Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/footwear

Free Space:

10.27 TB

🔧 Quick Actions

✏️ Editing: auditor-login.php

<?php
// auditor-login.php

include('includes/db.php');

// Set timezone
date_default_timezone_set('Asia/Kolkata');

// Redirect if already logged in
if (isset($_SESSION['auditor_logged_in']) && $_SESSION['auditor_logged_in'] === true) {
    header('Location: auditor-dashboard.php');
    exit;
}

// Handle login
$error = '';
$username = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = trim($_POST['username'] ?? '');
    $password = $_POST['password'] ?? '';
    
    if (empty($username) || empty($password)) {
        $error = 'Please enter both username and password';
    } else {
        // Check if auditor exists and is not locked
        $stmt = $conn->prepare("SELECT * FROM auditors WHERE username = ? AND is_active = 1");
        $stmt->bind_param("s", $username);
        $stmt->execute();
        $result = $stmt->get_result();
        
        if ($result->num_rows === 1) {
            $auditor = $result->fetch_assoc();
            
            // Check if account is locked
            if ($auditor['locked_until'] && strtotime($auditor['locked_until']) > time()) {
                $error = 'Account temporarily locked. Please try again later.';
            } else {
                // Debug: Check what's happening
                error_log("Login attempt - Username: $username, Password length: " . strlen($password));
                error_log("Stored hash: " . $auditor['password_hash']);
                
                // Verify password
                if (password_verify($password, $auditor['password_hash'])) {
                    // Successful login
                    $_SESSION['auditor_logged_in'] = true;
                    $_SESSION['auditor_id'] = $auditor['id'];
                    $_SESSION['auditor_username'] = $auditor['username'];
                    $_SESSION['auditor_full_name'] = $auditor['full_name'];
                    
                    // Reset failed attempts and update last login
                    $updateStmt = $conn->prepare("UPDATE auditors SET failed_attempts = 0, locked_until = NULL, last_login = NOW() WHERE id = ?");
                    $updateStmt->bind_param("i", $auditor['id']);
                    $updateStmt->execute();
                    
                    header('Location: auditor/');
                    exit;
                } else {
                    // Failed login
                    $failed_attempts = $auditor['failed_attempts'] + 1;
                    $locked_until = null;
                    
                    // Lock account after 5 failed attempts for 30 minutes
                    if ($failed_attempts >= 5) {
                        $locked_until = date('Y-m-d H:i:s', strtotime('+30 minutes'));
                        $error = 'Too many failed attempts. Account locked for 30 minutes.';
                    } else {
                        $error = 'Invalid username or password';
                    }
                    
                    // Update failed attempts
                    $updateStmt = $conn->prepare("UPDATE auditors SET failed_attempts = ?, locked_until = ? WHERE id = ?");
                    $updateStmt->bind_param("isi", $failed_attempts, $locked_until, $auditor['id']);
                    $updateStmt->execute();
                    
                    // Debug log
                    error_log("Password verification failed for user: $username");
                }
            }
        } else {
            $error = 'Invalid username or password - User not found or inactive';
            error_log("User not found or inactive: $username");
        }
    }
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Auditor Login - STYLE29 MENS WEAR</title>
    
    
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
    
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    
    <style>
        body {
            
            min-height: 100vh;
            display: flex;
            align-items: center;
            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
        }
        .login-container {
            background: white;
            border-radius: 15px;
            box-shadow: 0 15px 35px rgba(0, 0, 0, 0.1);
            overflow: hidden;
            max-width: 400px;
            width: 100%;
            margin: 20px auto;
        }
        .login-header {
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            color: white;
            padding: 30px;
            text-align: center;
        }
        .login-body {
            padding: 30px;
        }
        .form-control {
            border-radius: 8px;
            padding: 12px 15px;
            border: 2px solid #e9ecef;
            transition: all 0.3s;
        }
        .form-control:focus {
            border-color: #667eea;
            box-shadow: 0 0 0 0.2rem rgba(102, 126, 234, 0.25);
        }
        .btn-login {
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            border: none;
            border-radius: 8px;
            padding: 12px;
            font-weight: 600;
            color: white;
            transition: all 0.3s;
        }
        .btn-login:hover {
            transform: translateY(-2px);
            box-shadow: 0 5px 15px rgba(102, 126, 234, 0.4);
        }
        .password-toggle {
            position: absolute;
            right: 15px;
            top: 50%;
            transform: translateY(-50%);
            background: none;
            border: none;
            color: #6c757d;
            cursor: pointer;
            z-index: 10;
        }
        .password-container {
            position: relative;
        }
    </style>
</head>
<body>
    <div class="container">
        <div class="row justify-content-center">
            <div class="col-md-6 col-lg-4">
                <div class="login-container">
                    <div class="login-header">
                        <h2><i class="fas fa-shield-alt me-2"></i>Auditor Login</h2>
                        <p>Secure Access Portal</p>
                    </div>
                    
                    <div class="login-body">
                        <?php if ($error): ?>
                            <div class="alert alert-danger">
                                <i class="fas fa-exclamation-triangle me-2"></i><?php echo htmlspecialchars($error); ?>
                            </div>
                        <?php endif; ?>
                        
                        <form method="POST" action="">
                            <div class="mb-3">
                                <label for="username" class="form-label">Username</label>
                                <div class="input-group">
                                    <span class="input-group-text"><i class="fas fa-user"></i></span>
                                    <input type="text" class="form-control" id="username" name="username" 
                                           value="<?php echo htmlspecialchars($username); ?>" required 
                                           placeholder="Enter your username">
                                </div>
                            </div>
                            
                            <div class="mb-4">
                                <label for="password" class="form-label">Password</label>
                                <div class="password-container">
                                    <div class="input-group">
                                        <span class="input-group-text"><i class="fas fa-lock"></i></span>
                                        <input type="password" class="form-control" id="password" name="password" 
                                               required placeholder="Enter your password">
                                    </div>
                                    <button type="button" class="password-toggle" onclick="togglePassword()">
                                        <i class="fas fa-eye" id="password-icon"></i>
                                    </button>
                                </div>
                            </div>
                            
                            <button type="submit" class="btn btn-login w-100 mb-3">
                                <i class="fas fa-sign-in-alt me-2"></i>Login as Auditor
                            </button>
                        </form>
                       
                        <div class="text-center">
                            <a href="reset-auditor-password.php" class="text-muted">Forgot Password?</a>
                        </div>
                    </div>
                </div>
                
                
                <div class="mt-3 text-center">
                    <small class="text-white">
                        Need help? <a href="debug-auditor.php" class="text-warning">Check debug page</a>
                    </small>
                </div>
            </div>
        </div>
    </div>

<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js"></script>
    
    <script>
        function togglePassword() {
            const passwordInput = document.getElementById('password');
            const passwordIcon = document.getElementById('password-icon');
            
            if (passwordInput.type === 'password') {
                passwordInput.type = 'text';
                passwordIcon.className = 'fas fa-eye-slash';
            } else {
                passwordInput.type = 'password';
                passwordIcon.className = 'fas fa-eye';
            }
        }
    </script>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: auditor-login.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation