Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/bakery/branch

Free Space:

10.32 TB

🔧 Quick Actions

✏️ Editing: customers_edit.php

<?php
// customers_edit.php
session_start();
require_once 'config/db_config.php'; // expects $pdo (PDO)

// ---- Auth (admins and branch users) ----
if (!isset($_SESSION['user_id']) || !isset($_SESSION['role'])) {
    header("Location: login.php");
    exit();
}

// ---- CSRF token ----
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf = $_SESSION['csrf_token'];

// ---- Helpers ----
function h(string $v): string { return htmlspecialchars($v, ENT_QUOTES, 'UTF-8'); }

// ---- Initialize variables ----
$original_contact = $_GET['contact'] ?? '';
$original_name = $_GET['name'] ?? '';
$customer_name = $original_name;
$customer_contact = $original_contact;
$errors = [];

// ---- Validate query parameters ----
if (empty($original_contact)) {
    $_SESSION['error'] = "Invalid customer contact.";
    header("Location: customers.php");
    exit();
}

// ---- Handle form submission ----
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Verify CSRF token
    if (!isset($_POST['csrf']) || $_POST['csrf'] !== $csrf) {
        $_SESSION['error'] = "Invalid CSRF token.";
        header("Location: customers.php");
        exit();
    }

// Sanitize and validate inputs
    $customer_name = trim($_POST['customer_name'] ?? '');
    $customer_contact = trim($_POST['customer_contact'] ?? '');

// Validate customer_contact
    if (empty($customer_contact)) {
        $errors[] = "Customer contact is required.";
    } elseif (!preg_match('/^[0-9]{10}$/', $customer_contact)) {
        $errors[] = "Customer contact must be a valid 10-digit phone number.";
    }

// Check if new contact already exists for a different customer
    try {
        $stmt = $pdo->prepare("
            SELECT COUNT(*) FROM orders 
            WHERE customer_contact = :contact 
            AND (customer_name != :name OR (:name = '' AND customer_name != ''))
        ");
        $stmt->execute([
            'contact' => $customer_contact,
            'name' => $customer_name
        ]);
        if ($stmt->fetchColumn() > 0) {
            $errors[] = "This contact number is already associated with another customer.";
        }
    } catch (PDOException $e) {
        $errors[] = "Error checking contact: " . h($e->getMessage());
    }

// If no errors, update the orders
    if (empty($errors)) {
        try {
            $stmt = $pdo->prepare("
                UPDATE orders 
                SET customer_name = :new_name, customer_contact = :new_contact
                WHERE customer_contact = :original_contact 
                AND (customer_name = :original_name OR (:original_name = '' AND customer_name = ''))
            ");
            $stmt->execute([
                'new_name' => $customer_name,
                'new_contact' => $customer_contact,
                'original_contact' => $original_contact,
                'original_name' => $original_name
            ]);

$_SESSION['success'] = "Customer updated successfully.";
            header("Location: customers.php");
            exit();
        } catch (PDOException $e) {
            $errors[] = "Error updating customer: " . h($e->getMessage());
        }
    }
}

// ---- Fetch customer details for display ----
try {
    $stmt = $pdo->prepare("
        SELECT COUNT(order_id) as total_orders, SUM(total_amount) as total_spent, MAX(order_date) as last_order
        FROM orders 
        WHERE customer_contact = :contact 
        AND (customer_name = :name OR (:name = '' AND customer_name = ''))
    ");
    $stmt->execute([
        'contact' => $original_contact,
        'name' => $original_name
    ]);
    $customer = $stmt->fetch(PDO::FETCH_ASSOC);
    if (!$customer) {
        $_SESSION['error'] = "Customer not found.";
        header("Location: customers.php");
        exit();
    }
} catch (PDOException $e) {
    $_SESSION['error'] = "Error fetching customer details: " . h($e->getMessage());
    header("Location: customers.php");
    exit();
}

<?php include './partials/layouts/layoutTop.php'; ?>

<div class="dashboard-main-body">
    <div class="d-flex flex-wrap align-items-center justify-content-between gap-2 mb-16">
        <h6 class="fw-semibold mb-0 text-lg">Edit Customer</h6>
        <ul class="d-flex align-items-center gap-1 small">
            <li class="fw-medium">
                <a href="index.php" class="d-flex align-items-center gap-1 hover-text-primary text-sm">
                    <iconify-icon icon="solar:home-smile-angle-outline" class="icon text-md"></iconify-icon>
                    Dashboard
                </a>
            </li>
            <li>-</li>
            <li class="fw-medium">
                <a href="customers.php" class="text-sm">Customers</a>
            </li>
            <li>-</li>
            <li class="fw-medium text-sm">Edit Customer</li>
        </ul>
    </div>

<?php if (!empty($_SESSION['success'])): ?>
        <div class="alert alert-success alert-dismissible fade show mb-24" role="alert">
            <?= h($_SESSION['success']); unset($_SESSION['success']); ?>
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
        </div>
    <?php endif; ?>
    <?php if (!empty($errors)): ?>
        <div class="alert alert-danger alert-dismissible fade show mb-24" role="alert">
            <ul class="mb-0">
                <?php foreach ($errors as $error): ?>
                    <li class="text-sm"><?= h($error); ?></li>
                <?php endforeach; ?>
            </ul>
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
        </div>
    <?php endif; ?>

<div class="card h-100">
        <div class="card-header compact-header">
            <h6 class="fw-semibold mb-0 text-md">Edit Customer Details</h6>
        </div>
        <div class="card-body compact-body">
            <form method="POST" action="customers_edit.php?contact=<?= urlencode($original_contact); ?>&name=<?= urlencode($original_name); ?>">
                <input type="hidden" name="csrf" value="<?= h($csrf); ?>">
                <div class="row g-3">
                    <div class="col-md-6">
                        <label for="customer_name" class="form-label text-sm fw-medium">Customer Name <span class="text-muted">(Optional)</span></label>
                        <input type="text" class="form-control form-control-sm" id="customer_name" name="customer_name" value="<?= h($customer_name); ?>" placeholder="Enter customer name">
                    </div>
                    <div class="col-md-6">
                        <label for="customer_contact" class="form-label text-sm fw-medium">Contact Number <span class="text-danger">*</span></label>
                        <input type="text" class="form-control form-control-sm" id="customer_contact" name="customer_contact" value="<?= h($customer_contact); ?>" placeholder="Enter contact number" required>
                    </div>
                    <div class="col-12">
                        <h6 class="fw-semibold mb-2 text-sm">Customer Summary</h6>
                        <ul class="list-unstyled text-sm">
                            <li class="mb-2"><strong>Total Orders:</strong> <?= (int)$customer['total_orders']; ?></li>
                            <li class="mb-2"><strong>Total Spent:</strong> ₹<?= number_format($customer['total_spent'], 2); ?></li>
                            <li class="mb-2"><strong>Last Order:</strong> <?= date('d M Y, H:i', strtotime($customer['last_order'])); ?></li>
                        </ul>
                    </div>
                    <div class="col-12">
                        <button type="submit" class="btn btn-primary btn-sm">Save Changes</button>
                        <a href="customers.php" class="btn btn-outline-secondary btn-sm">Cancel</a>
                    </div>
                </div>
            </form>
        </div>
    </div>
</div>

<?php include './partials/layouts/layoutBottom.php'; ?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: customers_edit.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation