n
- Two-factor authentication<\/li>\n\n\n\n
- User activity logging<\/li>\n\n\n\n
- Password expiration policies<\/li>\n\n\n\n
- Account lockout after failed attempts<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
MySQL & PHP Booking Calendar (No jQuery, No Bootstrap) Here’s a simple booking calendar implementation using PHP and MySQL without relying on jQuery or Bootstrap. Database Setup First, create a MySQL database table for bookings: PHP Calendar Code Here’s the PHP code for the booking calendar: Features How to Use Customization This implementation provides a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-718","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/posts\/718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/comments?post=718"}],"version-history":[{"count":3,"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/posts\/718\/revisions"}],"predecessor-version":[{"id":721,"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/posts\/718\/revisions\/721"}],"wp:attachment":[{"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/media?parent=718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/categories?post=718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/easyaccsoft.com\/webdesign\/wp-json\/wp\/v2\/tags?post=718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}