false, 'error' => 'Unauthorized']); exit; } header('Location: /login.php'); exit; } $allowed_roles = ['OWNER', 'ADMIN', 'FINANCE_OFFICER', 'SALES_STAFF']; $user_role = strtoupper(trim($_SESSION['role_type'] ?? '')); if (!in_array($user_role, $allowed_roles, true)) { http_response_code(403); die('Access Denied.'); } /* Session idle check (uses session.php's _last_activity field) */ if (!empty($_SESSION['_last_activity']) && (time() - $_SESSION['_last_activity']) > 1800) { $_SESSION = []; session_destroy(); header('Location: /login.php?timeout=1'); exit; } /* NOTE: session_regenerate_id() block REMOVED — rotation happens once in ajax_login.php / auth.php at login. Rotating mid-session deletes the session file and breaks every in-flight AJAX poll. */ $staff_id = $_SESSION['user_id']; $staff_name = $_SESSION['full_name'] ?? 'Staff Member'; $staff_role = $_SESSION['role_type'] ?? 'SALES_STAFF'; require_once __DIR__ . '/db.php'; require_once __DIR__ . '/includes/dashboard_router.php'; $csrf_token = generate_csrf_token(); $unread_count = 0; $templates = []; try { $r = $conn->query("SELECT COALESCE(SUM(unread_count),0) t FROM whatsapp_conversations WHERE status='active'")->fetch(PDO::FETCH_ASSOC); $unread_count = (int)($r['t'] ?? 0); $templates = $conn->query("SELECT id,name,message,category,shortcut FROM whatsapp_templates WHERE is_active=1 ORDER BY usage_count DESC LIMIT 20")->fetchAll(PDO::FETCH_ASSOC); } catch (Exception $e) { error_log('wa init: ' . $e->getMessage()); } ?> WhatsApp CRM — Paktia Travel

WhatsApp Business CRM

Customer Communication Center

Connected
Logout
WhatsApp Business CRM

Select a conversation or start a new chat