Access Denied: You do not have permission to view the Staff Directory.
';
require_once __DIR__ . '/../includes/footer.php';
exit;
}
$error = '';
$success = '';
// Handle Employee & User Account Deletion
if ($_SERVER['REQUEST_METHOD'] === 'POST' && ($_POST['action'] ?? '') === 'delete') {
$empId = filter_input(INPUT_POST, 'employee_id', FILTER_VALIDATE_INT);
if ($empId) {
try {
$pdo->beginTransaction();
// 1. Fetch associated user_id for this employee
$stmt = $pdo->prepare('SELECT user_id FROM employees WHERE employee_id = :id LIMIT 1');
$stmt->execute(['id' => $empId]);
$emp = $stmt->fetch();
$userId = $emp['user_id'] ?? null;
// 2. Delete the employee profile record
$delEmp = $pdo->prepare('DELETE FROM employees WHERE employee_id = :id');
$delEmp->execute(['id' => $empId]);
// 3. Delete the user login account (and its RBAC roles via FK cascade)
if ($userId) {
$delUser = $pdo->prepare('DELETE FROM users WHERE user_id = :user_id');
$delUser->execute(['user_id' => $userId]);
}
$pdo->commit();
$success = 'Employee record and user account deleted successfully!';
} catch (Exception $e) {
if ($pdo->inTransaction()) {
$pdo->rollBack();
}
$error = 'Failed to delete employee: ' . $e->getMessage();
}
}
}
$search = trim($_GET['search'] ?? '');
$filterDept = trim($_GET['department_id'] ?? '');
$filterStatus = trim($_GET['status'] ?? '');
$deptStmt = $pdo->query('SELECT department_id, department_name FROM departments ORDER BY department_name ASC');
$departments = $deptStmt->fetchAll();
$sql = '
SELECT
e.employee_id, e.first_name, e.last_name, e.work_email, e.phone_number,
e.hire_date, e.employment_status, e.employment_type,
d.department_name, jp.job_title,
CONCAT(m.first_name, " ", m.last_name) AS manager_name,
u.username
FROM employees e
LEFT JOIN departments d ON e.department_id = d.department_id
LEFT JOIN job_positions jp ON e.position_id = jp.position_id
LEFT JOIN employees m ON e.manager_id = m.employee_id
LEFT JOIN users u ON e.user_id = u.user_id
WHERE 1=1
';
$params = [];
if (!empty($search)) {
$sql .= ' AND (e.first_name LIKE :search OR e.last_name LIKE :search OR e.work_email LIKE :search OR u.username LIKE :search)';
$params['search'] = '%' . $search . '%';
}
if (!empty($filterDept)) {
$sql .= ' AND e.department_id = :dept_id';
$params['dept_id'] = $filterDept;
}
if (!empty($filterStatus)) {
$sql .= ' AND e.employment_status = :status';
$params['status'] = $filterStatus;
}
$sql .= ' ORDER BY e.last_name ASC, e.first_name ASC';
$stmt = $pdo->prepare($sql);
$stmt->execute($params);
$employeesList = $stmt->fetchAll();
$pageTitle = 'Staff Directory (Admin)';
require_once __DIR__ . '/../includes/header.php';
?>
| ID |
Employee |
Title & Department |
Contact |
Type |
Status |
Actions |
| # |
@
|
|
|
|
|
|
|
No employee records matching criteria.
|