Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/college/store/admin

Free Space:

10.3 TB

🔧 Quick Actions

✏️ Editing: slider-add.php

<?php
// slider-add.php
session_start();
require_once __DIR__ . '/includes/db.php';

// CSRF token
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

function h($v){ return htmlspecialchars($v, ENT_QUOTES, 'UTF-8'); }

// Handle image upload
function save_slide_image(array $file, string $targetDir, array $allowedTypes, int $maxSizeBytes = 5242880) {
    if ($file['error'] !== UPLOAD_ERR_OK) throw new RuntimeException('Upload error (code ' . $file['error'] . ').');
    
    $mime = mime_content_type($file['tmp_name']);
    if (!in_array($mime, $allowedTypes, true)) throw new RuntimeException('Unsupported file type. Only JPEG, PNG, and WebP are allowed.');
    
    if ($file['size'] > $maxSizeBytes) throw new RuntimeException('File too large (max 5MB).');
    
    $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
    $name = pathinfo($file['name'], PATHINFO_FILENAME);
    $safe_name = preg_replace('/[^a-zA-Z0-9_-]/', '', $name) . '-' . uniqid() . '.' . $ext;
    
    if (!is_dir($targetDir)) {
        mkdir($targetDir, 0755, true);
    }
    
    $path = rtrim($targetDir, '/') . '/' . $safe_name;
    if (!move_uploaded_file($file['tmp_name'], $path)) throw new RuntimeException('Failed to move uploaded file.');
    
    return $path;
}

$errors = [];
$success = null;
$form_data = [
    'alt_text' => '',
    'caption_title' => '',
    'caption_text' => '',
    'display_order' => '0',
    'is_active' => '1'
];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // CSRF check
    if (!isset($_POST['csrf_token']) || !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
        $errors[] = 'Invalid form token. Please refresh and try again.';
    }

// Inputs
    $alt_text = trim($_POST['alt_text'] ?? '');
    $caption_title = trim($_POST['caption_title'] ?? '');
    $caption_text = trim($_POST['caption_text'] ?? '');
    $display_order = (int) ($_POST['display_order'] ?? 0);
    $is_active = isset($_POST['is_active']) ? 1 : 0;
    
    // Store form data for repopulation
    $form_data = [
        'alt_text' => $alt_text,
        'caption_title' => $caption_title,
        'caption_text' => $caption_text,
        'display_order' => $display_order,
        'is_active' => $is_active
    ];

// Validation
    if (empty($alt_text)) $errors[] = 'Alt text is required.';
    if (!isset($_FILES['slide_image']) || ($_FILES['slide_image']['error'] ?? UPLOAD_ERR_NO_FILE) === UPLOAD_ERR_NO_FILE) {
        $errors[] = 'Slide image is required.';
    }

if (!$errors) {
        try {
            $image_path = null;
            $imageTypes = ['image/jpeg', 'image/png', 'image/webp'];
            
            // Upload image
            $image_path = save_slide_image($_FILES['slide_image'], 'uploads/slides', $imageTypes);
            
            // Insert into database
            $stmt = $mysqli->prepare(
                "INSERT INTO carousel_slides (image_url, alt_text, caption_title, caption_text, is_active, display_order, created_at) 
                 VALUES (?, ?, ?, ?, ?, ?, NOW())"
            );
            
            if (!$stmt) {
                throw new RuntimeException('Prepare failed: ' . $mysqli->error);
            }
            
            $stmt->bind_param('ssssii', $image_path, $alt_text, $caption_title, $caption_text, $is_active, $display_order);
            
            if ($stmt->execute()) {
                $success = 'Slide added successfully.';
                // Reset form data
                $form_data = [
                    'alt_text' => '',
                    'caption_title' => '',
                    'caption_text' => '',
                    'display_order' => '0',
                    'is_active' => '1'
                ];
                // Reset CSRF to avoid resubmission
                $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
            } else {
                throw new RuntimeException('Execute failed: ' . $stmt->error);
            }
            
            $stmt->close();
            
        } catch (Throwable $e) {
            $errors[] = 'Failed to save slide: ' . htmlspecialchars($e->getMessage());
            // Clean up uploaded file if there was an error
            if (isset($image_path) && file_exists($image_path)) {
                @unlink($image_path);
            }
        }
    }
}
?>
<!doctype html>
<html lang="en">
<?php include('includes/head.php')?>

<div class="row mb-3">
                    <div class="col">
                        <h4 class="mb-0">Add New Carousel Slide</h4>
                        <small class="text-muted">Add a new slide to the homepage carousel</small>
                    </div>
                </div>

<?php if (!empty($errors)): ?>
                    <div class="alert alert-danger">
                        <strong>There were some problems:</strong>
                        <ul class="mb-0">
                            <?php foreach ($errors as $err): ?>
                                <li><?= htmlspecialchars($err) ?></li>
                            <?php endforeach; ?>
                        </ul>
                    </div>
                <?php endif; ?>

<?php if (!empty($success)): ?>
                    <div class="alert alert-success">
                        <?= htmlspecialchars($success) ?>
                        <a href="slider-list.php" class="ms-2">View All Slides</a>
                    </div>
                <?php endif; ?>

<form action="" method="post" enctype="multipart/form-data">
                    <input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
                    
                    <div class="row">
                        <div class="col-xl-8">
                            <div class="card">
                                <div class="card-body">
                                    <div class="mb-3">
                                        <label class="form-label">Slide Image <span class="text-danger">*</span></label>
                                        <input type="file" class="form-control" name="slide_image" accept="image/*" required>
                                        <small class="text-muted">JPEG/PNG/WebP, max 5MB. Recommended size: 1200×600px</small>
                                    </div>

<div class="mb-3">
                                        <label class="form-label">Alt Text <span class="text-danger">*</span></label>
                                        <input type="text" class="form-control" name="alt_text" 
                                               value="<?= h($form_data['alt_text']) ?>" 
                                               placeholder="Description for screen readers" required>
                                    </div>

<div class="mb-3">
                                        <label class="form-label">Caption Title</label>
                                        <input type="text" class="form-control" name="caption_title" 
                                               value="<?= h($form_data['caption_title']) ?>" 
                                               placeholder="Main headline for the slide">
                                    </div>

<div class="mb-3">
                                        <label class="form-label">Caption Text</label>
                                        <textarea class="form-control" name="caption_text" 
                                                  placeholder="Supporting text for the slide" 
                                                  rows="3"><?= h($form_data['caption_text']) ?></textarea>
                                    </div>
                                </div>
                            </div>
                        </div>

<div class="col-xl-4">
                            <div class="card">
                                <div class="card-body">
                                    <div class="mb-3">
                                        <label class="form-label">Display Order</label>
                                        <input type="number" class="form-control" name="display_order" 
                                               value="<?= h($form_data['display_order']) ?>" 
                                               min="0" step="1">
                                        <small class="text-muted">Lower numbers appear first</small>
                                    </div>

<div class="mb-4">
                                        <div class="form-check form-switch">
                                            <input class="form-check-input" type="checkbox" name="is_active" 
                                                   id="is_active" value="1" 
                                                   <?= $form_data['is_active'] ? 'checked' : '' ?>>
                                            <label class="form-check-label" for="is_active">Active</label>
                                        </div>
                                        <small class="text-muted">Inactive slides won't be displayed</small>
                                    </div>

<div class="text-end">
                                        <button type="submit" class="btn btn-primary">
                                            <i class="dripicons-checkmark me-1"></i> Save Slide
                                        </button>
                                        <a href="slider-list.php" class="btn btn-secondary ms-1">Cancel</a>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>
                </form>

</div>
        </div>

<?php include('includes/footer.php')?>
    </div>
</div>

<?php include('includes/rightbar.php')?>
<?php include('includes/scripts.php')?>

</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: slider-add.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation