Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/bakery/branch

Free Space:

10.32 TB

🔧 Quick Actions

✏️ Editing: foods_delete.php

<?php
session_start();
require_once 'config/db_config.php';
if (!isset($_SESSION['user_id']) || !isset($_SESSION['role']) || !in_array($_SESSION['role'], ['admin', 'branch', 'warehouse_manager'])) {
    header("Location: login.php");
    exit();
}
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf = $_SESSION['csrf_token'];
function h(string $v): string { return htmlspecialchars($v, ENT_QUOTES, 'UTF-8'); }
$user_branch_id = null;
if (in_array($_SESSION['role'], ['branch', 'warehouse_manager'])) {
    $user_branch_id = $_SESSION['branch_id'] ?? null;
    if (!$user_branch_id) {
        $_SESSION['error'] = "Branch ID not set.";
        header("Location: login.php");
        exit();
    }
}
if ($_SERVER['REQUEST_METHOD'] !== 'POST' || !isset($_POST['csrf']) || $_POST['csrf'] !== $csrf) {
    $_SESSION['error'] = "Invalid request.";
    header("Location: foods_list.php");
    exit();
}
$food_id = isset($_POST['food_id']) ? (int)$_POST['food_id'] : 0;
if ($food_id <= 0) {
    $_SESSION['error'] = "Invalid food ID.";
    header("Location: foods_list.php");
    exit();
}
try {
    $pdo->beginTransaction();
    $stmt = $pdo->prepare("
        SELECT f.food_id, f.food_name
        FROM foods f
        WHERE f.food_id = ?
    ");
    $stmt->execute([$food_id]);
    $food = $stmt->fetch(PDO::FETCH_ASSOC);
    if (!$food) {
        $_SESSION['error'] = "Food not found.";
        header("Location: foods_list.php");
        exit();
    }
    if ($_SESSION['role'] !== 'admin') {
        $stmt = $pdo->prepare("
            SELECT 1
            FROM branch_foods bf
            WHERE bf.food_id = ? AND bf.branch_id = ?
        ");
        $stmt->execute([$food_id, $user_branch_id]);
        if (!$stmt->fetch()) {
            $_SESSION['error'] = "You do not have permission to delete this food.";
            header("Location: foods_list.php");
            exit();
        }
    }
    $stmt = $pdo->prepare("
        SELECT bfs.image_url
        FROM branch_food_stock bfs
        JOIN branch_foods bf ON bfs.branch_food_id = bf.branch_food_id
        WHERE bf.food_id = ?
    ");
    $stmt->execute([$food_id]);
    $images = $stmt->fetchAll(PDO::FETCH_ASSOC);
    foreach ($images as $image) {
        if (!empty($image['image_url']) && file_exists('../' . $image['image_url']) && !str_contains($image['image_url'], 'default')) {
            unlink('../' . $image['image_url']);
        }
    }
    $stmt = $pdo->prepare("DELETE FROM foods WHERE food_id = ?");
    $stmt->execute([$food_id]);
    $pdo->commit();
    $_SESSION['success'] = "Food '{$food['food_name']}' deleted successfully!";
    header("Location: foods_list.php");
    exit();
} catch (PDOException $e) {
    $pdo->rollBack();
    $_SESSION['error'] = "Error deleting food: " . h($e->getMessage());
    header("Location: foods_list.php");
    exit();
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: foods_delete.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation