admin_payments.php

<?php
session_start();
require "config.php";

if (!isset($_SESSION["user"]) || $_SESSION["user"]["role"] !== "admin") {
    die("Access denied");
}

$stmt = $pdo->query("
    SELECT payments.*, users.full_name 
    FROM payments
    JOIN users ON users.id = payments.student_id
    ORDER BY payments.created_at DESC
");
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
?>

<h2>Payment Verification</h2>

<table border="1" cellpadding="6">
<tr>
    <th>Student</th>
    <th>Reference</th>
    <th>Amount</th>
    <th>Method</th>
    <th>Status</th>
    <th>Action</th>
</tr>

<?php foreach ($rows as $p): ?>
<tr>
    <td><?= $p["full_name"] ?></td>
    <td><?= $p["reference"] ?></td>
    <td><?= $p["amount"] ?></td>
    <td><?= $p["payment_method"] ?></td>
    <td><?= strtoupper($p["status"]) ?></td>
    <td>
        <?php if ($p["status"] === "pending"): ?>
        <a href="verify_payment.php?id=<?= $p["id"] ?>&action=paid">Mark Paid</a> |
        <a href="verify_payment.php?id=<?= $p["id"] ?>&action=failed">Mark Failed</a>
        <?php else: ?>
        -
        <?php endif; ?>
    </td>
</tr>
<?php endforeach; ?>
</table>