Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/college/store/admin

Free Space:

10.26 TB

🔧 Quick Actions

✏️ Editing: orders-manage.php

<?php
// orders-manage.php
session_start();

// Database credentials
$host     = "localhost";     // your DB host
$username = "u329947844_ebook1";          // your DB username
$password = "Ariharan@2025";              // your DB password
$database = "u329947844_ebook1";   // your DB name

// Create MySQLi connection
$mysqli = new mysqli($host, $username, $password, $database);

// Check connection
if ($mysqli->connect_error) {
    die("Database connection failed: " . $mysqli->connect_error);
}

// Set charset (important for UTF-8/emoji/book titles)
$mysqli->set_charset("utf8mb4");

// Function to get database connection
function db() {
    global $mysqli;
    return $mysqli;
}

// CSRF token for actions
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf = $_SESSION['csrf_token'];

function h($v){ return htmlspecialchars($v, ENT_QUOTES, 'UTF-8'); }

// Handle actions (approve, delete, etc.)
$flash_ok = null; $flash_err = null;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (!isset($_POST['csrf_token']) || !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
        $flash_err = 'Invalid form token. Please try again.';
    } else {
        $order_id = (int)($_POST['id'] ?? 0);
        $action = $_POST['action'] ?? '';
        
        if ($order_id <= 0) {
            $flash_err = 'Invalid order ID.';
        } else {
            try {
                $conn = db(); // Get the database connection
                
                if ($action === 'approve') {
                    $stmt = $conn->prepare("UPDATE orders SET status = 'completed' WHERE id = ?");
                    $stmt->bind_param('i', $order_id);
                    if ($stmt->execute()) {
                        $flash_ok = 'Order approved successfully.';
                    } else {
                        throw new RuntimeException('Failed to approve order.');
                    }
                    $stmt->close();
                } elseif ($action === 'delete') {
                    $stmt = $conn->prepare("DELETE FROM orders WHERE id = ?");
                    $stmt->bind_param('i', $order_id);
                    if ($stmt->execute()) {
                        $flash_ok = 'Order deleted successfully.';
                    } else {
                        throw new RuntimeException('Failed to delete order.');
                    }
                    $stmt->close();
                } elseif ($action === 'view_details') {
                    header('Location: order-details.php?id=' . $order_id);
                    exit;
                }
            } catch (Throwable $e) {
                $flash_err = 'Action failed: ' . h($e->getMessage());
            }
        }
    }
}

// Get all orders from database with pending orders first
$conn = db();
$orders = [];
$query = "SELECT 
    o.id, 
    o.order_code, 
    o.total,
    o.payment_method,
    o.payment_screenshot,
    o.status,
    o.created_at,
    u.full_name as customer_name,
    u.email as customer_email,
    (SELECT COUNT(*) FROM order_items oi WHERE oi.order_id = o.id) as item_count,
    (SELECT GROUP_CONCAT(oi.title SEPARATOR ', ') FROM order_items oi WHERE oi.order_id = o.id) as item_titles
FROM orders o
LEFT JOIN users u ON o.user_id = u.id
ORDER BY 
    CASE WHEN o.status = 'pending' THEN 1 
         WHEN o.status = 'completed' THEN 2
         ELSE 3 END,
    o.created_at DESC";

$result = $conn->query($query);
if ($result) {
    while ($row = $result->fetch_assoc()) {
        $orders[] = $row;
    }
}
?>
<!doctype html>
<html lang="en">
<head>
    <meta charset="utf-8" />
    <title>Manage Orders - Narumalar Academy</title>
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta content="Manage customer orders" name="description" />
    <meta content="Narumalar Academy" name="author" />
    
    
    <link rel="shortcut icon" href="assets/images/favicon.ico">

<link href="assets/css/bootstrap.min.css" id="bootstrap-style" rel="stylesheet" type="text/css" />
    
    <link href="assets/css/icons.min.css" rel="stylesheet" type="text/css" />
    
    <link href="assets/css/app.min.css" id="app-style" rel="stylesheet" type="text/css" />

<link rel="stylesheet" href="https://cdn.datatables.net/1.13.8/css/dataTables.bootstrap5.min.css">
    <link rel="stylesheet" href="https://cdn.datatables.net/buttons/2.4.2/css/buttons.dataTables.min.css">
    <style>
        .status-badge {
            padding: 0.35em 0.65em;
            font-size: 0.75em;
            font-weight: 700;
            border-radius: 0.25rem;
        }
        .status-pending { background-color: #fff3cd; color: #856404; }
        .status-completed { background-color: #d1e7dd; color: #0f5132; }
        .status-cancelled { background-color: #f8d7da; color: #842029; }
        
        .action-buttons .btn {
            margin-right: 0.3rem;
            margin-bottom: 0.3rem;
        }
        
        .order-items-list {
            max-height: 200px;
            overflow-y: auto;
        }
        
        .screenshot-thumb {
            width: 60px;
            height: 60px;
            object-fit: cover;
            border-radius: 4px;
            cursor: pointer;
            transition: transform 0.2s;
        }
        .screenshot-thumb:hover {
            transform: scale(1.05);
        }
    </style>
</head>

<div class="d-flex align-items-center justify-content-between mb-3">
                    <div>
                        <h4 class="mb-0">Manage Orders</h4>
                        <small class="text-muted">View and manage customer orders</small>
                    </div>
                </div>

<?php if ($flash_ok): ?>
                    <div class="alert alert-success"><?= h($flash_ok) ?></div>
                <?php endif; ?>
                <?php if ($flash_err): ?>
                    <div class="alert alert-danger"><?= h($flash_err) ?></div>
                <?php endif; ?>

<div class="card">
                    <div class="card-body">
                        <table id="ordersTable" class="table table-striped table-bordered align-middle" style="width:100%">
                            <thead class="table-light">
                                <tr>
                                    <th>Order Code</th>
                                    <th>Customer</th>
                                    <th>Items</th>
                                    <th>Total</th>
                                    <th>Payment Method</th>
                                    <th>Screenshot</th>
                                    <th>Status</th>
                                    <th>Date</th>
                                    <th>Actions</th>
                                </tr>
                            </thead>
                            <tbody>
                                <?php foreach ($orders as $row): ?>
                                    <?php
                                    // Format status badge
                                    $statusClass = 'status-' . $row['status'];
                                    $statusBadge = '<span class="status-badge ' . $statusClass . '">' . ucfirst($row['status']) . '</span>';
                                    
                                    // Format items list
                                    $items = '<div class="order-items-list"><small>';
                                    if (!empty($row['item_titles'])) {
                                        $itemTitles = explode(', ', $row['item_titles']);
                                        $items .= implode('<br>', array_slice($itemTitles, 0, 3));
                                        if ($row['item_count'] > 3) {
                                            $items .= '<br>... and ' . ($row['item_count'] - 3) . ' more';
                                        }
                                    } else {
                                        $items .= 'No items';
                                    }
                                    $items .= '</small></div>';
                                    
                                    // Format customer info
                                    $customer = $row['customer_name'] . '<br><small class="text-muted">' . $row['customer_email'] . '</small>';
                                    
                                    // Format payment screenshot
                                    $screenshot = '';
                                    if (!empty('../'.$row['payment_screenshot'])) {
                                        $screenshotPath ='../'. htmlspecialchars($row['payment_screenshot']);
                                        $screenshot = '<img src="' . $screenshotPath . '" class="screenshot-thumb" data-bs-toggle="modal" data-bs-target="#screenshotModal" data-src="' . $screenshotPath . '" alt="Payment screenshot">';
                                    } else {
                                        $screenshot = '<span class="text-muted">N/A</span>';
                                    }
                                    
                                    // Format actions
                                    $actions = '';
                                    if ($row['status'] === 'pending') {
                                        $actions .= '<form method="post" style="display:inline;">
                                            <input type="hidden" name="csrf_token" value="' . h($csrf) . '">
                                            <input type="hidden" name="action" value="approve">
                                            <input type="hidden" name="id" value="' . $row['id'] . '">
                                            <button type="submit" class="btn btn-sm btn-success" title="Approve Order" onclick="return confirm(\'Approve this order? The customer will receive access to their eBooks.\')">
                                                <i class="dripicons-checkmark"></i>
                                            </button>
                                        </form>';
                                    }
                                    $actions .= '<form method="post" style="display:inline;">
                                        <input type="hidden" name="csrf_token" value="' . h($csrf) . '">
                                        <input type="hidden" name="action" value="view_details">
                                        <input type="hidden" name="id" value="' . $row['id'] . '">
                                        <button type="submit" class="btn btn-sm btn-info" title="View Details">
                                            <i class="dripicons-preview"></i>
                                        </button>
                                    </form>';
                                    $actions .= '<form method="post" style="display:inline;">
                                        <input type="hidden" name="csrf_token" value="' . h($csrf) . '">
                                        <input type="hidden" name="action" value="delete">
                                        <input type="hidden" name="id" value="' . $row['id'] . '">
                                        <button type="submit" class="btn btn-sm btn-danger" title="Delete Order" onclick="return confirm(\'Delete this order? This action cannot be undone.\')">
                                            <i class="dripicons-trash"></i>
                                        </button>
                                    </form>';
                                    ?>
                                    <tr>
                                        <td><?= h($row['order_code']) ?></td>
                                        <td><?= $customer ?></td>
                                        <td><?= $items ?></td>
                                        <td class="text-end">₹<?= number_format($row['total'], 0) ?></td>
                                        <td><?= strtoupper($row['payment_method']) ?></td>
                                        <td class="text-center"><?= $screenshot ?></td>
                                        <td><?= $statusBadge ?></td>
                                        <td><?= date('M j, Y g:i A', strtotime($row['created_at'])) ?></td>
                                        <td class="action-buttons"><?= $actions ?></td>
                                    </tr>
                                <?php endforeach; ?>
                            </tbody>
                        </table>
                    </div>
                </div>

</div>
        </div>

<?php include('includes/footer.php')?>
    </div>
</div>

<div class="modal fade" id="screenshotModal" tabindex="-1" aria-labelledby="screenshotModalLabel" aria-hidden="true">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <h5 class="modal-title" id="screenshotModalLabel">Payment Screenshot</h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
            </div>
            <div class="modal-body text-center">
                <img id="modalScreenshot" src="" class="img-fluid" alt="Payment screenshot">
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<?php include('includes/rightbar.php')?>
<?php include('includes/scripts.php')?>

<script src="https://cdn.datatables.net/1.13.8/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.13.8/js/dataTables.bootstrap5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/2.4.2/js/dataTables.buttons.min.js"></script>
<script src="https://cdn.datatables.net/buttons/2.4.2/js/buttons.html5.min.js"></script>

</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: orders-manage.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation