Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/yok

Free Space:

10.27 TB

🔧 Quick Actions

✏️ Editing: add-expense.php

<?php
// ---------- server bootstrap ----------
// Start session FIRST, before any output

include('includes/db.php'); // Include DB before processing

// Check if user is logged in
if (!isset($_SESSION['user_id'])) {
    header("Location: login.php");
    exit();
}

// Get user's role and branch_id
$user_role = $_SESSION['role'] ?? '';
$user_branch_id = $_SESSION['branch_id'] ?? null;

$user_id = $_SESSION['user_id'] ?? null;

$success_msg = '';
$error_msg = '';

// Process form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $date = mysqli_real_escape_string($conn, trim($_POST['date'] ?? ''));
    $category = mysqli_real_escape_string($conn, trim($_POST['category'] ?? ''));
    $description = mysqli_real_escape_string($conn, trim($_POST['description'] ?? ''));
    $amount = floatval($_POST['amount'] ?? 0);
    $notes = mysqli_real_escape_string($conn, trim($_POST['notes'] ?? ''));
    $branch_id = (int)$_POST['branch_id'];
    // Get branch_id based on user role

// Validation
    $errors = [];
    if (empty($date) || !preg_match('/^\d{4}-\d{2}-\d{2}$/', $date)) {
        $errors[] = 'Please enter a valid date (YYYY-MM-DD).';
    }
    if (empty($category)) {
        $errors[] = 'Category is required.';
    }
    if (empty($description)) {
        $errors[] = 'Description is required.';
    }
    if ($amount <= 0) {
        $errors[] = 'Amount must be greater than 0.';
    }

if (empty($errors)) {
        $sql = "INSERT INTO expenses (date, category, description, amount, notes, branch_id) VALUES (?, ?, ?, ?, ?, ?)";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("sssdsi", $date, $category, $description, $amount, $notes, $branch_id);
        if ($stmt->execute()) {
            $success_msg = 'Expense added successfully!';
            // Redirect immediately after success
            header("Location: manage-expenses.php?msg=" . urlencode($success_msg) . "&type=success");
            exit();
        } else {
            $error_msg = 'Error adding expense: ' . $conn->error;
        }
        $stmt->close();
    } else {
        $error_msg = implode('<br>', $errors);
    }
}
?>
<!doctype html>
<html lang="en">
<?php include('includes/head.php'); ?>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
<style>
  .form-card { box-shadow: 0 0 20px rgba(0,0,0,0.1); border-radius: 10px; }
  .form-group { margin-bottom: 1.5rem; }
  .btn-primary { background-color: #1a5fb4; border-color: #1a5fb4; }
  .btn-primary:hover { background-color: #0f4a8a; border-color: #0f4a8a; }
  .branch-info-alert {
    background-color: #e7f3ff;
    border-left: 4px solid #0d6efd;
    margin-bottom: 15px;
  }
</style>
<body data-sidebar="dark">

<?php include('includes/pre-loader.php'); ?>

<div id="layout-wrapper">
<?php include('includes/topbar.php'); ?>
  
  <div class="vertical-menu">
    <div data-simplebar class="h-100">
      <?php include('includes/sidebar.php'); ?>
    </div>
  </div>
  
  
  
  
  <div class="main-content">
    <div class="page-content">
      <div class="container-fluid">
        
        <div class="row mb-4">
          <div class="col-12">
            <div class="d-flex justify-content-between align-items-center">
              <div>

<h4 class="mb-1">Add New Expense</h4>
                <div class="text-muted">Enter details for the new expense</div>
              </div>
              <a href="manage-expenses.php" class="btn btn-secondary">
                <i class="fas fa-arrow-left me-1"></i> Back to Expenses
              </a>
            </div>
          </div>
        </div>

<?php if ($user_role !== 'admin' && $user_branch_id): ?>
          <?php 
          $branch_query = "SELECT branch_name FROM branches WHERE branch_id = ?";
          $branch_stmt = $conn->prepare($branch_query);
          $branch_stmt->bind_param('i', $user_branch_id);
          $branch_stmt->execute();
          $branch_result = $branch_stmt->get_result();
          $branch_row = $branch_result->fetch_assoc();
          $branch_stmt->close();
          ?>
          <?php if ($branch_row): ?>
          <div class="alert alert-info branch-info-alert">
            <i class="fas fa-store-alt me-2"></i>
            <strong>Your Branch:</strong> 
            <?php echo htmlspecialchars($branch_row['branch_name']); ?>
            <span class="badge bg-warning ms-2">Expense will be recorded for your branch</span>
          </div>
          <?php endif; ?>
        <?php endif; ?>

<?php if ($error_msg): ?>
          <div class="alert alert-danger alert-dismissible fade show" role="alert">
            <?php echo $error_msg; ?>
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
          </div>
        <?php endif; ?>

<div class="row justify-content-center">
          <div class="col-xl-8">
            <div class="card form-card">
              <div class="card-body">
                <form method="POST" novalidate>
                  
                  <?php if ($user_role === 'admin'): ?>
                  <div class="row">
                    <div class="col-md-6 form-group">
                      <label for="branch_id" class="form-label">Branch <span class="text-danger">*</span></label>
                      <select id="branch_id" name="branch_id" class="form-control" required>
                        <option value="">-- Select Branch --</option>
                        <?php
                        $branchQuery = "SELECT branch_id, branch_name FROM branches WHERE status = 'active' ORDER BY branch_name ASC";
                        $branchResult = mysqli_query($conn, $branchQuery);
                        if ($branchResult && mysqli_num_rows($branchResult) > 0) {
                            while ($branchRow = mysqli_fetch_assoc($branchResult)) {
                                $selected = (isset($_POST['branch_id']) && $_POST['branch_id'] == $branchRow['branch_id']) ? 'selected' : '';
                                echo "<option value='{$branchRow['branch_id']}' $selected>" . htmlspecialchars($branchRow['branch_name']) . "</option>";
                            }
                        }
                        ?>
                        <option value="0" <?= (isset($_POST['branch_id']) && $_POST['branch_id'] === '0') ? 'selected' : '' ?>>Main (No Branch)</option>
                      </select>
                      <small class="text-muted">Select the branch for this expense</small>
                    </div>
                    <div class="col-md-6 form-group">
                      <label for="date" class="form-label">Date <span class="text-danger">*</span></label>
                      <input type="date" class="form-control" id="date" name="date" required value="<?php echo htmlspecialchars($_POST['date'] ?? date('Y-m-d')); ?>">
                    </div>
                  </div>
                  <?php else: ?>
                    
                    <div class="row">
                      <div class="col-md-6 form-group">
                        <label for="date" class="form-label">Date <span class="text-danger">*</span></label>
                        <input type="date" class="form-control" id="date" name="date" required value="<?php echo htmlspecialchars($_POST['date'] ?? date('Y-m-d')); ?>">
                      </div>
                      <div class="col-md-6 form-group">
                        <label class="form-label">Branch</label>
                        <input type="text" class="form-control bg-light" value="<?php echo htmlspecialchars($branch_row['branch_name'] ?? 'Not assigned'); ?>" readonly>
                        <input type="hidden" name="branch_id" value="<?php echo $user_branch_id; ?>">
                      </div>
                    </div>
                  <?php endif; ?>
                  
                  <div class="row">
                    <div class="col-md-6 form-group">
                      <label for="category" class="form-label">Category <span class="text-danger">*</span></label>
                      <input type="text" class="form-control" id="category" name="category" placeholder="e.g., Utilities, Rent, Supplies" required value="<?php echo htmlspecialchars($_POST['category'] ?? ''); ?>">
                    </div>
                    <div class="col-md-6 form-group">
                      <label for="amount" class="form-label">Amount (₹) <span class="text-danger">*</span></label>
                      <input type="number" class="form-control" id="amount" name="amount" step="0.01" min="0.01" placeholder="0.00" required value="<?php echo htmlspecialchars($_POST['amount'] ?? ''); ?>">
                    </div>
                  </div>
                  
                  <div class="row">
                    <div class="col-md-12 form-group">
                      <label for="description" class="form-label">Description <span class="text-danger">*</span></label>
                      <textarea class="form-control" id="description" name="description" rows="3" placeholder="Brief description of the expense" required><?php echo htmlspecialchars($_POST['description'] ?? ''); ?></textarea>
                    </div>
                  </div>
                  
                  <div class="row">
                    <div class="col-md-12 form-group">
                      <label for="notes" class="form-label">Notes (Optional)</label>
                      <textarea class="form-control" id="notes" name="notes" rows="2" placeholder="Additional notes or details"><?php echo htmlspecialchars($_POST['notes'] ?? ''); ?></textarea>
                    </div>
                  </div>
                  
                  <div class="d-flex justify-content-end gap-2">
                    <a href="manage-expenses.php" class="btn btn-secondary">Cancel</a>
                    <button type="submit" class="btn btn-primary">
                      <i class="fas fa-save me-1"></i> Add Expense
                    </button>
                  </div>
                </form>
              </div>
            </div>
          </div>
        </div>
      </div>
    </div>
    <?php include('includes/footer.php'); ?>
  </div>
</div>
<?php include('includes/rightbar.php'); ?>
<?php include('includes/scripts.php'); ?>
<script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
<script>
// Simple form validation enhancement
$(document).ready(function() {
  $('form').on('submit', function(e) {
    let isValid = true;
    $('[required]').each(function() {
      if (!$(this).val().trim()) {
        isValid = false;
        $(this).addClass('is-invalid');
      } else {
        $(this).removeClass('is-invalid');
      }
    });
    
    // Check amount is greater than 0
    const amount = $('#amount').val();
    if (parseFloat(amount) <= 0) {
      isValid = false;
      $('#amount').addClass('is-invalid');
    }
    
    if (!isValid) {
      e.preventDefault();
      alert('Please fill all required fields correctly.');
    }
  });
});
</script>
</body>
</html>
<?php
// Close connection
if (isset($conn)) {
    mysqli_close($conn);
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: add-expense.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation