Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/vkmobiles/admin

Free Space:

10.28 TB

🔧 Quick Actions

✏️ Editing: staff-add.php

<?php
// Include database connection
include('includes/db.php');

// Initialize variables
$success = '';
$error = '';
$staff_data = [];

// Handle form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Get form data
    $name = trim($_POST['name']);
    $email = trim($_POST['email']);
    $phone = trim($_POST['phone']);
    $role = $_POST['role'];
    $department = trim($_POST['department']);
    $salary = $_POST['salary'];
    $joining_date = $_POST['joining_date'];
    $address = trim($_POST['address']);
    $city = trim($_POST['city']);
    $state = trim($_POST['state']);
    $pincode = trim($_POST['pincode']);
    $username = trim($_POST['username']);
    $password = $_POST['password'];
    $confirm_password = $_POST['confirm_password'];
    $status = $_POST['status'];
    
    // Validate required fields
    if (empty($name) || empty($email) || empty($phone) || empty($role) || empty($username) || empty($password)) {
        $error = "Please fill in all required fields.";
    } elseif ($password !== $confirm_password) {
        $error = "Passwords do not match.";
    } elseif (strlen($password) < 6) {
        $error = "Password must be at least 6 characters long.";
    } else {
        // Check if email already exists
        $check_email_sql = "SELECT id FROM staff WHERE email = ?";
        $check_stmt = $conn->prepare($check_email_sql);
        $check_stmt->bind_param("s", $email);
        $check_stmt->execute();
        $check_result = $check_stmt->get_result();
        
        if ($check_result->num_rows > 0) {
            $error = "Email address already exists. Please use a different email.";
        } else {
            // Check if username already exists
            $check_username_sql = "SELECT id FROM staff WHERE username = ?";
            $check_username_stmt = $conn->prepare($check_username_sql);
            $check_username_stmt->bind_param("s", $username);
            $check_username_stmt->execute();
            $check_username_result = $check_username_stmt->get_result();
            
            if ($check_username_result->num_rows > 0) {
                $error = "Username already exists. Please choose a different username.";
            } else {
                // Hash password
                $hashed_password = password_hash($password, PASSWORD_DEFAULT);
                
                // Generate staff ID
                $staff_prefix = '';
                switch($role) {
                    case 'sales': $staff_prefix = 'SAL'; break;
                    case 'manager': $staff_prefix = 'MGR'; break;
                    case 'auditor': $staff_prefix = 'AUD'; break;
                    case 'admin': $staff_prefix = 'ADM'; break;
                    default: $staff_prefix = 'STF';
                }
                
                $staff_id = $staff_prefix . date('Ym') . str_pad(rand(1, 999), 3, '0', STR_PAD_LEFT);
                
                // Insert staff member
                $insert_sql = "INSERT INTO staff (
                    staff_id, name, email, phone, role, department, salary, 
                    joining_date, address, city, state, pincode, username, 
                    password, status, created_at
                ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NOW())";
                
                $insert_stmt = $conn->prepare($insert_sql);
                $insert_stmt->bind_param(
                    "ssssssdssssssss", 
                    $staff_id, $name, $email, $phone, $role, $department, $salary,
                    $joining_date, $address, $city, $state, $pincode, $username,
                    $hashed_password, $status
                );
                
                if ($insert_stmt->execute()) {
                    $success = "Staff member added successfully! Staff ID: " . $staff_id;
                    
                    // Clear form data
                    $staff_data = [];
                } else {
                    $error = "Error adding staff member: " . $conn->error;
                }
                
                $insert_stmt->close();
            }
            $check_username_stmt->close();
        }
        $check_stmt->close();
    }
    
    // Store form data for repopulation
    $staff_data = $_POST;
}
?>

<!doctype html>
<html lang="en">

<?php include('includes/head.php')?>

<?php include('includes/pre-loader.php')?>

<div id="layout-wrapper">

<?php include('includes/topbar.php')?>

<div class="vertical-menu">

<?php include('includes/sidebar.php')?>
            
        </div>
    </div>

<div class="main-content">
        <div class="page-content">
           
            <div class="container-fluid">

<?php if ($success): ?>
                <div class="row">
                    <div class="col-12">
                        <div class="alert alert-success alert-dismissible fade show" role="alert">
                            <i class="fas fa-check-circle me-2"></i>
                            <?php echo $success; ?>
                            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                        </div>
                    </div>
                </div>
                <?php endif; ?>

<?php if ($error): ?>
                <div class="row">
                    <div class="col-12">
                        <div class="alert alert-danger alert-dismissible fade show" role="alert">
                            <i class="fas fa-exclamation-triangle me-2"></i>
                            <?php echo $error; ?>
                            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                        </div>
                    </div>
                </div>
                <?php endif; ?>

<div class="row">
                    <div class="col-lg-12">
                        <div class="card">
                            <div class="card-header">
                                <h5 class="card-title mb-0">Staff Information</h5>
                                <p class="text-muted mb-0">Fill in the details to add a new staff member</p>
                            </div>
                            <div class="card-body">
                                <form method="POST" id="staffForm">
                                    <div class="row">
                                        
                                        <div class="col-md-6">
                                            <h6 class="mb-3 text-primary">Personal Information</h6>
                                            
                                            <div class="mb-3">
                                                <label for="name" class="form-label">Full Name <span class="text-danger">*</span></label>
                                                <input type="text" class="form-control" id="name" name="name" 
                                                       value="<?php echo htmlspecialchars($staff_data['name'] ?? ''); ?>" 
                                                       required placeholder="Enter full name">
                                            </div>

<div class="mb-3">
                                                <label for="email" class="form-label">Email Address <span class="text-danger">*</span></label>
                                                <input type="email" class="form-control" id="email" name="email" 
                                                       value="<?php echo htmlspecialchars($staff_data['email'] ?? ''); ?>" 
                                                       required placeholder="Enter email address">
                                            </div>

<div class="mb-3">
                                                <label for="phone" class="form-label">Phone Number <span class="text-danger">*</span></label>
                                                <input type="tel" class="form-control" id="phone" name="phone" 
                                                       value="<?php echo htmlspecialchars($staff_data['phone'] ?? ''); ?>" 
                                                       required placeholder="Enter phone number">
                                            </div>

<div class="mb-3">
                                                <label for="address" class="form-label">Address</label>
                                                <textarea class="form-control" id="address" name="address" 
                                                          rows="2" placeholder="Enter full address"><?php echo htmlspecialchars($staff_data['address'] ?? ''); ?></textarea>
                                            </div>

<div class="row">
                                                <div class="col-md-6">
                                                    <div class="mb-3">
                                                        <label for="city" class="form-label">City</label>
                                                        <input type="text" class="form-control" id="city" name="city" 
                                                               value="<?php echo htmlspecialchars($staff_data['city'] ?? ''); ?>" 
                                                               placeholder="Enter city">
                                                    </div>
                                                </div>
                                                <div class="col-md-6">
                                                    <div class="mb-3">
                                                        <label for="state" class="form-label">State</label>
                                                        <input type="text" class="form-control" id="state" name="state" 
                                                               value="<?php echo htmlspecialchars($staff_data['state'] ?? ''); ?>" 
                                                               placeholder="Enter state">
                                                    </div>
                                                </div>
                                            </div>

<div class="mb-3">
                                                <label for="pincode" class="form-label">PIN Code</label>
                                                <input type="text" class="form-control" id="pincode" name="pincode" 
                                                       value="<?php echo htmlspecialchars($staff_data['pincode'] ?? ''); ?>" 
                                                       placeholder="Enter PIN code">
                                            </div>
                                        </div>

<div class="col-md-6">
                                            <h6 class="mb-3 text-primary">Professional Information</h6>
                                            
                                            <div class="mb-3">
                                                <label for="role" class="form-label">Role <span class="text-danger">*</span></label>
                                                <select class="form-select" id="role" name="role" required>
                                                    <option value="">Select Role</option>
                                                    <option value="sales" <?php echo ($staff_data['role'] ?? '') === 'sales' ? 'selected' : ''; ?>>Sales Executive</option>
                                                    <option value="manager" <?php echo ($staff_data['role'] ?? '') === 'manager' ? 'selected' : ''; ?>>Manager</option>
                                                    <option value="auditor" <?php echo ($staff_data['role'] ?? '') === 'auditor' ? 'selected' : ''; ?>>Auditor</option>
                                                    <option value="admin" <?php echo ($staff_data['role'] ?? '') === 'admin' ? 'selected' : ''; ?>>Administrator</option>
                                                </select>
                                            </div>

<div class="mb-3">
                                                <label for="department" class="form-label">Department</label>
                                                <input type="text" class="form-control" id="department" name="department" 
                                                       value="<?php echo htmlspecialchars($staff_data['department'] ?? ''); ?>" 
                                                       placeholder="Enter department">
                                            </div>

<div class="mb-3">
                                                <label for="salary" class="form-label">Salary (₹)</label>
                                                <input type="number" class="form-control" id="salary" name="salary" 
                                                       value="<?php echo htmlspecialchars($staff_data['salary'] ?? ''); ?>" 
                                                       step="0.01" min="0" placeholder="Enter salary">
                                            </div>

<div class="mb-3">
                                                <label for="joining_date" class="form-label">Joining Date</label>
                                                <input type="date" class="form-control" id="joining_date" name="joining_date" 
                                                       value="<?php echo htmlspecialchars($staff_data['joining_date'] ?? date('Y-m-d')); ?>">
                                            </div>

<div class="mb-3">
                                                <label for="status" class="form-label">Status</label>
                                                <select class="form-select" id="status1" name="status">
                                                    <option value="active" <?php echo ($staff_data['status'] ?? 'active') === 'active' ? 'selected' : ''; ?>>Active</option>
                                                    <option value="inactive" <?php echo ($staff_data['status'] ?? '') === 'inactive' ? 'selected' : ''; ?>>Inactive</option>
                                                    <option value="suspended" <?php echo ($staff_data['status'] ?? '') === 'suspended' ? 'selected' : ''; ?>>Suspended</option>
                                                </select>
                                            </div>

<h6 class="mb-3 text-primary">Login Credentials</h6>

<div class="mb-3">
                                                <label for="username" class="form-label">Username <span class="text-danger">*</span></label>
                                                <input type="text" class="form-control" id="username" name="username" 
                                                       value="<?php echo htmlspecialchars($staff_data['username'] ?? ''); ?>" 
                                                       required placeholder="Choose username">
                                                <div class="form-text">Username must be unique.</div>
                                            </div>

<div class="mb-3">
                                                <label for="password" class="form-label">Password <span class="text-danger">*</span></label>
                                                <input type="password" class="form-control" id="password" name="password" 
                                                       required placeholder="Enter password" minlength="6">
                                                <div class="form-text">Password must be at least 6 characters long.</div>
                                            </div>

<div class="mb-3">
                                                <label for="confirm_password" class="form-label">Confirm Password <span class="text-danger">*</span></label>
                                                <input type="password" class="form-control" id="confirm_password" name="confirm_password" 
                                                       required placeholder="Confirm password">
                                            </div>
                                        </div>
                                    </div>

<div class="row mt-4">
                                        <div class="col-12">
                                            <div class="card bg-light">
                                                <div class="card-header">
                                                    <h6 class="card-title mb-0">Role Permissions Overview</h6>
                                                </div>
                                                <div class="card-body">
                                                    <div class="row" id="rolePermissions">
                                                        
                                                        <div class="col-12 text-center text-muted">
                                                            Select a role to view permissions
                                                        </div>
                                                    </div>
                                                </div>
                                            </div>
                                        </div>
                                    </div>

<div class="row mt-4">
                                        <div class="col-12">
                                            <div class="d-flex justify-content-between">
                                                <a href="staff-list.php" class="btn btn-secondary">
                                                    <i class="fas fa-arrow-left me-2"></i>Back to List
                                                </a>
                                                <div>
                                                    <button type="reset" class="btn btn-light me-2">
                                                        <i class="fas fa-redo me-2"></i>Reset
                                                    </button>
                                                    <button type="submit" class="btn btn-primary">
                                                        <i class="fas fa-save me-2"></i>Add Staff Member
                                                    </button>
                                                </div>
                                            </div>
                                        </div>
                                    </div>
                                </form>
                            </div>
                        </div>
                    </div>
                </div>

</div>
            
        </div>

<?php include('includes/footer.php')?>
    </div>

</div>

<?php include('includes/rightbar.php')?>

<?php include('includes/scripts.php')?>

// Role permissions data
    const rolePermissionsData = {
        'sales': {
            title: 'Sales Executive Permissions',
            permissions: [
                'Create and manage sales orders',
                'View product catalog and inventory',
                'Process customer payments',
                'Generate sales invoices',
                'View customer information',
                'Access sales reports',
                'Update sales records'
            ],
            restrictions: [
                'Cannot modify product prices',
                'Cannot access financial reports',
                'Cannot manage staff accounts',
                'Cannot modify system settings'
            ]
        },
        'manager': {
            title: 'Manager Permissions',
            permissions: [
                'Full sales management access',
                'View all financial reports',
                'Manage staff schedules',
                'Approve sales discounts',
                'Access inventory management',
                'View GST and tax reports',
                'Generate business analytics',
                'Manage customer accounts'
            ],
            restrictions: [
                'Cannot modify system settings',
                'Cannot create administrator accounts',
                'Cannot access audit logs'
            ]
        },
        'auditor': {
            title: 'Auditor Permissions',
            permissions: [
                'View all financial transactions',
                'Access GST filing reports',
                'Audit sales and purchase records',
                'Generate compliance reports',
                'View audit trails',
                'Access all business reports',
                'Verify tax calculations'
            ],
            restrictions: [
                'Cannot modify any records',
                'Cannot process transactions',
                'Cannot manage staff',
                'Read-only access to all data'
            ]
        },
        'admin': {
            title: 'Administrator Permissions',
            permissions: [
                'Full system access',
                'Manage all staff accounts',
                'Configure system settings',
                'Access all reports and analytics',
                'Manage product catalog',
                'Handle GST configurations',
                'Backup and restore data',
                'System maintenance tasks'
            ],
            restrictions: [
                'No restrictions - Full access',
                'Can modify all system settings',
                'Can manage all user accounts'
            ]
        }
    };

// Update role permissions display
    function updateRolePermissions(role) {
        if (role && rolePermissionsData[role]) {
            const data = rolePermissionsData[role];
            
            rolePermissions.innerHTML = `
                <div class="col-md-6">
                    <h6 class="text-success mb-3">Permissions</h6>
                    <ul class="list-unstyled">
                        ${data.permissions.map(permission => `
                            <li class="mb-2">
                                <i class="fas fa-check-circle text-success me-2"></i>
                                ${permission}
                            </li>
                        `).join('')}
                    </ul>
                </div>
                <div class="col-md-6">
                    <h6 class="text-danger mb-3">Restrictions</h6>
                    <ul class="list-unstyled">
                        ${data.restrictions.map(restriction => `
                            <li class="mb-2">
                                <i class="fas fa-times-circle text-danger me-2"></i>
                                ${restriction}
                            </li>
                        `).join('')}
                    </ul>
                </div>
            `;
        } else {
            rolePermissions.innerHTML = `
                <div class="col-12 text-center text-muted">
                    <i class="fas fa-info-circle fa-2x mb-2"></i>
                    <p>Select a role to view permissions and restrictions</p>
                </div>
            `;
        }
    }

// Event listener for role change
    if (roleSelect) {
        roleSelect.addEventListener('change', function() {
            updateRolePermissions(this.value);
        });

// Initialize permissions display
        updateRolePermissions(roleSelect.value);
    }

// Password confirmation validation
    if (password && confirmPassword) {
        function validatePassword() {
            if (password.value !== confirmPassword.value) {
                confirmPassword.setCustomValidity("Passwords do not match");
            } else {
                confirmPassword.setCustomValidity("");
            }
        }

password.addEventListener('change', validatePassword);
        confirmPassword.addEventListener('keyup', validatePassword);
    }

// Auto-generate username from email
    const emailInput = document.getElementById('email');
    const usernameInput = document.getElementById('username');

if (emailInput && usernameInput) {
        emailInput.addEventListener('blur', function() {
            if (!usernameInput.value) {
                const email = this.value;
                const username = email.split('@')[0]; // Get part before @
                usernameInput.value = username.toLowerCase().replace(/[^a-z0-9]/g, '');
            }
        });
    }

// Auto-set department based on role
    if (roleSelect) {
        const departmentInput = document.getElementById('department');
        
        roleSelect.addEventListener('change', function() {
            if (!departmentInput.value) {
                const roleDepartments = {
                    'sales': 'Sales Department',
                    'manager': 'Management',
                    'auditor': 'Audit Department',
                    'admin': 'Administration'
                };
                
                if (roleDepartments[this.value]) {
                    departmentInput.value = roleDepartments[this.value];
                }
            }
        });
    }

// Form submission confirmation
    if (staffForm) {
        staffForm.addEventListener('submit', function(e) {
            const passwordValue = password.value;
            const confirmPasswordValue = confirmPassword.value;
            
            if (passwordValue !== confirmPasswordValue) {
                e.preventDefault();
                alert('Passwords do not match. Please check your password confirmation.');
                confirmPassword.focus();
                return false;
            }
            
            if (passwordValue.length < 6) {
                e.preventDefault();
                alert('Password must be at least 6 characters long.');
                password.focus();
                return false;
            }
            
            return true;
        });
    }
});

// Phone number formatting
function formatPhoneNumber(input) {
    // Remove all non-digits
    let phone = input.value.replace(/\D/g, '');
    
    // Format as Indian phone number
    if (phone.length <= 10) {
        if (phone.length > 6) {
            phone = phone.replace(/(\d{5})(\d+)/, '$1-$2');
        } else if (phone.length > 5) {
            phone = phone.replace(/(\d{5})(\d+)/, '$1-$2');
        }
        if (phone.length > 3) {
            phone = phone.replace(/(\d{3})(\d+)/, '$1-$2');
        }
    }
    
    input.value = phone;
}
</script>

</body>
</html>

<?php
// Close database connection
$conn->close();
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: staff-add.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation