resolve_complaint.php

<?php
include 'config.php';
include 'auth_check.php';

// Check if user is staff
if ($_SESSION['role'] !== 'Staff' && $_SESSION['role'] !== 'Admin') {
    echo json_encode(['success' => false, 'message' => 'Unauthorized access']);
    exit;
}

// Check if required parameters are provided
if (!isset($_POST['complaint_id']) || !isset($_POST['resolution_notes'])) {
    echo json_encode(['success' => false, 'message' => 'Missing required parameters']);
    exit;
}

$complaint_id = $_POST['complaint_id'];
$resolution_notes = $_POST['resolution_notes'];
$user_id = $_SESSION['user_id'];

// Check if complaint exists and user has permission to resolve it
$check_query = "SELECT * FROM complaints WHERE id = '$complaint_id'";
if ($_SESSION['role'] === 'Staff') {
    $check_query .= " AND assigned_to = '$user_id'";
}

$result = $conn->query($check_query);
if (!$result || $result->num_rows === 0) {
    echo json_encode(['success' => false, 'message' => 'Complaint not found or you do not have permission to resolve it']);
    exit;
}

$complaint = $result->fetch_assoc();

// Begin transaction
$conn->begin_transaction();

try {
    // Update complaint status to Resolved
    $conn->query("UPDATE complaints SET 
                 status = 'Resolved', 
                 resolved_at = NOW(), 
                 resolution_notes = '$resolution_notes' 
                 WHERE id = '$complaint_id'");
    
    // Add resolution update to complaint_updates table
    $conn->query("INSERT INTO complaint_updates (complaint_id, user_id, comment, status_change, created_at) 
                 VALUES ('$complaint_id', '$user_id', 'Complaint resolved: $resolution_notes', 'Resolved', NOW())");
    
    // Add notification for student
    $conn->query("INSERT INTO notifications (user_id, title, message, created_at) 
                 VALUES ('{$complaint['student_id']}', 'Complaint Resolved', 'Your complaint has been resolved. Please check the resolution details.', NOW())");
    
    // Commit transaction
    $conn->commit();
    
    echo json_encode(['success' => true, 'message' => 'Complaint resolved successfully']);
} catch (Exception $e) {
    // Rollback transaction on error
    $conn->rollback();
    echo json_encode(['success' => false, 'message' => 'Error resolving complaint: ' . $e->getMessage()]);
}
?>