Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/college/store/admin

Free Space:

10.18 TB

🔧 Quick Actions

✏️ Editing: add-point.php

<?php
// admin/add-point.php - Add points and images to specific course
session_start();
require_once __DIR__ . '/includes/db.php';

// Get database connection
$mysqli = db();

// CSRF token
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

// Helper functions
function h($v) { 
    return htmlspecialchars($v ?? '', ENT_QUOTES, 'UTF-8'); 
}

function slugify($text) {
    $text = strtolower(trim($text));
    $text = preg_replace('~[^\pL\d]+~u', '-', $text);
    $text = preg_replace('~^-+|-+$~', '', $text);
    $text = preg_replace('~-+~', '-', $text);
    return $text ?: uniqid('course-');
}

function ensure_dir($dir) {
    if (!is_dir($dir)) {
        @mkdir($dir, 0775, true);
    }
}

// Get all active courses for dropdown
$courses = [];
$result = $mysqli->query("SELECT id, name FROM courses WHERE status = 'active' ORDER BY name");
if ($result) {
    while ($row = $result->fetch_assoc()) {
        $courses[$row['id']] = $row['name'];
    }
    $result->free();
}

// Initialize variables
$errors = [];
$success = null;
$selected_course_id = 0;
$course_data = null;
$course_points = [];
$course_images = [];

// Handle course selection
if (isset($_GET['course_id'])) {
    $selected_course_id = (int)$_GET['course_id'];
    
    // Get course details
    $stmt = $mysqli->prepare("SELECT id, name, page_title, page_description, page_image, header_image, content_html FROM courses WHERE id = ?");
    $stmt->bind_param('i', $selected_course_id);
    $stmt->execute();
    $result = $stmt->get_result();
    $course_data = $result->fetch_assoc();
    $stmt->close();
    
    if ($course_data) {
        // Get existing points
        $points_stmt = $mysqli->prepare("SELECT id, point_text, sort_order FROM course_points WHERE course_id = ? ORDER BY sort_order, id");
        $points_stmt->bind_param('i', $selected_course_id);
        $points_stmt->execute();
        $points_result = $points_stmt->get_result();
        while ($row = $points_result->fetch_assoc()) {
            $course_points[] = $row;
        }
        $points_stmt->close();
        
        // Get existing images
        $images_stmt = $mysqli->prepare("SELECT id, image_path, sort_order FROM course_images WHERE course_id = ? ORDER BY sort_order, id");
        $images_stmt->bind_param('i', $selected_course_id);
        $images_stmt->execute();
        $images_result = $images_stmt->get_result();
        while ($row = $images_result->fetch_assoc()) {
            $course_images[] = $row;
        }
        $images_stmt->close();
    }
}

// Handle form submissions
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // CSRF check
    if (!isset($_POST['csrf_token']) || !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
        $errors[] = 'Invalid form token. Please refresh and try again.';
    }
    
    $action = $_POST['action'] ?? '';
    $selected_course_id = (int)($_POST['course_id'] ?? 0);
    
    if ($selected_course_id <= 0) {
        $errors[] = 'Please select a course.';
    }
    
    if (empty($errors)) {
        try {
            // Handle page details update
            if ($action === 'update_page') {
                $page_title = trim($_POST['page_title'] ?? '');
                $page_description = trim($_POST['page_description'] ?? '');
                $content_html = trim($_POST['content_html'] ?? '');
                
                $stmt = $mysqli->prepare("UPDATE courses SET page_title = ?, page_description = ?, content_html = ? WHERE id = ?");
                $stmt->bind_param('sssi', $page_title, $page_description, $content_html, $selected_course_id);
                
                if ($stmt->execute()) {
                    $success = 'Page details updated successfully!';
                }
                $stmt->close();
            }
            
            // Handle point addition
            elseif ($action === 'add_point') {
                $point_text = trim($_POST['point_text'] ?? '');
                
                if (!empty($point_text)) {
                    $stmt = $mysqli->prepare("INSERT INTO course_points (course_id, point_text, sort_order) VALUES (?, ?, ?)");
                    $sort_order = count($course_points) + 1;
                    $stmt->bind_param('isi', $selected_course_id, $point_text, $sort_order);
                    
                    if ($stmt->execute()) {
                        $success = 'Point added successfully!';
                    }
                    $stmt->close();
                }
            }
            
            // Handle image upload
            elseif ($action === 'add_image') {
                if (isset($_FILES['course_image']) && $_FILES['course_image']['error'] === UPLOAD_ERR_OK) {
                    $upload_dir = 'uploads/courses/' . $selected_course_id . '/';
                    ensure_dir(__DIR__ . '/' . $upload_dir);
                    
                    $image_path = save_image_upload($_FILES['course_image'], __DIR__ . '/' . $upload_dir);
                    $relative_path = $upload_dir . basename($image_path);
                    
                    $stmt = $mysqli->prepare("INSERT INTO course_images (course_id, image_path, sort_order) VALUES (?, ?, ?)");
                    $sort_order = count($course_images) + 1;
                    $stmt->bind_param('isi', $selected_course_id, $relative_path, $sort_order);
                    
                    if ($stmt->execute()) {
                        $success = 'Image uploaded successfully!';
                    }
                    $stmt->close();
                }
            }
            
            // Handle header image upload
            elseif ($action === 'update_header_image') {
                if (isset($_FILES['header_image']) && $_FILES['header_image']['error'] === UPLOAD_ERR_OK) {
                    $upload_dir = 'uploads/courses/headers/';
                    ensure_dir(__DIR__ . '/' . $upload_dir);
                    
                    $image_path = save_image_upload($_FILES['header_image'], __DIR__ . '/' . $upload_dir);
                    $relative_path = $upload_dir . basename($image_path);
                    
                    $stmt = $mysqli->prepare("UPDATE courses SET header_image = ? WHERE id = ?");
                    $stmt->bind_param('si', $relative_path, $selected_course_id);
                    
                    if ($stmt->execute()) {
                        $success = 'Header image updated successfully!';
                    }
                    $stmt->close();
                }
            }
            
            // Handle page image upload
            elseif ($action === 'update_page_image') {
                if (isset($_FILES['page_image']) && $_FILES['page_image']['error'] === UPLOAD_ERR_OK) {
                    $upload_dir = 'uploads/courses/pages/';
                    ensure_dir(__DIR__ . '/' . $upload_dir);
                    
                    $image_path = save_image_upload($_FILES['page_image'], __DIR__ . '/' . $upload_dir);
                    $relative_path = $upload_dir . basename($image_path);
                    
                    $stmt = $mysqli->prepare("UPDATE courses SET page_image = ? WHERE id = ?");
                    $stmt->bind_param('si', $relative_path, $selected_course_id);
                    
                    if ($stmt->execute()) {
                        $success = 'Page image updated successfully!';
                    }
                    $stmt->close();
                }
            }
            
            // Handle point deletion
            elseif ($action === 'delete_point') {
                $point_id = (int)($_POST['point_id'] ?? 0);
                
                if ($point_id > 0) {
                    $stmt = $mysqli->prepare("DELETE FROM course_points WHERE id = ? AND course_id = ?");
                    $stmt->bind_param('ii', $point_id, $selected_course_id);
                    
                    if ($stmt->execute()) {
                        $success = 'Point deleted successfully!';
                    }
                    $stmt->close();
                }
            }
            
            // Handle image deletion
            elseif ($action === 'delete_image') {
                $image_id = (int)($_POST['image_id'] ?? 0);
                
                if ($image_id > 0) {
                    // Get image path before deletion
                    $stmt = $mysqli->prepare("SELECT image_path FROM course_images WHERE id = ? AND course_id = ?");
                    $stmt->bind_param('ii', $image_id, $selected_course_id);
                    $stmt->execute();
                    $result = $stmt->get_result();
                    $image = $result->fetch_assoc();
                    $stmt->close();
                    
                    if ($image) {
                        // Delete from database
                        $stmt = $mysqli->prepare("DELETE FROM course_images WHERE id = ?");
                        $stmt->bind_param('i', $image_id);
                        
                        if ($stmt->execute()) {
                            // Delete file
                            $file_path = __DIR__ . '/' . $image['image_path'];
                            if (file_exists($file_path)) {
                                @unlink($file_path);
                            }
                            $success = 'Image deleted successfully!';
                        }
                        $stmt->close();
                    }
                }
            }
            
            // Refresh course data
            if ($selected_course_id > 0) {
                // Get updated course details
                $stmt = $mysqli->prepare("SELECT id, name, page_title, page_description, page_image, header_image, content_html FROM courses WHERE id = ?");
                $stmt->bind_param('i', $selected_course_id);
                $stmt->execute();
                $result = $stmt->get_result();
                $course_data = $result->fetch_assoc();
                $stmt->close();
                
                // Get updated points
                $course_points = [];
                $points_stmt = $mysqli->prepare("SELECT id, point_text, sort_order FROM course_points WHERE course_id = ? ORDER BY sort_order, id");
                $points_stmt->bind_param('i', $selected_course_id);
                $points_stmt->execute();
                $points_result = $points_stmt->get_result();
                while ($row = $points_result->fetch_assoc()) {
                    $course_points[] = $row;
                }
                $points_stmt->close();
                
                // Get updated images
                $course_images = [];
                $images_stmt = $mysqli->prepare("SELECT id, image_path, sort_order FROM course_images WHERE course_id = ? ORDER BY sort_order, id");
                $images_stmt->bind_param('i', $selected_course_id);
                $images_stmt->execute();
                $images_result = $images_stmt->get_result();
                while ($row = $images_result->fetch_assoc()) {
                    $course_images[] = $row;
                }
                $images_stmt->close();
            }
            
        } catch (RuntimeException $e) {
            $errors[] = 'Error: ' . $e->getMessage();
        }
    }
}
?>
<!doctype html>
<html lang="en">
<?php include __DIR__ . '/includes/head.php'; ?>

<div class="row mb-3">
                    <div class="col">
                        <h4 class="mb-0">Manage Course Points & Images</h4>
                        <small class="text-muted">Add content to course pages (like medical.php)</small>
                    </div>
                </div>

<?php if (!empty($errors)): ?>
                    <div class="alert alert-danger alert-dismissible fade show" role="alert">
                        <strong>Error!</strong>
                        <ul class="mb-0">
                            <?php foreach ($errors as $err): ?>
                                <li><?= h($err) ?></li>
                            <?php endforeach; ?>
                        </ul>
                        <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                    </div>
                <?php endif; ?>

<?php if (!empty($success)): ?>
                    <div class="alert alert-success alert-dismissible fade show" role="alert">
                        <?= h($success) ?>
                        <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                    </div>
                <?php endif; ?>

<div class="card mb-4">
                    <div class="card-body">
                        <h5 class="card-title">Select Course</h5>
                        <form method="GET" class="row g-3">
                            <div class="col-md-8">
                                <select class="form-select" name="course_id" onchange="this.form.submit()">
                                    <option value="">-- Select a Course --</option>
                                    <?php foreach ($courses as $id => $name): ?>
                                        <option value="<?= $id ?>" <?= $selected_course_id == $id ? 'selected' : '' ?>>
                                            <?= h($name) ?>
                                        </option>
                                    <?php endforeach; ?>
                                </select>
                            </div>
                            <div class="col-md-4">
                                <button type="submit" class="btn btn-primary w-100">Load Course</button>
                            </div>
                        </form>
                    </div>
                </div>

<?php if ($selected_course_id > 0 && $course_data): ?>
                    
                    
                    <div class="card mb-4">
                        <div class="card-body">
                            <h5 class="card-title">Page Settings for: <?= h($course_data['name']) ?></h5>
                            <form method="POST" enctype="multipart/form-data">
                                <input type="hidden" name="csrf_token" value="<?= h($_SESSION['csrf_token']) ?>">
                                <input type="hidden" name="action" value="update_page">
                                <input type="hidden" name="course_id" value="<?= $selected_course_id ?>">
                                
                                <div class="row">
                                    <div class="col-md-6">
                                        <div class="mb-3">
                                            <label class="form-label">Page Title</label>
                                            <input type="text" class="form-control" name="page_title" 
                                                   value="<?= h($course_data['page_title'] ?? $course_data['name']) ?>" 
                                                   placeholder="Page title for <?= h($course_data['name']) ?>">
                                        </div>
                                    </div>
                                    <div class="col-md-6">
                                        <div class="mb-3">
                                            <label class="form-label">Page Description</label>
                                            <textarea class="form-control" name="page_description" rows="2" 
                                                      placeholder="Short description"><?= h($course_data['page_description'] ?? '') ?></textarea>
                                        </div>
                                    </div>
                                </div>
                                
                                <div class="mb-3">
                                    <label class="form-label">Page Content (HTML)</label>
                                    <textarea class="form-control" name="content_html" rows="4" 
                                              placeholder="Additional HTML content for the page"><?= h($course_data['content_html'] ?? '') ?></textarea>
                                    <small class="text-muted">This will appear after the points list</small>
                                </div>
                                
                                <div class="text-end">
                                    <button type="submit" class="btn btn-primary">Update Page Details</button>
                                </div>
                            </form>
                        </div>
                    </div>

<div class="card mb-4">
                        <div class="card-body">
                            <h5 class="card-title">Header Image</h5>
                            <div class="row">
                                <div class="col-md-4">
                                    <?php if ($course_data['header_image']): ?>
                                        <img src="<?= h($course_data['header_image']) ?>" class="img-fluid rounded mb-3" alt="Header Image">
                                    <?php endif; ?>
                                </div>
                                <div class="col-md-8">
                                    <form method="POST" enctype="multipart/form-data">
                                        <input type="hidden" name="csrf_token" value="<?= h($_SESSION['csrf_token']) ?>">
                                        <input type="hidden" name="action" value="update_header_image">
                                        <input type="hidden" name="course_id" value="<?= $selected_course_id ?>">
                                        
                                        <div class="mb-3">
                                            <label class="form-label">Upload Header Image</label>
                                            <input type="file" class="form-control" name="header_image" accept="image/*">
                                            <small class="text-muted">Recommended size: 1200x600px</small>
                                        </div>
                                        
                                        <button type="submit" class="btn btn-primary">Upload Header Image</button>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>

<div class="card mb-4">
                        <div class="card-body">
                            <h5 class="card-title">Page Content Image</h5>
                            <div class="row">
                                <div class="col-md-4">
                                    <?php if ($course_data['page_image']): ?>
                                        <img src="<?= h($course_data['page_image']) ?>" class="img-fluid rounded mb-3" alt="Page Image">
                                    <?php endif; ?>
                                </div>
                                <div class="col-md-8">
                                    <form method="POST" enctype="multipart/form-data">
                                        <input type="hidden" name="csrf_token" value="<?= h($_SESSION['csrf_token']) ?>">
                                        <input type="hidden" name="action" value="update_page_image">
                                        <input type="hidden" name="course_id" value="<?= $selected_course_id ?>">
                                        
                                        <div class="mb-3">
                                            <label class="form-label">Upload Page Image</label>
                                            <input type="file" class="form-control" name="page_image" accept="image/*">
                                            <small class="text-muted">This image appears in the content section</small>
                                        </div>
                                        
                                        <button type="submit" class="btn btn-primary">Upload Page Image</button>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>

<div class="card mb-4">
                        <div class="card-body">
                            <div class="d-flex justify-content-between align-items-center mb-3">
                                <h5 class="card-title mb-0">Course Points (Will appear with checkmarks)</h5>
                                <span class="badge bg-primary"><?= count($course_points) ?> points</span>
                            </div>
                            
                            
                            <form method="POST" class="mb-4">
                                <input type="hidden" name="csrf_token" value="<?= h($_SESSION['csrf_token']) ?>">
                                <input type="hidden" name="action" value="add_point">
                                <input type="hidden" name="course_id" value="<?= $selected_course_id ?>">
                                
                                <div class="input-group">
                                    <input type="text" class="form-control" name="point_text" 
                                           placeholder="Add a new point (e.g., MBBS(Allopathy))" required>
                                    <button type="submit" class="btn btn-success">Add Point</button>
                                </div>
                            </form>
                            
                            
                            <?php if (empty($course_points)): ?>
                                <div class="alert alert-info">
                                    No points added yet. Add some points to display on the course page.
                                </div>
                            <?php else: ?>
                                <div class="table-responsive">
                                    <table class="table table-hover">
                                        <thead>
                                            <tr>
                                                <th style="width: 50px;">#</th>
                                                <th>Point Text</th>
                                                <th style="width: 100px;">Actions</th>
                                            </tr>
                                        </thead>
                                        <tbody>
                                            <?php foreach ($course_points as $index => $point): ?>
                                                <tr>
                                                    <td><?= $index + 1 ?></td>
                                                    <td><?= h($point['point_text']) ?></td>
                                                    <td>
                                                        <form method="POST" style="display: inline;">
                                                            <input type="hidden" name="csrf_token" value="<?= h($_SESSION['csrf_token']) ?>">
                                                            <input type="hidden" name="action" value="delete_point">
                                                            <input type="hidden" name="course_id" value="<?= $selected_course_id ?>">
                                                            <input type="hidden" name="point_id" value="<?= $point['id'] ?>">
                                                            <button type="submit" class="btn btn-sm btn-danger" 
                                                                    onclick="return confirm('Delete this point?')">
                                                                <i class="dripicons-trash"></i>
                                                            </button>
                                                        </form>
                                                    </td>
                                                </tr>
                                            <?php endforeach; ?>
                                        </tbody>
                                    </table>
                                </div>
                            <?php endif; ?>
                        </div>
                    </div>

<div class="card">
                        <div class="card-body">
                            <div class="d-flex justify-content-between align-items-center mb-3">
                                <h5 class="card-title mb-0">Additional Images</h5>
                                <span class="badge bg-primary"><?= count($course_images) ?> images</span>
                            </div>
                            
                            
                            <form method="POST" enctype="multipart/form-data" class="mb-4">
                                <input type="hidden" name="csrf_token" value="<?= h($_SESSION['csrf_token']) ?>">
                                <input type="hidden" name="action" value="add_image">
                                <input type="hidden" name="course_id" value="<?= $selected_course_id ?>">
                                
                                <div class="row g-3">
                                    <div class="col-md-9">
                                        <input type="file" class="form-control" name="course_image" accept="image/*" required>
                                    </div>
                                    <div class="col-md-3">
                                        <button type="submit" class="btn btn-primary w-100">Upload Image</button>
                                    </div>
                                </div>
                            </form>
                            
                            
                            <?php if (empty($course_images)): ?>
                                <div class="alert alert-info">
                                    No additional images uploaded yet.
                                </div>
                            <?php else: ?>
                                <div class="row">
                                    <?php foreach ($course_images as $image): ?>
                                        <div class="col-md-3 mb-3">
                                            <div class="card">
                                                <img src="<?= h($image['image_path']) ?>" class="card-img-top" alt="Course Image" style="height: 150px; object-fit: cover;">
                                                <div class="card-body p-2">
                                                    <form method="POST" class="text-center">
                                                        <input type="hidden" name="csrf_token" value="<?= h($_SESSION['csrf_token']) ?>">
                                                        <input type="hidden" name="action" value="delete_image">
                                                        <input type="hidden" name="course_id" value="<?= $selected_course_id ?>">
                                                        <input type="hidden" name="image_id" value="<?= $image['id'] ?>">
                                                        <button type="submit" class="btn btn-sm btn-danger" 
                                                                onclick="return confirm('Delete this image?')">
                                                            <i class="dripicons-trash"></i> Delete
                                                        </button>
                                                    </form>
                                                </div>
                                            </div>
                                        </div>
                                    <?php endforeach; ?>
                                </div>
                            <?php endif; ?>
                        </div>
                    </div>

<div class="mt-4 p-3 bg-light rounded">
                        <h6>Preview Course Page:</h6>
                        <p>
                            <a href="../../medical.php?course=<?= urlencode($course_data['name']) ?>" target="_blank" class="btn btn-outline-primary">
                                <i class="dripicons-exit me-1"></i> View <?= h($course_data['name']) ?> Page
                            </a>
                        </p>
                    </div>

<?php elseif ($selected_course_id > 0 && !$course_data): ?>
                    <div class="alert alert-danger">
                        Course not found or is inactive.
                    </div>
                <?php endif; ?>

</div>
        </div>

<?php include __DIR__ . '/includes/footer.php'; ?>
    </div>
</div>

<?php include __DIR__ . '/includes/rightbar.php'; ?>
<?php include __DIR__ . '/includes/scripts.php'; ?>

</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: add-point.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation