Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/pawn

Free Space:

10.27 TB

🔧 Quick Actions

✏️ Editing: edit-service.php

<?php
// edit-service.php
// Assumes includes/db.php already calls session_start() and defines $conn (mysqli)
require_once('includes/db.php');

// Auth check
if (!isset($_SESSION['user_role'])) {
    header("Location: user-login.php");
    exit();
}

// Simple redirect helper
function redirect_msg($url, $msg, $type = 'success') {
    header("Location: {$url}?msg=" . urlencode($msg) . "&type={$type}");
    exit();
}

// Obtain service id
$service_id = isset($_GET['id']) ? (int)$_GET['id'] : 0;
if ($service_id <= 0) {
    redirect_msg('manage-services.php', 'Invalid service ID.', 'danger');
}

// Fetch service (existing)
$svc_sql = "SELECT * FROM services WHERE id = ? LIMIT 1";
$svc_stmt = mysqli_prepare($conn, $svc_sql);
if (!$svc_stmt) {
    redirect_msg('manage-services.php', 'DB error: ' . mysqli_error($conn), 'danger');
}
mysqli_stmt_bind_param($svc_stmt, "i", $service_id);
mysqli_stmt_execute($svc_stmt);
$svc_res = mysqli_stmt_get_result($svc_stmt);
if (!$svc_res || mysqli_num_rows($svc_res) === 0) {
    mysqli_stmt_close($svc_stmt);
    redirect_msg('manage-services.php', 'Service not found.', 'danger');
}
$service = mysqli_fetch_assoc($svc_res);
mysqli_stmt_close($svc_stmt);

// Load categories (service_categories + categories)
$categories = [];
$cat_sql = "
    SELECT id, category_name FROM service_categories WHERE status = 'active'
    UNION
    SELECT id, category_name FROM categories WHERE status = 'active'
    ORDER BY category_name
";
$cat_res = mysqli_query($conn, $cat_sql);
if ($cat_res) {
    while ($c = mysqli_fetch_assoc($cat_res)) $categories[] = $c;
}

// Default variables for form
$service_name       = $service['service_name'] ?? '';
$category_id_current= (int)($service['category_id'] ?? 0);
$cost_price_current = isset($service['cost_price']) ? (float)$service['cost_price'] : 0.00;
$selling_price_current = isset($service['selling_price']) ? (float)$service['selling_price'] : 0.00;
$duration_current = $service['duration'] ?? '';
$hsn_code_current = $service['hsn_code'] ?? '';
$is_gst_current = isset($service['is_gst_applicable']) ? (int)$service['is_gst_applicable'] : ((float)($service['gst_percentage'] ?? 0) > 0 ? 1 : 0);
$gst_percentage_current = isset($service['gst_percentage']) ? (float)$service['gst_percentage'] : 0.00;
$description_current = $service['description'] ?? '';
$status_current = $service['status'] ?? 'inactive';

$error = null;

// Handle POST update
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_service'])) {
    // Read + sanitize
    $service_name_post     = trim($_POST['service_name'] ?? '');
    $category_id_post      = isset($_POST['category_id']) ? (int)$_POST['category_id'] : 0;
    $cost_price_post       = $_POST['cost_price'] ?? '';
    $selling_price_post    = $_POST['selling_price'] ?? '';
    $duration_post         = trim($_POST['duration'] ?? '');
    $hsn_code_post         = trim($_POST['hsn_code'] ?? '');
    $is_gst_applicable_post= isset($_POST['is_gst_applicable']) ? 1 : 0;
    $gst_percentage_post   = $_POST['gst_percentage'] ?? 0;
    $description_post      = trim($_POST['description'] ?? '');
    $status_post           = in_array($_POST['status'] ?? 'active', ['active','inactive']) ? $_POST['status'] : 'inactive';

// Validate
    $errors = [];
    if ($service_name_post === '') $errors[] = 'Service name is required.';
    if (!is_numeric($cost_price_post) || (float)$cost_price_post < 0) $errors[] = 'Valid cost price is required.';
    if (!is_numeric($selling_price_post) || (float)$selling_price_post < 0) $errors[] = 'Valid selling price is required.';
    if ($category_id_post <= 0) $errors[] = 'Please select a valid category.';

if ($is_gst_applicable_post) {
        if ($hsn_code_post === '') $errors[] = 'HSN code is required when GST is applicable.';
        if (!preg_match('/^\d{4,15}$/', $hsn_code_post)) $errors[] = 'HSN code should be 4-15 digits.';
        if (!is_numeric($gst_percentage_post) || (float)$gst_percentage_post < 0 || (float)$gst_percentage_post > 100) $errors[] = 'GST percentage must be between 0 and 100.';
    } else {
        $gst_percentage_post = 0.00;
        // allow empty HSN when GST not applicable
    }

// Optional: prevent selling < cost (you can allow by removing this)
    if (is_numeric($cost_price_post) && is_numeric($selling_price_post) && (float)$selling_price_post < (float)$cost_price_post) {
        // either warn or add error; here we add a confirm-style error to force deliberate change
        // Convert to a recoverable warning: we'll allow but still warn via session message — but to keep logic strict, add error:
        $errors[] = 'Selling price cannot be less than cost price.';
    }

if (!empty($errors)) {
        $error = implode('<br>', $errors);
        // keep posted values visible in form
        $service_name = $service_name_post;
        $category_id_current = $category_id_post;
        $cost_price_current = (float)$cost_price_post;
        $selling_price_current = (float)$selling_price_post;
        $duration_current = $duration_post;
        $hsn_code_current = $hsn_code_post;
        $is_gst_current = (int)$is_gst_applicable_post;
        $gst_percentage_current = (float)$gst_percentage_post;
        $description_current = $description_post;
        $status_current = $status_post;
    } else {
        // Prepare update statement with correct types and parameters
        $update_sql = "UPDATE services SET 
                service_name = ?,
                cost_price = ?,
                selling_price = ?,
                category_id = ?,
                description = ?,
                duration = ?,
                status = ?,
                hsn_code = ?,
                is_gst_applicable = ?,
                gst_percentage = ?,
                updated_at = NOW()
            WHERE id = ?";

$upd_stmt = mysqli_prepare($conn, $update_sql);
        if (!$upd_stmt) {
            $error = "Failed to prepare update statement: " . mysqli_error($conn);
        } else {
            // Cast variables
            $service_name_val = $service_name_post;
            $cost_price_val = (float)$cost_price_post;
            $selling_price_val = (float)$selling_price_post;
            $category_id_val = (int)$category_id_post;
            $description_val = $description_post;
            $duration_val = $duration_post;
            $status_val = $status_post;
            // if empty string for hsn and gst not applicable, set NULL so DB stores NULL (but mysqli_bind will treat null specially)
            $hsn_val = ($hsn_code_post === '' ? null : $hsn_code_post);
            $is_gst_val = (int)$is_gst_applicable_post;
            $gst_percentage_val = (float)$gst_percentage_post;
            $id_val = (int)$service_id;

// types string must match number of bind vars: 11 parameters
            // order: service_name(s), cost_price(d), selling_price(d), category_id(i),
            // description(s), duration(s), status(s), hsn_code(s), is_gst_applicable(i), gst_percentage(d), id(i)
            $types = "sddissssidi"; // 11 chars; s d d i s s s s i d i

// bind parameters
            // Note: when binding NULL for a string you should still pass null variable; mysqli will bind it as NULL.
            mysqli_stmt_bind_param(
                $upd_stmt,
                $types,
                $service_name_val,
                $cost_price_val,
                $selling_price_val,
                $category_id_val,
                $description_val,
                $duration_val,
                $status_val,
                $hsn_val,
                $is_gst_val,
                $gst_percentage_val,
                $id_val
            );

if (!mysqli_stmt_execute($upd_stmt)) {
                $error = "Failed to update service: " . mysqli_stmt_error($upd_stmt);
                mysqli_stmt_close($upd_stmt);
            } else {
                mysqli_stmt_close($upd_stmt);

// Log the update to service_logs if exists
                $log_check = mysqli_query($conn, "SHOW TABLES LIKE 'service_logs'");
                if ($log_check && mysqli_num_rows($log_check) > 0) {
                    $old_values = [
                        'service_name' => $service['service_name'] ?? null,
                        'cost_price' => $service['cost_price'] ?? null,
                        'selling_price' => $service['selling_price'] ?? null,
                        'category_id' => $service['category_id'] ?? null,
                        'description' => $service['description'] ?? null,
                        'duration' => $service['duration'] ?? null,
                        'status' => $service['status'] ?? null,
                        'hsn_code' => $service['hsn_code'] ?? null,
                        'is_gst_applicable' => $service['is_gst_applicable'] ?? null,
                        'gst_percentage' => $service['gst_percentage'] ?? null
                    ];
                    $new_values = [
                        'service_name' => $service_name_val,
                        'cost_price' => $cost_price_val,
                        'selling_price' => $selling_price_val,
                        'category_id' => $category_id_val,
                        'description' => $description_val,
                        'duration' => $duration_val,
                        'status' => $status_val,
                        'hsn_code' => $hsn_val,
                        'is_gst_applicable' => $is_gst_val,
                        'gst_percentage' => $gst_percentage_val
                    ];
                    $details_json = json_encode([
                        'old_values' => $old_values,
                        'new_values' => $new_values
                    ], JSON_PRETTY_PRINT);

$log_sql = "INSERT INTO service_logs (service_id, action, details, created_at) VALUES (?, 'SERVICE_UPDATED', ?, NOW())";
                    $log_stmt = mysqli_prepare($conn, $log_sql);
                    if ($log_stmt) {
                        mysqli_stmt_bind_param($log_stmt, "is", $service_id, $details_json);
                        mysqli_stmt_execute($log_stmt);
                        mysqli_stmt_close($log_stmt);
                    }
                }

redirect_msg('manage-services.php', "Service updated successfully.", 'success');
            }
        }
    }
}
?>
<!doctype html>
<html lang="en">
<head>
    <?php include('includes/head.php'); ?>
    <style>
    .gst-quick-rates { padding: 8px; background: #f8f9fa; border-radius: 4px; border: 1px solid #dee2e6; }
    .required:after { content: " *"; color: #dc3545; }
    </style>
</head>
<body data-sidebar="dark">
    <?php include('includes/pre-loader.php'); ?>
    <div id="layout-wrapper">
        <?php include('includes/topbar.php'); ?>
        <div class="vertical-menu"><div data-simplebar class="h-100"><?php include('includes/sidebar.php'); ?></div></div>

<div class="main-content">
            <div class="page-content">
                <div class="container-fluid">
                    <div class="row">
                        <div class="col-xl-8">
                            <div class="card">
                                <div class="card-body">
                                    <h4 class="card-title mb-4">Edit Service</h4>

<?php if (!empty($error)): ?>
                                        <div class="alert alert-danger"><?php echo $error; ?></div>
                                    <?php endif; ?>

<div class="mb-3">
                                            <label class="form-label required">Service Name</label>
                                            <input type="text" name="service_name" class="form-control" required value="<?php echo htmlspecialchars($service_name); ?>">
                                        </div>

<div class="row">
                                            <div class="col-md-6 mb-3">
                                                <label class="form-label required">Category</label>
                                                <select name="category_id" class="form-control" required>
                                                    <option value="">-- Select Category --</option>
                                                    <?php foreach ($categories as $c): ?>
                                                        <option value="<?php echo $c['id']; ?>" <?php echo $category_id_current == $c['id'] ? 'selected' : ''; ?>>
                                                            <?php echo htmlspecialchars($c['category_name']); ?>
                                                        </option>
                                                    <?php endforeach; ?>
                                                </select>
                                            </div>

<div class="col-md-3 mb-3">
                                                <label class="form-label required">Cost Price</label>
                                                <div class="input-group">
                                                    <span class="input-group-text">₹</span>
                                                    <input type="number" name="cost_price" step="0.01" min="0" class="form-control" required value="<?php echo number_format($cost_price_current,2,'.',''); ?>">
                                                </div>
                                            </div>

<div class="col-md-3 mb-3">
                                                <label class="form-label required">Selling Price</label>
                                                <div class="input-group">
                                                    <span class="input-group-text">₹</span>
                                                    <input type="number" name="selling_price" step="0.01" min="0" class="form-control" required value="<?php echo number_format($selling_price_current,2,'.',''); ?>">
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-4 mb-3">
                                                <label class="form-label">Duration</label>
                                                <input type="text" name="duration" class="form-control" placeholder="e.g., 30 mins, 1 Hour" value="<?php echo htmlspecialchars($duration_current); ?>">
                                            </div>

<div class="col-md-4 mb-3">
                                                <label class="form-label">Status</label>
                                                <select name="status" class="form-control">
                                                    <option value="active" <?php echo $status_current == 'active' ? 'selected' : ''; ?>>Active</option>
                                                    <option value="inactive" <?php echo $status_current == 'inactive' ? 'selected' : ''; ?>>Inactive</option>
                                                </select>
                                            </div>
                                        </div>

<div class="card mb-3">
                                            <div class="card-body">
                                                <div class="form-check form-switch mb-2">
                                                    <input class="form-check-input" type="checkbox" id="is_gst_applicable" name="is_gst_applicable" value="1" <?php echo $is_gst_current ? 'checked' : ''; ?>>
                                                    <label class="form-check-label" for="is_gst_applicable"><strong>GST Applicable</strong></label>
                                                </div>

<div class="row" id="gstFields" style="<?php echo $is_gst_current ? '' : 'display:none;'; ?>">
                                                    <div class="col-md-6 mb-3">
                                                        <label class="form-label">GST Percentage</label>
                                                        <div class="input-group">
                                                            <input type="number" name="gst_percentage" id="gst_percentage" class="form-control" step="0.01" min="0" max="100" value="<?php echo number_format($gst_percentage_current,2,'.',''); ?>">
                                                            <span class="input-group-text">%</span>
                                                        </div>
                                                    </div>
                                                    <div class="col-md-6 mb-3 d-flex align-items-end">
                                                        <div id="gstQuick" class="gst-quick-rates" style="width:100%;">
                                                            <small class="me-2">Quick rates:</small>
                                                            <?php $quick = [0,5,12,18,28]; foreach($quick as $r): ?>
                                                                <button type="button" class="btn btn-sm btn-outline-secondary me-1 mb-1 gst-rate-btn" data-rate="<?php echo $r; ?>"><?php echo $r; ?>%</button>
                                                            <?php endforeach; ?>
                                                        </div>
                                                    </div>
                                                </div>
                                            </div>
                                        </div>

<div class="mb-3">
                                            <label class="form-label">Description</label>
                                            <textarea name="description" rows="4" class="form-control"><?php echo htmlspecialchars($description_current); ?></textarea>
                                        </div>

<div class="text-center mt-3">
                                            <button type="submit" name="update_service" class="btn btn-primary px-4"><i class="fas fa-save me-2"></i> Update Service</button>
                                            <a href="manage-services.php" class="btn btn-secondary px-4 ms-2"><i class="fas fa-times me-2"></i> Cancel</a>
                                        </div>

</form>
                                </div>
                            </div>
                        </div>

<div class="col-xl-4">
                            <div class="card">
                                <div class="card-body">
                                    <h5 class="card-title">Notes</h5>
                                    <p class="text-muted">Updating cost/selling price will update generated profit fields (if your DB uses generated columns).</p>
                                    <p class="text-muted">If GST is applicable, enter HSN and GST % properly to avoid tax mismatches.</p>
                                </div>
                            </div>
                        </div>
                    </div>

</div>
            </div>

<?php include('includes/footer.php'); ?>
        </div>
    </div>

<?php include('includes/rightbar.php'); ?>
    <?php include('includes/scripts.php'); ?>

gstToggle.addEventListener('change', function() {
        if (this.checked) {
            gstFields.style.display = '';
            if (!gstPercentageInput.value || gstPercentageInput.value == '0') gstPercentageInput.value = '18.00';
        } else {
            gstFields.style.display = 'none';
            gstPercentageInput.value = '0.00';
        }
    });

document.querySelectorAll('.gst-rate-btn').forEach(btn => {
        btn.addEventListener('click', function() {
            gstPercentageInput.value = this.getAttribute('data-rate');
            gstPercentageInput.focus();
        });
    });

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: edit-service.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation