PNG IHDR x sBIT|d pHYs + tEXtSoftware www.inkscape.org< ,tEXtComment
<?php
session_start();
// 1. Ensure the user is logged in
if (!isset($_SESSION['user_id'])) {
header("Location: login.php");
exit();
}
// 2. Database Configuration
$host = 'localhost';
$dbname = 'u264723324_NuDb';
$user = 'u264723324_NuUu';
$pass = '@WdsdsdAq1231';
$transferSuccess = false;
$transferError = '';
$transferMessage = '';
try {
$pdo = new PDO("mysql:host=$host;dbname=$dbname;charset=utf8mb4", $user, $pass);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
// 3. LIVE QUERY: Fetch User Status
$stmt = $pdo->prepare("SELECT first_name, last_name, kyc_status FROM users WHERE id = :id LIMIT 1");
$stmt->execute([':id' => $_SESSION['user_id']]);
$userRow = $stmt->fetch(PDO::FETCH_ASSOC);
if ($userRow) {
$_SESSION['kyc_status'] = $userRow['kyc_status'];
$_SESSION['first_name'] = $userRow['first_name'];
$_SESSION['last_name'] = $userRow['last_name'];
} else {
session_destroy();
header("Location: login.php");
exit();
}
// 4. LIVE QUERY: Fetch Sender's Account Balance & ID
$stmtAcc = $pdo->prepare("SELECT id, account_number, balance FROM accounts WHERE user_id = :id AND account_type IN ('savings', 'current') LIMIT 1");
$stmtAcc->execute([':id' => $_SESSION['user_id']]);
$accRow = $stmtAcc->fetch(PDO::FETCH_ASSOC);
// ========================================================================
// 5. PROCESS THE TRANSFER (Internal P2P & External Wire)
// ========================================================================
if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['transfer_action'])) {
// Block transfer if KYC is not verified
if ($_SESSION['kyc_status'] !== 'verified') {
$transferError = "Your account is currently under review. Transfers are disabled.";
} else {
$amount = filter_input(INPUT_POST, 'amount', FILTER_VALIDATE_FLOAT);
$recipient_bank = filter_input(INPUT_POST, 'bank_name', FILTER_SANITIZE_STRING);
$recipient_account = filter_input(INPUT_POST, 'account_number', FILTER_SANITIZE_STRING);
$recipient_name_input = filter_input(INPUT_POST, 'account_name', FILTER_SANITIZE_STRING);
if (!$amount || $amount <= 0) {
$transferError = "Please enter a valid transfer amount.";
} elseif ($amount > $accRow['balance']) {
$transferError = "Insufficient funds. Your available balance is $" . number_format($accRow['balance'], 2);
} else {
// --- INTERNAL CITY PRIME TRANSFER LOGIC ---
if ($recipient_bank === 'City Prime') {
// Look up the recipient in the database
$stmtFindRec = $pdo->prepare("
SELECT a.id as acc_id, a.balance, u.first_name, u.last_name
FROM accounts a
JOIN users u ON a.user_id = u.id
WHERE a.account_number = :acc_num LIMIT 1
");
$stmtFindRec->execute([':acc_num' => $recipient_account]);
$recipientData = $stmtFindRec->fetch(PDO::FETCH_ASSOC);
if (!$recipientData) {
$transferError = "Transfer failed: No City Prime account found with that number.";
} elseif ($recipientData['acc_id'] === $accRow['id']) {
$transferError = "You cannot transfer money to your own account.";
} else {
try {
$pdo->beginTransaction();
// A. Deduct from Sender
$newSenderBal = $accRow['balance'] - $amount;
$pdo->prepare("UPDATE accounts SET balance = :bal WHERE id = :id")
->execute([':bal' => $newSenderBal, ':id' => $accRow['id']]);
// B. Credit to Recipient
$newRecBal = $recipientData['balance'] + $amount;
$pdo->prepare("UPDATE accounts SET balance = :bal WHERE id = :id")
->execute([':bal' => $newRecBal, ':id' => $recipientData['acc_id']]);
// C. Insert Sender Debit Receipt
$realRecipientName = $recipientData['first_name'] . ' ' . $recipientData['last_name'];
$txDescSender = "Internal Transfer to " . $realRecipientName;
$pdo->prepare("INSERT INTO transactions (account_id, transaction_type, amount, description, status) VALUES (:acc_id, 'debit', :amt, :desc, 'completed')")
->execute([':acc_id' => $accRow['id'], ':amt' => $amount, ':desc' => $txDescSender]);
// D. Insert Recipient Credit Receipt
$senderFullName = $_SESSION['first_name'] . ' ' . $_SESSION['last_name'];
$txDescRec = "Internal Transfer from " . $senderFullName;
$pdo->prepare("INSERT INTO transactions (account_id, transaction_type, amount, description, status) VALUES (:acc_id, 'credit', :amt, :desc, 'completed')")
->execute([':acc_id' => $recipientData['acc_id'], ':amt' => $amount, ':desc' => $txDescRec]);
$pdo->commit();
$transferSuccess = true;
$transferMessage = "Successfully transferred $" . number_format($amount, 2) . " to " . $realRecipientName;
$accRow['balance'] = $newSenderBal; // Update live UI
} catch (Exception $e) {
$pdo->rollBack();
$transferError = "Transfer failed due to a system error.";
}
}
// --- EXTERNAL WIRE TRANSFER LOGIC ---
} else {
try {
$pdo->beginTransaction();
// A. Deduct balance from sender
$newBalance = $accRow['balance'] - $amount;
$pdo->prepare("UPDATE accounts SET balance = :bal WHERE id = :id")
->execute([':bal' => $newBalance, ':id' => $accRow['id']]);
// B. Insert into Transactions Table
$txDesc = "Wire Transfer to " . $recipient_name_input . " (" . $recipient_bank . ")";
$pdo->prepare("INSERT INTO transactions (account_id, transaction_type, amount, description, status) VALUES (:acc_id, 'debit', :amt, :desc, 'pending')")
->execute([':acc_id' => $accRow['id'], ':amt' => $amount, ':desc' => $txDesc]);
$pdo->commit();
$transferSuccess = true;
$transferMessage = "Successfully initiated wire of $" . number_format($amount, 2) . " to " . $recipient_name_input;
$accRow['balance'] = $newBalance; // Update live UI
} catch (Exception $e) {
$pdo->rollBack();
$transferError = "Transfer failed due to a system error. Please try again.";
}
}
}
}
}
$fiatBalance = $accRow ? number_format($accRow['balance'], 2) : "0.00";
$accNumber = $accRow ? $accRow['account_number'] : "Pending";
$hiddenAcc = $accRow ? substr($accNumber, -4) : "****";
} catch (PDOException $e) {
$_SESSION['kyc_status'] = 'pending';
$fiatBalance = "0.00";
$hiddenAcc = "****";
}
$kyc_status = $_SESSION['kyc_status'];
$firstName = $_SESSION['first_name'];
$lastName = $_SESSION['last_name'];
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Transfer Funds - City Prime</title>
<style>
:root {
--bg-dark: #0a0e17; --surface-dark: #131a2a; --surface-light: #1e2738;
--accent-blue: #0ea5e9; --text-main: #f8fafc; --text-muted: #94a3b8;
--danger: #ef4444; --success: #22c55e;
}
* { margin: 0; padding: 0; box-sizing: border-box; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; -webkit-tap-highlight-color: transparent;}
body { background-color: var(--bg-dark); color: var(--text-main); }
.app-container { display: flex; flex-direction: column; min-height: 100vh; }
.sidebar { display: none; }
.main-content { flex: 1; padding: 20px; padding-bottom: 90px; }
.top-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 24px; }
.page-title { font-size: 1.5rem; font-weight: 700; }
.notifications { position: relative; background: var(--surface-dark); width: 40px; height: 40px; border-radius: 50%; display: flex; align-items: center; justify-content: center; cursor: pointer; }
/* Transfer UI Layout */
.balance-preview-card { background: linear-gradient(135deg, #0284c7, #0f172a); border-radius: 16px; padding: 24px; margin-bottom: 24px; border: 1px solid rgba(255,255,255,0.1); display: flex; justify-content: space-between; align-items: center;}
.balance-preview-card span { font-size: 0.85rem; color: rgba(255,255,255,0.8); display: block; margin-bottom: 4px;}
.balance-preview-card h2 { font-size: 1.8rem; font-weight: 700; color: white; }
.acc-badge { background: rgba(255,255,255,0.1); padding: 6px 12px; border-radius: 8px; font-size: 0.8rem; backdrop-filter: blur(4px);}
.transfer-tabs { display: flex; gap: 8px; margin-bottom: 24px; background: var(--surface-dark); padding: 6px; border-radius: 12px; border: 1px solid rgba(255,255,255,0.05); }
.tab-btn { flex: 1; text-align: center; padding: 12px; border-radius: 8px; font-size: 0.9rem; font-weight: 600; cursor: pointer; color: var(--text-muted); transition: 0.2s; }
.tab-btn.active { background: var(--surface-light); color: var(--accent-blue); box-shadow: 0 4px 6px rgba(0,0,0,0.2); }
.transfer-form-card { background: var(--surface-dark); border-radius: 16px; padding: 24px; border: 1px solid rgba(255,255,255,0.05); }
.tab-content { display: none; }
.tab-content.active { display: block; animation: fadeIn 0.3s ease; }
@keyframes fadeIn { from { opacity: 0; transform: translateY(10px); } to { opacity: 1; transform: translateY(0); } }
.form-group { margin-bottom: 16px; }
.form-label { display: block; font-size: 0.85rem; color: var(--text-muted); margin-bottom: 8px; }
.form-input { width: 100%; background: var(--bg-dark); border: 1px solid rgba(255,255,255,0.1); color: var(--text-main); padding: 16px; border-radius: 12px; font-size: 1rem; outline: none; transition: 0.2s; }
.form-input:focus { border-color: var(--accent-blue); }
select.form-input { appearance: none; background-image: url("data:image/svg+xml;charset=UTF-8,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='%2394a3b8' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3e%3cpolyline points='6 9 12 15 18 9'%3e%3c/polyline%3e%3c/svg%3e"); background-repeat: no-repeat; background-position: right 1rem center; background-size: 1em; cursor: pointer;}
.amount-input-wrapper { position: relative; display: flex; align-items: center; background: var(--bg-dark); border-radius: 12px; padding: 0 16px; border: 1px solid rgba(255,255,255,0.1); margin-bottom: 16px;}
.amount-input-wrapper span { font-size: 1.5rem; color: var(--text-muted); }
.amount-input-wrapper input { background: transparent; border: none; color: white; font-size: 1.5rem; padding: 16px 8px; width: 100%; outline: none; }
.primary-btn { width: 100%; background: var(--accent-blue); color: white; border: none; padding: 16px; border-radius: 12px; font-size: 1rem; font-weight: 600; cursor: pointer; transition: 0.2s; margin-top: 8px;}
.primary-btn:active { transform: scale(0.98); }
.toast { position: fixed; top: -100px; left: 50%; transform: translateX(-50%); background: var(--success); color: white; padding: 12px 24px; border-radius: 30px; font-size: 0.9rem; font-weight: 600; box-shadow: 0 4px 12px rgba(0,0,0,0.3); transition: 0.4s cubic-bezier(0.175, 0.885, 0.32, 1.275); z-index: 2000; }
.toast.show { top: 40px; }
.toast.error { background: var(--danger); }
.bottom-nav { position: fixed; bottom: 0; width: 100%; background: rgba(19, 26, 42, 0.95); backdrop-filter: blur(10px); display: flex; justify-content: space-around; padding: 12px 0 24px 0; border-top: 1px solid rgba(255,255,255,0.05); z-index: 100; }
.nav-item { display: flex; flex-direction: column; align-items: center; color: var(--text-muted); text-decoration: none; font-size: 0.7rem; gap: 4px; }
.nav-item.active { color: var(--accent-blue); }
@media (min-width: 1024px) {
.app-container { flex-direction: row; }
.bottom-nav { display: none; }
.sidebar { display: flex; flex-direction: column; width: 260px; background: var(--surface-dark); border-right: 1px solid rgba(255,255,255,0.05); padding: 32px 24px; height: 100vh; position: sticky; top: 0; }
.sidebar .logo { font-size: 1.5rem; font-weight: bold; margin-bottom: 48px; color: var(--accent-blue); }
.side-nav { display: flex; flex-direction: column; gap: 12px; }
.side-nav a { color: var(--text-muted); text-decoration: none; padding: 12px 16px; border-radius: 12px; transition: 0.2s; display: flex; align-items: center; gap: 12px; }
.side-nav a:hover, .side-nav a.active { background: rgba(14, 165, 233, 0.1); color: var(--accent-blue); }
.main-content { padding: 40px 60px; max-width: 800px; margin: 0 auto; }
}
</style>
</head>
<body>
<?php if ($kyc_status === 'pending' || $kyc_status === 'rejected'): ?>
<style>
body { overflow: hidden !important; }
.restriction-overlay { position: fixed; top: 0; left: 0; width: 100vw; height: 100vh; background: rgba(10, 14, 23, 0.85); backdrop-filter: blur(12px); z-index: 9999; display: flex; align-items: center; justify-content: center; padding: 20px; }
.restriction-box { background: var(--surface-dark); border: 1px solid rgba(255,255,255,0.1); padding: 40px; border-radius: 24px; text-align: center; max-width: 450px; box-shadow: 0 20px 50px rgba(0,0,0,0.8); }
.restriction-icon { font-size: 3rem; margin-bottom: 16px; }
.restriction-box h2 { margin-bottom: 12px; color: var(--text-main); font-size: 1.5rem;}
.restriction-box p { color: var(--text-muted); font-size: 0.95rem; line-height: 1.6; margin-bottom: 24px;}
.logout-btn-large { display: inline-block; width: 100%; background: rgba(239, 68, 68, 0.1); color: var(--danger); border: 1px solid rgba(239, 68, 68, 0.3); padding: 16px; border-radius: 12px; text-decoration: none; font-weight: 600; transition: 0.2s; }
.logout-btn-large:active { transform: scale(0.98); background: rgba(239, 68, 68, 0.2); }
</style>
<div class="restriction-overlay">
<div class="restriction-box">
<?php if ($kyc_status === 'pending'): ?>
<div class="restriction-icon">⏳</div>
<h2>Transfers Locked</h2>
<p>Welcome, <?php echo htmlspecialchars($firstName); ?>. Your account is currently under review by our compliance team. Outbound transfers are disabled until verification is complete.</p>
<?php else: ?>
<div class="restriction-icon">🚫</div>
<h2>Account Restricted</h2>
<p>Your application could not be verified. Transfers are permanently locked.</p>
<?php endif; ?>
<a href="logout.php" class="logout-btn-large">Sign Out</a>
</div>
</div>
<?php endif; ?>
<div id="toast" class="toast"></div>
<div class="app-container">
<aside class="sidebar">
<div class="logo">City Prime</div>
<nav class="side-nav">
<a href="index.php"><span>🏠</span> Home</a>
<a href="activity.php"><span>📊</span> Activity</a>
<a href="transfer.php" class="active"><span>💸</span> Transfer</a>
<a href="cards.php"><span>💳</span> Cards</a>
<a href="profile.php"><span>👤</span> Profile</a>
</nav>
</aside>
<main class="main-content">
<header class="top-header">
<h1 class="page-title">Send Money</h1>
<div class="notifications"><span>📥</span></div>
</header>
<div class="balance-preview-card">
<div>
<span>Available Balance</span>
<h2>$<?php echo htmlspecialchars($fiatBalance); ?></h2>
</div>
<div class="acc-badge">Acct ****<?php echo htmlspecialchars($hiddenAcc); ?></div>
</div>
<div class="transfer-tabs">
<div class="tab-btn active" onclick="switchTab('local')">Local Transfer</div>
<div class="tab-btn" onclick="switchTab('wire')">Intl. Wire</div>
</div>
<div class="transfer-form-card">
<div id="localTab" class="tab-content active">
<form action="transfer.php" method="POST">
<input type="hidden" name="transfer_action" value="local">
<label class="form-label">Transfer Amount</label>
<div class="amount-input-wrapper">
<span>$</span>
<input type="number" name="amount" step="0.01" min="1" placeholder="0.00" required>
</div>
<div class="form-group">
<label class="form-label">Select Beneficiary Bank</label>
<select name="bank_name" class="form-input" required>
<option value="" disabled selected>Choose Bank...</option>
<option value="City Prime">City Prime (Internal)</option>
<option value="Chase Bank">Chase Bank</option>
<option value="Bank of America">Bank of America</option>
<option value="Wells Fargo">Wells Fargo</option>
<option value="CitiBank">CitiBank</option>
</select>
</div>
<div class="form-group">
<label class="form-label">Account Number</label>
<input type="number" name="account_number" id="accNumberInput" class="form-input" placeholder="Enter 10-digit account number" required>
</div>
<div class="form-group">
<label class="form-label">Account Name</label>
<input type="text" name="account_name" id="accNameInput" class="form-input" placeholder="Enter account name" required readonly style="background: rgba(255,255,255,0.02); color: var(--text-muted);">
</div>
<div class="form-group">
<label class="form-label">Transfer Description (Optional)</label>
<input type="text" name="description" class="form-input" placeholder="What is this for?">
</div>
<button type="submit" class="primary-btn">Complete Transfer</button>
</form>
</div>
<div id="wireTab" class="tab-content">
<form action="transfer.php" method="POST">
<input type="hidden" name="transfer_action" value="wire">
<label class="form-label">Transfer Amount</label>
<div class="amount-input-wrapper">
<span>$</span>
<input type="number" name="amount" step="0.01" min="100" placeholder="0.00" required>
</div>
<div class="form-group">
<label class="form-label">Recipient's Country</label>
<select name="bank_name" class="form-input" required>
<option value="" disabled selected>Select Country...</option>
<option value="United Kingdom">United Kingdom</option>
<option value="Canada">Canada</option>
<option value="Nigeria">Nigeria</option>
<option value="UAE">United Arab Emirates</option>
</select>
</div>
<div class="form-group">
<label class="form-label">SWIFT / BIC Code</label>
<input type="text" class="form-input" placeholder="e.g. BOFAUS3N" required style="text-transform: uppercase;">
</div>
<div class="form-group">
<label class="form-label">IBAN / Account Number</label>
<input type="text" name="account_number" class="form-input" placeholder="Enter IBAN" required>
</div>
<div class="form-group">
<label class="form-label">Beneficiary Full Name</label>
<input type="text" name="account_name" class="form-input" placeholder="Name on the bank account" required>
</div>
<button type="submit" class="primary-btn">Initiate Wire Transfer</button>
</form>
</div>
</div>
</main>
<nav class="bottom-nav">
<a href="activity.php" class="nav-item"><span class="nav-icon">📊</span>Activity</a>
<a href="transfer.php" class="nav-item active"><span class="nav-icon">💸</span>Transfer</a>
<a href="index.php" class="nav-item"><span class="nav-icon">🏠</span>Home</a>
<a href="cards.php" class="nav-item"><span class="nav-icon">💳</span>Cards</a>
<a href="profile.php" class="nav-item"><span class="nav-icon">👤</span>Profile</a>
</nav>
</div>
<script>
// Tab Switching Logic
function switchTab(tabId) {
document.querySelectorAll('.tab-btn').forEach(btn => btn.classList.remove('active'));
document.querySelectorAll('.tab-content').forEach(content => content.classList.remove('active'));
event.target.classList.add('active');
document.getElementById(tabId + 'Tab').classList.add('active');
}
// Fake Name Resolution Logic (UI trick)
const accNumberInput = document.getElementById('accNumberInput');
const accNameInput = document.getElementById('accNameInput');
if(accNumberInput && accNameInput) {
accNumberInput.addEventListener('input', (e) => {
const val = e.target.value;
if (val.length >= 10) {
accNameInput.value = "Resolving name...";
setTimeout(() => {
const names = ["John Doe", "Sarah Connor", "Acme Corp Ltd.", "Michael Scott"];
accNameInput.value = names[Math.floor(Math.random() * names.length)];
accNameInput.style.color = "var(--text-main)";
accNameInput.style.background = "var(--bg-dark)";
}, 800);
} else {
accNameInput.value = "";
accNameInput.style.color = "var(--text-muted)";
accNameInput.style.background = "rgba(255,255,255,0.02)";
}
});
}
// PHP Output Toast Trigger
<?php if ($transferSuccess): ?>
const toast = document.getElementById('toast');
toast.textContent = "<?php echo $transferMessage; ?>";
toast.classList.add('show');
setTimeout(() => { toast.classList.remove('show'); }, 4000);
<?php elseif (!empty($transferError)): ?>
const toast = document.getElementById('toast');
toast.textContent = "<?php echo $transferError; ?>";
toast.classList.add('show');
toast.classList.add('error');
setTimeout(() => { toast.classList.remove('show'); toast.classList.remove('error'); }, 5000);
<?php endif; ?>
</script>
</body>
</html>
b IDATxytVսϓ22 A@IR:hCiZ[v*E:WũZA ^dQeQ @ !jZ'>gsV仿$|?g)&x-E