prepare("UPDATE tickets SET status='closed' WHERE id=?")->execute([$id]);
header("Location: ticket_view.php?id=$id"); exit();
}
// Reply & Upload
if(isset($_POST['reply'])) {
$msg = trim($_POST['message']);
$file_path = NULL;
if (!empty($_FILES['attachment']['name'])) {
$ext = strtolower(pathinfo($_FILES['attachment']['name'], PATHINFO_EXTENSION));
$target = "../uploads/tickets/" . time() . "_admin_" . rand(100,999) . "." . $ext;
if (!is_dir("../uploads/tickets/")) mkdir("../uploads/tickets/", 0777, true);
if (move_uploaded_file($_FILES['attachment']['tmp_name'], $target)) {
$file_path = str_replace("../", "", $target); // Fix path for DB
}
}
$pdo->prepare("INSERT INTO ticket_messages (ticket_id, sender, message, attachment) VALUES (?, 'admin', ?, ?)")
->execute([$id, $msg, $file_path]);
$pdo->prepare("UPDATE tickets SET status='answered' WHERE id=?")->execute([$id]);
header("Location: ticket_view.php?id=$id"); exit();
}
$ticket = $pdo->query("SELECT t.*, u.name, u.email FROM tickets t JOIN users u ON t.user_id = u.id WHERE t.id=$id")->fetch();
$msgs = $pdo->query("SELECT * FROM ticket_messages WHERE ticket_id=$id ORDER BY created_at ASC")->fetchAll();
?>
Reply Ticket