Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/college/store/admin

Free Space:

10.3 TB

🔧 Quick Actions

✏️ Editing: books-add.php

<?php
// books-add.php (MySQLi version + PDF upload + Category selection)
session_start();

include 'includes/db.php'; // must set $mysqli

// Get database connection
$mysqli = db(); // Add this line to get the mysqli connection

/** Helpers */
function slugify($text) {
    $text = strtolower(trim($text));
    $text = preg_replace('~[^\pL\d]+~u', '-', $text);
    $text = preg_replace('~^-+|-+$~', '', $text);
    $text = preg_replace('~-+~', '-', $text);
    return $text ?: uniqid('book-');
}
function ensure_dir($dir) {
    if (!is_dir($dir)) { @mkdir($dir, 0775, true); }
}
function sanitize_html_basic($html) {
    $allowed = '<p><br><strong><b><em><i><u><ol><ul><li><h1><h2><h3><blockquote><code><pre><a>';
    $html = strip_tags($html, $allowed);
    $html = preg_replace('/\son\w+="[^"]*"/i', '', $html);
    $html = preg_replace("/\son\w+='[^']*'/i", '', $html);
    return $html;
}
function save_image_upload(array $file, string $targetDir, array $allowedTypes, int $maxSizeBytes = 5242880) {
    if ($file['error'] !== UPLOAD_ERR_OK) throw new RuntimeException('Upload error (code ' . $file['error'] . ').');
    $mime = mime_content_type($file['tmp_name']);
    if (!in_array($mime, $allowedTypes, true)) throw new RuntimeException('Unsupported file type.');
    if ($file['size'] > $maxSizeBytes) throw new RuntimeException('File too large (max 5MB).');
    $ext  = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
    $name = pathinfo($file['name'], PATHINFO_FILENAME);
    $safe = slugify($name) . '-' . uniqid() . '.' . $ext;
    ensure_dir($targetDir);
    $path = rtrim($targetDir, '/') . '/' . $safe;
    if (!move_uploaded_file($file['tmp_name'], $path)) throw new RuntimeException('Failed to move uploaded file.');
    return $path;
}
function save_pdf_upload(array $file, string $targetDir, int $maxSizeBytes = 52428800) { // 50MB
    if ($file['error'] !== UPLOAD_ERR_OK) throw new RuntimeException('Upload error (code ' . $file['error'] . ').');
    $mime = mime_content_type($file['tmp_name']);
    if ($mime !== 'application/pdf') throw new RuntimeException('Only PDF files are allowed.');
    if ($file['size'] > $maxSizeBytes) throw new RuntimeException('PDF too large (max 50MB).');
    $ext = 'pdf';
    $name = pathinfo($file['name'], PATHINFO_FILENAME);
    $safe = slugify($name) . '-' . uniqid() . '.' . $ext;
    ensure_dir($targetDir);
    $path = rtrim($targetDir, '/') . '/' . $safe;
    if (!move_uploaded_file($file['tmp_name'], $path)) throw new RuntimeException('Failed to move PDF.');
    return $path;
}

// CSRF
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

// Get categories from database
$categories = [];
if (isset($mysqli) && !$mysqli->connect_errno) {
    $result = $mysqli->query("SELECT id, title FROM book_cateogary ORDER BY title");
    if ($result) {
        while ($row = $result->fetch_assoc()) {
            $categories[$row['id']] = $row['title'];
        }
        $result->free();
    }
}

$errors = [];
$success = null;

// Preserve form data on error
$form_data = [
    'book_name' => '',
    'category_id' => '',
    'original_price' => '',
    'discounted_price' => '',
    'description_html' => '',
    'toc_html' => ''
];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // CSRF check
    if (!isset($_POST['csrf_token']) || !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
        $errors[] = 'Invalid form token. Please refresh and try again.';
    }

// DB check
    if (!isset($mysqli) || $mysqli->connect_errno) {
        $errors[] = 'Database not available.';
    }

// Inputs
    $book_name        = trim($_POST['book_name'] ?? '');
    $category_id      = (int) ($_POST['category_id'] ?? 0);
    $original_price   = (float) ($_POST['original_price'] ?? 0);
    $discounted_price = (float) ($_POST['discounted_price'] ?? 0);
    $description_html = sanitize_html_basic($_POST['description_html'] ?? '');
    $toc_html         = sanitize_html_basic($_POST['toc_html'] ?? '');
    
    // Store form data for repopulation
    $form_data = [
        'book_name' => $book_name,
        'category_id' => $category_id,
        'original_price' => $original_price,
        'discounted_price' => $discounted_price,
        'description_html' => $description_html,
        'toc_html' => $toc_html
    ];

if ($book_name === '') $errors[] = 'Book name is required.';
    if ($category_id <= 0 && !empty($categories)) $errors[] = 'Please select a category.';
    if ($original_price <= 0) $errors[] = 'Original price must be greater than 0.';
    if ($discounted_price < 0) $errors[] = 'Discounted price cannot be negative.';
    if ($discounted_price > $original_price) $errors[] = 'Discounted price cannot exceed original price.';
    if (!isset($_FILES['thumbnail']) || ($_FILES['thumbnail']['error'] ?? UPLOAD_ERR_NO_FILE) === UPLOAD_ERR_NO_FILE) {
        $errors[] = 'Thumbnail image is required.';
    }
    if (!isset($_FILES['book_pdf']) || ($_FILES['book_pdf']['error'] ?? UPLOAD_ERR_NO_FILE) === UPLOAD_ERR_NO_FILE) {
        $errors[] = 'Book PDF is required.';
    }

if (!$errors) {
        try {
            $slug       = slugify($book_name);
            $bookFolder = 'uploads/books/' . $slug . '-' . date('Ymd-His');
            ensure_dir($bookFolder);

$imageTypes     = ['image/jpeg', 'image/png', 'image/webp'];
            $thumbnail_path = save_image_upload($_FILES['thumbnail'], $bookFolder, $imageTypes);
            $pdf_path       = save_pdf_upload($_FILES['book_pdf'], $bookFolder); // 50MB limit

// Transaction (MySQLi)
            $mysqli->begin_transaction();

// Insert into books (with category_id)
            $stmt = $mysqli->prepare(
                "INSERT INTO books 
                 (name, slug, thumbnail_path, description_html, toc_html, pdf_path, 
                  original_price, discounted_price, category_id, created_at) 
                 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, NOW())"
            );
            if (!$stmt) {
                throw new RuntimeException('Prepare failed (books): ' . $mysqli->error);
            }

// 6 strings + 2 doubles + 1 integer: name, slug, thumb, desc, toc, pdf, original, discounted, category_id
            $stmt->bind_param(
                'ssssssddi',
                $book_name,
                $slug,
                $thumbnail_path,
                $description_html,
                $toc_html,
                $pdf_path,
                $original_price,
                $discounted_price,
                $category_id
            );

if (!$stmt->execute()) {
                throw new RuntimeException('Execute failed (books): ' . $stmt->error);
            }
            $book_id = $mysqli->insert_id;
            $stmt->close();

// Other images (multiple)
            if (!empty($_FILES['other_images']) && is_array($_FILES['other_images']['name'])) {
                $names     = $_FILES['other_images']['name'];
                $tmp_names = $_FILES['other_images']['tmp_name'];
                $errorsArr = $_FILES['other_images']['error'];
                $sizes     = $_FILES['other_images']['size'];

$imgStmt = $mysqli->prepare(
                    "INSERT INTO book_images (book_id, image_path, sort_order, created_at) VALUES (?, ?, ?, NOW())"
                );
                if (!$imgStmt) {
                    throw new RuntimeException('Prepare failed (book_images): ' . $mysqli->error);
                }

$order = 1;
                for ($i = 0, $n = count($names); $i < $n; $i++) {
                    if (($errorsArr[$i] ?? UPLOAD_ERR_NO_FILE) === UPLOAD_ERR_NO_FILE) continue;

$file = [
                        'name'     => $names[$i],
                        'tmp_name' => $tmp_names[$i],
                        'error'    => $errorsArr[$i],
                        'size'     => $sizes[$i] ?? 0,
                    ];
                    try {
                        $img_path = save_image_upload($file, $bookFolder, $imageTypes);
                        $imgStmt->bind_param('isi', $book_id, $img_path, $order);
                        $imgStmt->execute(); // skip error handling to continue next
                        $order++;
                    } catch (Throwable $e) {
                        // Skip bad images, continue
                    }
                }
                $imgStmt->close();
            }

$mysqli->commit();
            $success = 'Book added successfully.';
            // Reset CSRF to avoid resubmission
            $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
            // Clear form data on success
            $form_data = [
                'book_name' => '',
                'category_id' => '',
                'original_price' => '',
                'discounted_price' => '',
                'description_html' => '',
                'toc_html' => ''
            ];
        } catch (Throwable $e) {
            try { $mysqli->rollback(); } catch (Throwable $r) {}
            $errors[] = 'Failed to save book: ' . htmlspecialchars($e->getMessage());
        }
    }
}
?>
<!doctype html>
<html lang="en">
<?php include('includes/head.php')?>

<div class="row mb-3">
                    <div class="col">
                        <h4 class="mb-0">Add New Book</h4>
                        <small class="text-muted">Create a new eBook with thumbnail, images, pricing, content, and PDF file.</small>
                    </div>
                </div>

<?php if (!empty($errors)): ?>
                    <div class="alert alert-danger">
                        <strong>There were some problems:</strong>
                        <ul class="mb-0">
                            <?php foreach ($errors as $err): ?>
                                <li><?= htmlspecialchars($err) ?></li>
                            <?php endforeach; ?>
                        </ul>
                    </div>
                <?php endif; ?>

<?php if (!empty($success)): ?>
                    <div class="alert alert-success">
                        <?= htmlspecialchars($success) ?>
                        <a href="books-manage.php" class="ms-2">Go to Manage Books</a>
                    </div>
                <?php endif; ?>

<div class="row">
                        <div class="col-xl-8">
                            <div class="card">
                                <div class="card-body">
                                    <div class="mb-3">
                                        <label class="form-label">Book Name <span class="text-danger">*</span></label>
                                        <input type="text" class="form-control" name="book_name" 
                                               value="<?= htmlspecialchars($form_data['book_name']) ?>" 
                                               placeholder="Enter book title" required>
                                    </div>

<?php if (!empty($categories)): ?>
                                    <div class="mb-3">
                                        <label class="form-label">Category <span class="text-danger">*</span></label>
                                        <select class="form-select" name="category_id" required>
                                            <option value="">Select a category</option>
                                            <?php foreach ($categories as $id => $title): ?>
                                                <option value="<?= $id ?>" <?= $form_data['category_id'] == $id ? 'selected' : '' ?>>
                                                    <?= htmlspecialchars($title) ?>
                                                </option>
                                            <?php endforeach; ?>
                                        </select>
                                    </div>
                                    <?php else: ?>
                                        <div class="alert alert-warning">
                                            No categories found. Please <a href="categories.php">create categories first</a>.
                                        </div>
                                    <?php endif; ?>

<div class="mb-3">
                                        <label class="form-label">Description</label>
                                        <div id="editor-description" style="height: 250px;"><?= $form_data['description_html'] ?></div>
                                        <small class="text-muted">Rich text powered by Quill.</small>
                                    </div>

<div class="mb-0">
                                        <label class="form-label">Table of Contents</label>
                                        <div id="editor-toc" style="height: 200px;"><?= $form_data['toc_html'] ?></div>
                                    </div>
                                </div>
                            </div>
                        </div>

<div class="col-xl-4">
                            <div class="card">
                                <div class="card-body">
                                    <div class="mb-3">
                                        <label class="form-label">Thumbnail <span class="text-danger">*</span></label>
                                        <input type="file" class="form-control" name="thumbnail" accept="image/*" required>
                                        <small class="text-muted">JPEG/PNG/WebP, max 5MB.</small>
                                    </div>

<div class="mb-3">
                                        <label class="form-label">Other Images</label>
                                        <input type="file" class="form-control" name="other_images[]" accept="image/*" multiple>
                                        <small class="text-muted">You can select multiple images.</small>
                                    </div>

<div class="mb-3">
                                        <label class="form-label">Original Price (₹) <span class="text-danger">*</span></label>
                                        <input type="number" class="form-control" name="original_price" 
                                               value="<?= htmlspecialchars($form_data['original_price']) ?>" 
                                               step="0.01" min="0" placeholder="e.g. 499" required>
                                    </div>

<div class="mb-4">
                                        <label class="form-label">Discounted Price (₹)</label>
                                        <input type="number" class="form-control" name="discounted_price" 
                                               value="<?= htmlspecialchars($form_data['discounted_price']) ?>" 
                                               step="0.01" min="0" placeholder="e.g. 299">
                                        <small class="text-muted">Leave 0 or blank if no discount.</small>
                                    </div>

<div class="text-end">
                                        <button type="submit" class="btn btn-primary">
                                            <i class="dripicons-checkmark me-1"></i> Save Book
                                        </button>
                                        <a href="books-manage.php" class="btn btn-secondary ms-1">Cancel</a>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>
                </form>

</div>
        </div>

<?php include('includes/footer.php')?>
    </div>
</div>

<?php include('includes/rightbar.php')?>
<?php include('includes/scripts.php')?>

<link href="https://cdn.quilljs.com/1.3.7/quill.snow.css" rel="stylesheet">
<script src="https://cdn.quilljs.com/1.3.7/quill.min.js"></script>

const quillToc = new Quill('#editor-toc', {
    theme: 'snow',
    placeholder: 'Add your table of contents…',
    modules: {
      toolbar: [
        [{ header: [1, 2, 3, false] }],
        [{ list: 'ordered' }, { list: 'bullet' }],
        ['bold', 'italic', 'underline'],
        ['clean']
      ]
    }
  });

// Set initial content if there was an error and we're repopulating
  <?php if (!empty($form_data['description_html'])): ?>
    quillDesc.root.innerHTML = `<?= addslashes($form_data['description_html']) ?>`;
  <?php endif; ?>
  
  <?php if (!empty($form_data['toc_html'])): ?>
    quillToc.root.innerHTML = `<?= addslashes($form_data['toc_html']) ?>`;
  <?php endif; ?>

document.getElementById('bookForm').addEventListener('submit', function () {
    document.getElementById('description_html').value = quillDesc.root.innerHTML;
    document.getElementById('toc_html').value = quillToc.root.innerHTML;
  });
</script>

</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: books-add.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation