Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/college/store/admin

Free Space:

10.26 TB

🔧 Quick Actions

✏️ Editing: books-manage.php

<?php
// books-manage.php (DataTables) — with PDF cleanup on delete
declare(strict_types=1);
session_start();
require_once __DIR__ . '/includes/db.php';

// ✅ Get DB connection
$mysqli = db();

// (Optional) protect page
// if (empty($_SESSION['admin_id'])) { header('Location: signin.php'); exit; }

// CSRF token for delete
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf = $_SESSION['csrf_token'];

function h(string $v){ return htmlspecialchars($v, ENT_QUOTES, 'UTF-8'); }
function base_dir(): string { return __DIR__; }

// Handle DELETE (POST)
$flash_ok = null; $flash_err = null;
if ($_SERVER['REQUEST_METHOD'] === 'POST' && ($_POST['action'] ?? '') === 'delete') {
    if (!isset($_POST['csrf_token']) || !hash_equals($_SESSION['csrf_token'], (string)$_POST['csrf_token'])) {
        $flash_err = 'Invalid form token. Please try again.';
    } else {
        $book_id = (int)($_POST['id'] ?? 0);
        if ($book_id <= 0) {
            $flash_err = 'Invalid book ID.';
        } else {
            // collect file paths (thumb, pdf, gallery)
            $thumb = null; 
            $pdf   = null; 
            $gallery = [];

if ($stmt = $mysqli->prepare("SELECT thumbnail_path, pdf_path FROM books WHERE id=?")) {
                $stmt->bind_param('i',$book_id);
                $stmt->execute();
                $stmt->bind_result($thumb, $pdf);
                $stmt->fetch();
                $stmt->close();
            }

if ($stmt = $mysqli->prepare("SELECT image_path FROM book_images WHERE book_id=?")) {
                $stmt->bind_param('i',$book_id);
                $stmt->execute(); 
                $res = $stmt->get_result();
                while($r = $res->fetch_assoc()){ $gallery[] = $r['image_path']; }
                $stmt->close();
            }

try {
                $mysqli->begin_transaction();

// Delete gallery rows first (in case of FK)
                if ($stmt = $mysqli->prepare("DELETE FROM book_images WHERE book_id=?")) {
                    $stmt->bind_param('i', $book_id);
                    if (!$stmt->execute()) throw new RuntimeException('Failed to delete gallery images.');
                    $stmt->close();
                }

// Delete book
                if ($stmt = $mysqli->prepare("DELETE FROM books WHERE id=?")) {
                    $stmt->bind_param('i',$book_id);
                    if (!$stmt->execute()) throw new RuntimeException('Failed to delete book.');
                    $stmt->close();
                }

$mysqli->commit();
                $flash_ok = 'Book deleted successfully.';

// Best-effort file cleanup (thumb, pdf, gallery)
                $paths = [];
                if ($thumb) $paths[] = $thumb;
                if ($pdf)   $paths[] = $pdf;
                foreach($gallery as $p){ $paths[] = $p; }

foreach($paths as $p){
                    // Normalize path under project dir to avoid traversal
                    $abs = base_dir() . '/' . ltrim($p,'/\\');
                    $real = realpath($abs) ?: $abs;
                    if (strpos($real, base_dir()) !== 0) continue; // skip outside base
                    if (is_file($real)) @unlink($real);
                    $dir = dirname($real);
                    if (is_dir($dir)) {
                        $scan = @scandir($dir);
                        if ($scan && count(array_diff($scan, ['.','..'])) === 0) @rmdir($dir);
                    }
                }
            } catch (Throwable $e) {
                try { $mysqli->rollback(); } catch(Throwable $r){}
                $flash_err = 'Delete failed: ' . h($e->getMessage());
            }
        }
    }
}
?>
<!doctype html>
<html lang="en">
<?php include('includes/head.php')?>

<div class="d-flex align-items-center justify-content-between mb-3">
                    <div>
                        <h4 class="mb-0">Manage Books</h4>
                        <small class="text-muted">Search, sort, and manage your eBooks.</small>
                    </div>
                    <a href="books-add.php" class="btn btn-primary">
                        <i class="dripicons-plus me-1"></i> Add New Book
                    </a>
                </div>

<?php if ($flash_ok): ?>
                    <div class="alert alert-success"><?= h($flash_ok) ?></div>
                <?php endif; ?>
                <?php if ($flash_err): ?>
                    <div class="alert alert-danger"><?= h($flash_err) ?></div>
                <?php endif; ?>

<div class="card">
                    <div class="card-body">
                        <table id="booksTable" class="table table-striped table-bordered align-middle" style="width:100%">
                            <thead class="table-light">
                                <tr>
                                    <th style="width:72px;">Cover</th>
                                    <th>Book</th>
                                    <th style="width:180px;">Price</th>
                                    <th style="width:190px;">Created</th>
                                    <th style="width:240px;">Actions</th>
                                </tr>
                            </thead>
                            <tbody></tbody>
                        </table>
                        
                        <form id="deleteForm" method="post" class="d-none">
                            <input type="hidden" name="csrf_token" value="<?= h($csrf) ?>">
                            <input type="hidden" name="action" value="delete">
                            <input type="hidden" name="id" id="deleteId" value="">
                        </form>
                    </div>
                </div>

</div>
        </div>

<?php include('includes/footer.php')?>
    </div>
</div>

<?php include('includes/rightbar.php')?>
<?php include('includes/scripts.php')?>

<link rel="stylesheet" href="https://cdn.datatables.net/1.13.8/css/dataTables.bootstrap5.min.css">
<script src="https://cdn.datatables.net/1.13.8/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.13.8/js/dataTables.bootstrap5.min.js"></script>

// Delegated delete handler
    $('#booksTable').on('click', '.btn-delete', function (e) {
        e.preventDefault();
        const id = $(this).data('id');
        if (!id) return;
        if (confirm('Delete this book? This action cannot be undone.')) {
            $('#deleteId').val(id);
            $('#deleteForm').trigger('submit');
        }
    });
});
</script>

</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: books-manage.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation