real_escape_string($_POST['phone']);
// Handle New Request
if(isset($_POST['request_access'])) {
$conn->query("INSERT IGNORE INTO portal_access (phone, status) VALUES ('$phone', 'Pending')");
echo "
Request Sent!
Please wait for the Doctor to approve your access. Try again in some time.
";
}
// Check Permission
$perm_sql = "SELECT status FROM portal_access WHERE phone = '$phone'";
$perm_res = $conn->query($perm_sql);
$permission = $perm_res->fetch_assoc();
if ($permission && $permission['status'] == 'Approved') {
// --- ACCESS GRANTED: SHOW DASHBOARD ---
$appt_res = $conn->query("SELECT * FROM appointments WHERE phone = '$phone' ORDER BY id DESC LIMIT 3");
$visit_res = $conn->query("SELECT * FROM patient_entries WHERE phone = '$phone' ORDER BY id DESC LIMIT 5");
$lab_res = $conn->query("SELECT * FROM lab_reports WHERE patient_phone = '$phone' ORDER BY id DESC");
?>