Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/footwear

Free Space:

10.27 TB

🔧 Quick Actions

✏️ Editing: auditor-register.php

<?php
include('includes/db.php');

// CSRF Token
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

$success_msg = $error_msg = '';
$field_errors = [];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // CSRF Check
    if (!hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'] ?? '')) {
        $error_msg = 'Invalid request. Please try again.';
    } else {
        $username   = trim($_POST['username'] ?? '');
        $email      = trim($_POST['email'] ?? '');
        $full_name  = trim($_POST['full_name'] ?? '');
        $password   = $_POST['password'] ?? '';
        $confirm    = $_POST['confirm_password'] ?? '';

// Validation
        if (!preg_match('/^[a-zA-Z0-9_-]{3,50}$/', $username)) {
            $field_errors['username'] = 'Username: 3–50 chars, letters, numbers, _, - only.';
        }
        if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
            $field_errors['email'] = 'Please enter a valid email address.';
        }
        if (strlen($full_name) < 2 || strlen($full_name) > 100) {
            $field_errors['full_name'] = 'Full name must be 2–100 characters.';
        }
        if (strlen($password) < 8) {
            $field_errors['password'] = 'Password must be at least 8 characters.';
        }
        if ($password !== $confirm) {
            $field_errors['confirm_password'] = 'Passwords do not match.';
        }

// Check for existing username/email
        if (empty($field_errors)) {
            $stmt = $conn->prepare("SELECT id FROM auditors WHERE username = ? OR email = ?");
            $stmt->bind_param('ss', $username, $email);
            $stmt->execute();
            $stmt->store_result();
            if ($stmt->num_rows > 0) {
                $stmt->bind_result($existing_id);
                $stmt->fetch();
                $stmt->close();
                
                $check_user = $conn->prepare("SELECT username FROM auditors WHERE username = ?");
                $check_user->bind_param('s', $username);
                $check_user->execute();
                $check_user->store_result();
                if ($check_user->num_rows > 0) {
                    $field_errors['username'] = 'Username already taken.';
                }
                $check_user->close();

$check_email = $conn->prepare("SELECT email FROM auditors WHERE email = ?");
                $check_email->bind_param('s', $email);
                $check_email->execute();
                $check_email->store_result();
                if ($check_email->num_rows > 0) {
                    $field_errors['email'] = 'Email already registered.';
                }
                $check_email->close();
            }
            $stmt->close();
        }

// Insert if no errors
        if (empty($field_errors)) {
            $hash = password_hash($password, PASSWORD_DEFAULT);

$stmt = $conn->prepare(
                "INSERT INTO auditors (username, password_hash, full_name, email, is_active) 
                 VALUES (?, ?, ?, ?, 1)"
            );
            $stmt->bind_param('ssss', $username, $hash, $full_name, $email);

if ($stmt->execute()) {
                $success_msg = 'Registration successful! Please log in.';
                header("Location: manage-auditors.php?msg=" . urlencode($success_msg) . "&type=success");
                exit();
            } else {
                $error_msg = 'Database error. Please try again.';
            }
            $stmt->close();
        } else {
            $error_msg = 'Please correct the errors below.';
        }
    }
}
?>
<!doctype html>
<html lang="en">
<?php include('includes/head.php'); ?>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
<style>
  .form-card { box-shadow: 0 0 20px rgba(0,0,0,0.1); border-radius: 10px; }
  .form-group { margin-bottom: 1.5rem; }
  .btn-primary { background-color: #1a5fb4; border-color: #1a5fb4; }
  .btn-primary:hover { background-color: #0f4a8a; border-color: #0f4a8a; }
  .is-invalid { border-color: #dc3545; }
  .invalid-feedback { display: block; }
</style>
<body data-sidebar="dark">
<?php include('includes/pre-loader.php'); ?>
<div id="layout-wrapper">
    <?php include('includes/topbar.php'); ?>

<div class="vertical-menu">
        <div data-simplebar class="h-100">
            <?php include('includes/sidebar.php'); ?>
        </div>
    </div>

<div class="main-content">
        <div class="page-content">
            <div class="container-fluid">

<div class="row mb-4">
                    <div class="col-12">
                        <div class="d-flex justify-content-between align-items-center">
                            <div>
                                <h4 class="mb-1">Register New Auditor</h4>
                                <div class="text-muted">Create a secure auditor account</div>
                            </div>
                            <a href="manage-auditors.php" class="btn btn-secondary">
                                <i class="fas fa-sign-in-alt me-1"></i> Back to Login
                            </a>
                        </div>
                    </div>
                </div>

<?php if ($error_msg): ?>
                    <div class="alert alert-danger alert-dismissible fade show" role="alert">
                        <?php echo htmlspecialchars($error_msg); ?>
                        <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
                    </div>
                <?php endif; ?>

<div class="row justify-content-center">
                    <div class="col-xl-10">
                        <div class="card form-card">
                            <div class="card-body">
                                <form method="POST" novalidate>
                                    <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">

<div class="row">
                                        <div class="col-md-6 form-group">
                                            <label for="username" class="form-label">Username <span class="text-danger">*</span></label>
                                            <input type="text" class="form-control <?php echo isset($field_errors['username']) ? 'is-invalid' : ''; ?>"
                                                   id="username" name="username" required maxlength="50"
                                                   value="<?php echo htmlspecialchars($_POST['username'] ?? ''); ?>">
                                            <?php if (isset($field_errors['username'])): ?>
                                                <div class="invalid-feedback"><?php echo $field_errors['username']; ?></div>
                                            <?php endif; ?>
                                        </div>
                                        <div class="col-md-6 form-group">
                                            <label for="email" class="form-label">Email <span class="text-danger">*</span></label>
                                            <input type="email" class="form-control <?php echo isset($field_errors['email']) ? 'is-invalid' : ''; ?>"
                                                   id="email" name="email" required
                                                   value="<?php echo htmlspecialchars($_POST['email'] ?? ''); ?>">
                                            <?php if (isset($field_errors['email'])): ?>
                                                <div class="invalid-feedback"><?php echo $field_errors['email']; ?></div>
                                            <?php endif; ?>
                                        </div>
                                    </div>

<div class="form-group">
                                        <label for="full_name" class="form-label">Full Name <span class="text-danger">*</span></label>
                                        <input type="text" class="form-control <?php echo isset($field_errors['full_name']) ? 'is-invalid' : ''; ?>"
                                               id="full_name" name="full_name" required maxlength="100"
                                               value="<?php echo htmlspecialchars($_POST['full_name'] ?? ''); ?>">
                                        <?php if (isset($field_errors['full_name'])): ?>
                                            <div class="invalid-feedback"><?php echo $field_errors['full_name']; ?></div>
                                        <?php endif; ?>
                                    </div>

<div class="row">
                                        <div class="col-md-6 form-group">
                                            <label for="password" class="form-label">Password <span class="text-danger">*</span></label>
                                            <input type="password" class="form-control <?php echo isset($field_errors['password']) ? 'is-invalid' : ''; ?>"
                                                   id="password" name="password" required minlength="8">
                                            <?php if (isset($field_errors['password'])): ?>
                                                <div class="invalid-feedback"><?php echo $field_errors['password']; ?></div>
                                            <?php endif; ?>
                                        </div>
                                        <div class="col-md-6 form-group">
                                            <label for="confirm_password" class="form-label">Confirm Password <span class="text-danger">*</span></label>
                                            <input type="password" class="form-control <?php echo isset($field_errors['confirm_password']) ? 'is-invalid' : ''; ?>"
                                                   id="confirm_password" name="confirm_password" required>
                                            <?php if (isset($field_errors['confirm_password'])): ?>
                                                <div class="invalid-feedback"><?php echo $field_errors['confirm_password']; ?></div>
                                            <?php endif; ?>
                                        </div>
                                    </div>

<div class="d-flex justify-content-end gap-2">
                                        <a href="manage-auditors.php" class="btn btn-secondary">Cancel</a>
                                        <button type="submit" class="btn btn-primary">
                                            <i class="fas fa-user-plus me-1"></i> Register Auditor
                                        </button>
                                    </div>
                                </form>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <?php include('includes/footer.php'); ?>
    </div>
</div>

<?php include('includes/rightbar.php'); ?>
<?php include('includes/scripts.php'); ?>
<script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
<script>
$(document).ready(function() {
    $('form').on('submit', function(e) {
        let valid = true;
        $('[required]').each(function() {
            if (!$(this).val().trim()) {
                valid = false;
                $(this).addClass('is-invalid');
            } else {
                $(this).removeClass('is-invalid');
            }
        });
        if (!valid) {
            e.preventDefault();
            alert('Please fill all required fields correctly.');
        }
    });

// Live password match feedback
    $('#confirm_password').on('keyup', function() {
        const pwd = $('#password').val();
        const confirm = $(this).val();
        if (confirm && pwd !== confirm) {
            $(this).addClass('is-invalid');
        } else {
            $(this).removeClass('is-invalid');
        }
    });
});
</script>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: auditor-register.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation