Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/yok

Free Space:

10.28 TB

🔧 Quick Actions

✏️ Editing: manage-auditors.php

<?php
include('includes/db.php'); // session_start() is safely inside db.php

// === SECURITY: Must be logged in as admin (auditor_id = 1) ===
$auditor_id = $_SESSION['auditor_id'] ?? null;

$success_msg = $error_msg = '';

// === HANDLE POST ACTIONS ===
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action'])) {
    $action      = $_POST['action'];
    $target_id   = (int)($_POST['auditor_id'] ?? 0);

if ($target_id <= 0 || $target_id == $auditor_id) {
        $error_msg = 'Invalid or protected auditor ID.';
    } else {
        switch ($action) {
            case 'delete':
                $stmt = $conn->prepare("DELETE FROM auditors WHERE id = ?");
                $stmt->bind_param('i', $target_id);
                if ($stmt->execute()) {
                    logAudit($conn, $auditor_id, 'AUDITOR_DELETE', 'auditors', $target_id);
                    $success_msg = 'Auditor deleted successfully.';
                } else {
                    $error_msg = 'Failed to delete auditor.';
                }
                $stmt->close();
                break;

case 'toggle_status':
                $stmt = $conn->prepare("UPDATE auditors SET is_active = NOT is_active WHERE id = ?");
                $stmt->bind_param('i', $target_id);
                if ($stmt->execute()) {
                    $res = $conn->query("SELECT is_active FROM auditors WHERE id = $target_id");
                    $status = $res->fetch_assoc()['is_active'] ?? 0;
                    logAudit($conn, $auditor_id, 'AUDITOR_STATUS_CHANGE', 'auditors', $target_id, $status ? 'ACTIVE' : 'INACTIVE');
                    $success_msg = 'Status updated.';
                }
                $stmt->close();
                break;

case 'reset_password':
                $temp_hash = password_hash('TempP@ss123!', PASSWORD_DEFAULT);
                $stmt = $conn->prepare("UPDATE auditors SET password_hash = ? WHERE id = ?");
                $stmt->bind_param('si', $temp_hash, $target_id);
                if ($stmt->execute()) {
                    logAudit($conn, $auditor_id, 'AUDITOR_PASSWORD_RESET', 'auditors', $target_id);
                    $success_msg = 'Password reset to: <strong>TempP@ss123!</strong>';
                }
                $stmt->close();
                break;
        }
    }
}

// === FETCH ALL AUDITORS ===
$auditors = [];
$result = $conn->query("
    SELECT id, username, full_name, email, is_active, last_login, created_at 
    FROM auditors 
    ORDER BY created_at DESC
");
while ($row = $result->fetch_assoc()) {
    $auditors[] = $row;
}

// === AUDIT LOG FUNCTION (supports NULL auditor_id) ===
function logAudit($conn, $actor_id, $action, $table = null, $record_id = null, $details = null) {
    $stmt = $conn->prepare(
        "INSERT INTO audit_logs 
         (auditor_id, action, table_name, record_id, details, ip_address, user_agent)
         VALUES (?, ?, ?, ?, ?, ?, ?)"
    );
    $ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
    $ua = $_SERVER['HTTP_USER_AGENT'] ?? 'unknown';
    $stmt->bind_param('isssiss', $actor_id, $action, $table, $record_id, $details, $ip, $ua);
    $stmt->execute();
    $stmt->close();
}
?>
<!doctype html>
<html lang="en">
<?php include('includes/head.php'); ?>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
<style>
  .table-actions .btn { font-size: 0.875rem; padding: 0.25rem 0.5rem; }
  .badge-active { background-color: #28a745; color: white; }
  .badge-inactive { background-color: #dc3545; color: white; }
  .card { box-shadow: 0 0 20px rgba(0,0,0,0.1); border-radius: 10px; }
</style>
<body data-sidebar="dark">
<?php include('includes/pre-loader.php'); ?>
<div id="layout-wrapper">
    <?php include('includes/topbar.php'); ?>

<div class="vertical-menu">
        <div data-simplebar class="h-100">
            <?php include('includes/sidebar.php'); ?>
        </div>
    </div>

<div class="main-content">
        <div class="page-content">
            <div class="container-fluid">

<div class="row mb-4">
                    <div class="col-12">
                        <div class="d-flex justify-content-between align-items-center">
                            <div>
                                <h4 class="mb-1">Manage Auditors</h4>
                                <div class="text-muted">Administer auditor accounts</div>
                            </div>
                            <a href="auditor-register.php" class="btn btn-primary">
                                <i class="fas fa-user-plus me-1"></i> Add New Auditor
                            </a>
                        </div>
                    </div>
                </div>

<?php if ($success_msg): ?>
                    <div class="alert alert-success alert-dismissible fade show" role="alert">
                        <?php echo $success_msg; ?>
                        <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
                    </div>
                <?php endif; ?>
                <?php if ($error_msg): ?>
                    <div class="alert alert-danger alert-dismissible fade show" role="alert">
                        <?php echo $error_msg; ?>
                        <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
                    </div>
                <?php endif; ?>

<div class="card">
                    <div class="card-body">
                        <div class="table-responsive">
                            <table class="table table-hover align-middle">
                                <thead class="table-light">
                                    <tr>
                                        <th>ID</th>
                                        <th>Username</th>
                                        <th>Full Name</th>
                                        <th>Email</th>
                                        <th>Status</th>
                                        <th>Last Login</th>
                                        <th>Created</th>
                                        <th class="text-center">Actions</th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php foreach ($auditors as $a): ?>
                                    <tr>
                                        <td><?php echo $a['id']; ?></td>
                                        <td><strong><?php echo htmlspecialchars($a['username']); ?></strong></td>
                                        <td><?php echo htmlspecialchars($a['full_name'] ?: '-'); ?></td>
                                        <td><?php echo htmlspecialchars($a['email'] ?: '-'); ?></td>
                                        <td>
                                            <span class="badge <?php echo $a['is_active'] ? 'badge-active' : 'badge-inactive'; ?>">
                                                <?php echo $a['is_active'] ? 'Active' : 'Inactive'; ?>
                                            </span>
                                        </td>
                                        <td><?php echo $a['last_login'] ? date('d M Y H:i', strtotime($a['last_login'])) : 'Never'; ?></td>
                                        <td><?php echo date('d M Y', strtotime($a['created_at'])); ?></td>
                                        <td class="text-center table-actions">
                                            <?php if ($a['id'] != $auditor_id): ?>
                                                
                                                <form method="POST" class="d-inline" onsubmit="return confirm('Toggle status?');">
                                                    <input type="hidden" name="action" value="toggle_status">
                                                    <input type="hidden" name="auditor_id" value="<?php echo $a['id']; ?>">
                                                    <button type="submit" class="btn btn-sm btn-outline-warning" title="Toggle Status">
                                                        <i class="fas fa-power-off"></i>
                                                    </button>
                                                </form>

<form method="POST" class="d-inline" onsubmit="return confirm('Reset password?');">
                                                    <input type="hidden" name="action" value="reset_password">
                                                    <input type="hidden" name="auditor_id" value="<?php echo $a['id']; ?>">
                                                    <button type="submit" class="btn btn-sm btn-outline-info" title="Reset Password">
                                                        <i class="fas fa-key"></i>
                                                    </button>
                                                </form>

<form method="POST" class="d-inline" onsubmit="return confirm('PERMANENTLY DELETE this auditor?');">
                                                    <input type="hidden" name="action" value="delete">
                                                    <input type="hidden" name="auditor_id" value="<?php echo $a['id']; ?>">
                                                    <button type="submit" class="btn btn-sm btn-outline-danger" title="Delete">
                                                        <i class="fas fa-trash"></i>
                                                    </button>
                                                </form>
                                            <?php else: ?>
                                                <span class="text-muted">You</span>
                                            <?php endif; ?>
                                        </td>
                                    </tr>
                                    <?php endforeach; ?>
                                    <?php if (empty($auditors)): ?>
                                    <tr><td colspan="8" class="text-center text-muted">No auditors found.</td></tr>
                                    <?php endif; ?>
                                </tbody>
                            </table>
                        </div>
                    </div>
                </div>

</div>
        </div>
        <?php include('includes/footer.php'); ?>
    </div>
</div>

<?php include('includes/rightbar.php'); ?>
<?php include('includes/scripts.php'); ?>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: manage-auditors.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation