Enhanced PHP File Manager

📁 Current Path: 🏠 Root /home/u329947844/domains/hifi11.in/public_html/api

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/api

Free Space:

10.27 TB

🔧 Quick Actions

✏️ Editing: int.php

<?php
header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type, Authorization");

// Database configuration
$servername = "localhost";
$username = "u329947844_ems";
$password = "Hifi11@ems";
$database = "u329947844_ems";

$method = $_SERVER['REQUEST_METHOD'];

// Handle preflight request
if ($method === 'OPTIONS') {
    http_response_code(200);
    exit();
}

// Main API logic
try {
    $conn = getDBConnection();
    
    switch ($method) {
        case 'GET':
            handleGetRequest($conn);
            break;
        case 'POST':
            handlePostRequest($conn);
            break;
        case 'PUT':
            handlePutRequest($conn);
            break;
        case 'DELETE':
            handleDeleteRequest($conn);
            break;
        default:
            http_response_code(405);
            echo json_encode(['error' => 'Method not allowed']);
    }
} catch (PDOException $e) {
    http_response_code(500);
    echo json_encode(['error' => 'Database error: ' . $e->getMessage()]);
} catch (Exception $e) {
    http_response_code(400);
    echo json_encode(['error' => $e->getMessage()]);
}

function handleGetRequest($conn) {
    if (isset($_GET['intern_id'])) {
        // Get single intern by ID
        $intern_id = $_GET['intern_id'];
        $stmt = $conn->prepare("SELECT * FROM interns WHERE intern_id = ?");
        $stmt->execute([$intern_id]);
        $intern = $stmt->fetch(PDO::FETCH_ASSOC);
        
        if ($intern) {
            // Remove sensitive data before returning
            unset($intern['password']);
            echo json_encode($intern);
        } else {
            http_response_code(404);
            echo json_encode(['error' => 'Intern not found']);
        }
    } else {
        // Get all interns
        $status = isset($_GET['status']) ? $_GET['status'] : 'active';
        $stmt = $conn->prepare("SELECT * FROM interns WHERE status = ?");
        $stmt->execute([$status]);
        $interns = $stmt->fetchAll(PDO::FETCH_ASSOC);
        
        // Remove sensitive data from each intern record
        foreach ($interns as &$intern) {
            unset($intern['password']);
        }
        
        echo json_encode($interns);
    }
}

function handlePostRequest($conn) {
    $data = json_decode(file_get_contents('php://input'), true);
    
    if (!$data) {
        throw new Exception('Invalid input data');
    }
    
    // Validate required fields
    $required = ['intern_id', 'name', 'dob', 'email', 'phone', 'address', 'role'];
    foreach ($required as $field) {
        if (empty($data[$field])) {
            throw new Exception("Missing required field: $field");
        }
    }
    
    // Validate email format
    if (!filter_var($data['email'], FILTER_VALIDATE_EMAIL)) {
        throw new Exception("Invalid email format");
    }
    
    // Check if intern_id already exists
    $stmt = $conn->prepare("SELECT COUNT(*) FROM interns WHERE intern_id = ?");
    $stmt->execute([$data['intern_id']]);
    if ($stmt->fetchColumn() > 0) {
        throw new Exception("Intern ID already exists");
    }
    
    // Hash password if provided, otherwise set default
    if (isset($data['password'])) {
        $data['password'] = password_hash($data['password'], PASSWORD_DEFAULT);
    } else {
        $data['password'] = password_hash('default123', PASSWORD_DEFAULT);
    }
    
    // Set default status if not provided
    if (!isset($data['status'])) {
        $data['status'] = 'active';
    }
    
    // Prepare SQL query
    $fields = array_keys($data);
    $values = array_values($data);
    $placeholders = str_repeat('?,', count($fields) - 1) . '?';
    
    $sql = "INSERT INTO interns (" . implode(',', $fields) . ") VALUES ($placeholders)";
    $stmt = $conn->prepare($sql);
    $stmt->execute($values);
    
    http_response_code(201);
    echo json_encode([
        'message' => 'Intern created successfully',
        'intern_id' => $data['intern_id'],
        'status' => $data['status']
    ]);
}

function handlePutRequest($conn) {
    if (!isset($_GET['intern_id'])) {
        throw new Exception('Intern ID required for update');
    }
    
    $intern_id = $_GET['intern_id'];
    $data = json_decode(file_get_contents('php://input'), true);
    
    if (!$data) {
        throw new Exception('Invalid input data');
    }
    
    // Don't allow updating intern_id
    if (isset($data['intern_id'])) {
        unset($data['intern_id']);
    }
    
    // Validate email format if provided
    if (isset($data['email']) && !filter_var($data['email'], FILTER_VALIDATE_EMAIL)) {
        throw new Exception("Invalid email format");
    }
    
    // Hash password if provided
    if (isset($data['password'])) {
        $data['password'] = password_hash($data['password'], PASSWORD_DEFAULT);
    }
    
    // Prepare SQL query
    $setClause = '';
    $values = [];
    foreach ($data as $field => $value) {
        $setClause .= "$field = ?, ";
        $values[] = $value;
    }
    $setClause = rtrim($setClause, ', ');
    $values[] = $intern_id;
    
    $sql = "UPDATE interns SET $setClause WHERE intern_id = ?";
    $stmt = $conn->prepare($sql);
    $stmt->execute($values);
    
    if ($stmt->rowCount() > 0) {
        echo json_encode(['message' => 'Intern updated successfully']);
    } else {
        http_response_code(404);
        echo json_encode(['error' => 'Intern not found or no changes made']);
    }
}

function handleDeleteRequest($conn) {
    if (!isset($_GET['intern_id'])) {
        throw new Exception('Intern ID required for deletion');
    }
    
    $intern_id = $_GET['intern_id'];
    
    // Soft delete (update status)
    $stmt = $conn->prepare("UPDATE interns SET status = 'inactive' WHERE intern_id = ?");
    $stmt->execute([$intern_id]);
    
    if ($stmt->rowCount() > 0) {
        echo json_encode(['message' => 'Intern marked as inactive']);
    } else {
        http_response_code(404);
        echo json_encode(['error' => 'Intern not found']);
    }
}

function getDBConnection() {
    global $servername, $username, $password, $database;
    
    $dsn = "mysql:host=$servername;dbname=$database;charset=utf8mb4";
    $options = [
        PDO::ATTR_ERRMODE            => PDO::ERRMODE_EXCEPTION,
        PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
        PDO::ATTR_EMULATE_PREPARES   => false,
    ];
    
    try {
        return new PDO($dsn, $username, $password, $options);
    } catch (PDOException $e) {
        throw new Exception("Database connection failed: " . $e->getMessage());
    }
}
?>

❌ Cancel