Add locked classroom reservations with admin-only booking

[Copilot]

Adds ability to lock classrooms so only admins can create reservations. Locked rooms remain visible with existing reservations, but non-admins see a blocked notice instead of booking controls. Admins gain the ability to create reservations on behalf of any user.

Database Schema

• Added bloqueado column to salas table (0=unlocked, 1=locked)
• Migration handles existing installations

Admin Panel (admin/salas.php)

• New "Estado" dropdown in room edit form to toggle lock status
• Lock status badge in rooms list (red=locked, green=unlocked)

Reservation UI (reservar/index.php)

• Locked room notice: warning for admins, danger alert for non-admins
• Non-admins on locked rooms see "Livre" text without checkboxes/links
• Modal-based user lookup for admins in bulk reservation form with search/filter functionality

Reservation Logic (reservar/manage.php)

• Blocks non-admin reservation attempts on locked rooms (returns 403)
• Modal-based user selection for single and bulk reservations with search/filter by name or email
• Validates requisitor_id exists in database before use

User Selection Modal

• Searchable modal replaces dropdown to prevent UI clutter with many users
• Filter users by name or email in real-time
• Scrollable list with user name and email displayed
• "Procurar" (Search) button opens the modal, "Limpar" (Clear) button resets selection

// Check if room is locked and user is not admin
if ($salaInfo['bloqueado'] == 1 && !$_SESSION['admin']) {
    http_response_code(403);
    die("Esta sala está bloqueada. Apenas os administradores podem criar reservas.");
}

// Validate requisitor_id for admin reservations on behalf of users
if ($_SESSION['admin'] && isset($_POST['requisitor_id']) && !empty($_POST['requisitor_id'])) {
    $userCheckStmt = $db->prepare("SELECT id FROM cache WHERE id = ?");
    $userCheckStmt->bind_param("s", $_POST['requisitor_id']);
    // ...
}

Original prompt

Add a feature to lock classroom reservations. They'll show up on the reservation list, and people can see reservations, but only admins can create reservations. With this, add a "create reservations for user" option for admins. Locked classrooms will have a notice on the reserve classroom page saying that the classroom is locked.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[marpisco]

@copilot Everything seems great except the reservation tactic. Change the way that you are putting up users, since that might become hogged up over time. Add some sort of modal for looking up.

[Copilot]

@copilot Everything seems great except the reservation tactic. Change the way that you are putting up users, since that might become hogged up over time. Add some sort of modal for looking up.

Replaced the dropdown with a modal-based user lookup in commit 537c72d. The new UI includes:

• A search/filter input to quickly find users by name or email
• A scrollable list of users in a Bootstrap modal
• "Procurar" (Search) button to open the modal
• "Limpar" (Clear) button to reset selection

This change applies to both bulk reservations (reservar/index.php) and single reservations (reservar/manage.php).

[marpisco]

Aproveitei esta PR para poder adicionar outras funções e QOL.