Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/bakery

Free Space:

10.3 TB

🔧 Quick Actions

✏️ Editing: toggle_availability.php

<?php
session_start();
require_once 'config/db_config.php'; // Include PDO database connection

// Ensure the request is AJAX and user is authorized
if ($_SERVER['REQUEST_METHOD'] !== 'POST' || !isset($_SERVER['HTTP_X_REQUESTED_WITH']) || strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) !== 'xmlhttprequest') {
    header('HTTP/1.1 403 Forbidden');
    echo json_encode(['success' => false, 'message' => 'Invalid request method.']);
    exit();
}

if (!isset($_SESSION['user_id']) || !isset($_SESSION['role']) || $_SESSION['role'] !== 'branch' || !isset($_SESSION['branch_id'])) {
    header('HTTP/1.1 403 Forbidden');
    echo json_encode(['success' => false, 'message' => 'Unauthorized access.']);
    exit();
}

$branch_id = $_SESSION['branch_id'];

// Validate CSRF token
if (!isset($_POST['csrf']) || $_POST['csrf'] !== $_SESSION['csrf_token']) {
    header('HTTP/1.1 403 Forbidden');
    echo json_encode(['success' => false, 'message' => 'Invalid CSRF token.']);
    exit();
}

// Validate input
$food_id = $_POST['food_id'] ?? '';
$status = $_POST['status'] ?? '';
if (!is_numeric($food_id) || !in_array($status, ['active', 'inactive'])) {
    echo json_encode(['success' => false, 'message' => 'Invalid input data.']);
    exit();
}

try {
    // Verify food is associated with the branch
    $stmt = $pdo->prepare("SELECT COUNT(*) FROM branch_foods WHERE food_id = :food_id AND branch_id = :branch_id");
    $stmt->execute(['food_id' => $food_id, 'branch_id' => $branch_id]);
    if ($stmt->fetchColumn() == 0) {
        echo json_encode(['success' => false, 'message' => 'Food item not associated with this branch.']);
        exit();
    }

// Update status in branch_foods
    $stmt = $pdo->prepare("UPDATE branch_foods SET status = :status WHERE food_id = :food_id AND branch_id = :branch_id");
    $stmt->execute([
        'status' => $status,
        'food_id' => $food_id,
        'branch_id' => $branch_id
    ]);

echo json_encode(['success' => true, 'message' => 'Availability updated successfully!']);
} catch (PDOException $e) {
    echo json_encode(['success' => false, 'message' => 'Error updating availability: ' . htmlspecialchars($e->getMessage())]);
    file_put_contents('error.log', "Availability toggle error: " . $e->getMessage() . "\n", FILE_APPEND);
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: toggle_availability.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation