Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/college/store/narumalar/users

Free Space:

10.26 TB

🔧 Quick Actions

✏️ Editing: viewer.php

<?php
declare(strict_types=1);
session_start();

require_once __DIR__ . '/../includes/config.php'; // db() + esc()

if (empty($_SESSION['user']['id'])) {
  header('Location: /login.php');
  exit;
}

$conn   = db();
$user   = $_SESSION['user'];
$uid    = (int)$user['id'];
$bookId = isset($_GET['b']) ? (int)$_GET['b'] : 0;
$token  = (string)($_GET['t'] ?? '');

/* ---------- Config / helpers ---------- */
if (!defined('SIGNING_SECRET')) {
  // Put a long random secret in includes/config.php in production!
  define('SIGNING_SECRET', 'change-this-to-a-long-random-secret');
}
function b64u_decode(string $s): string {
  $pad = strlen($s) % 4; if ($pad) $s .= str_repeat('=', 4 - $pad);
  return base64_decode(strtr($s, '-_', '+/')) ?: '';
}
function verify_token(string $token, int $userId, int $bookId): bool {
  $raw = b64u_decode($token);
  if (!$raw || substr_count($raw, ':') < 3) return false;
  [$u, $b, $exp, $sig] = explode(':', $raw, 4);
  if ((int)$u !== $userId || (int)$b !== $bookId) return false;
  if ((int)$exp < time()) return false;
  $payload = $u . ':' . $b . ':' . $exp;
  $calc    = hash_hmac('sha256', $payload, SIGNING_SECRET);
  return hash_equals($calc, $sig);
}

/* ---------- Validate inputs ---------- */
if ($bookId <= 0 || $token === '' || !verify_token($token, $uid, $bookId)) {
  http_response_code(403);
  echo 'Invalid or expired token.';
  exit;
}

/* ---------- Verify ownership (user must own the book) ---------- */
$stmt = $conn->prepare("
  SELECT b.id, b.name
  FROM orders o
  JOIN order_items oi ON oi.order_id = o.id
  JOIN books b ON b.id = oi.book_id
  WHERE o.user_id = ? AND b.id = ?
  LIMIT 1
");
$stmt->bind_param('ii', $uid, $bookId);
$stmt->execute();
$book = $stmt->get_result()->fetch_assoc();
$stmt->close();

if (!$book) {
  http_response_code(403);
  echo 'Access denied: you do not own this book.';
  exit;
}

$title     = (string)$book['name'];
$streamUrl = '/users/stream.php?b=' . $bookId . '&t=' . urlencode($token);
?>
<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width,initial-scale=1" />
  <title><?= esc($title) ?> — Reader</title>
  <meta name="referrer" content="no-referrer" />
  <link rel="icon" href="/assets/fav/favicon-32x32.png" type="image/png">
  <script src="https://cdn.jsdelivr.net/npm/pdfjs-dist@4.3.136/build/pdf.min.js"></script>
  <style>
    :root { --bar:#0f172a; --fg:#fff; --muted:#cbd5e1; }
    html, body { height:100%; margin:0; background:#0b1220; }
    .topbar {
      position:fixed; inset:0 0 auto 0; height:56px; display:flex; align-items:center; gap:12px;
      background:var(--bar); color:var(--fg); padding:0 12px; z-index:20; box-shadow:0 1px 0 rgba(255,255,255,.06);
    }
    .topbar .title { font-weight:700; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
    .btn {
      height:34px; padding:0 10px; border-radius:8px; border:1px solid rgba(255,255,255,.12);
      background:rgba(255,255,255,.06); color:#fff; cursor:pointer; display:inline-flex; align-items:center; gap:6px;
    }
    .btn:hover { background:rgba(255,255,255,.12); }
    .btn[disabled]{ opacity:.5; cursor:not-allowed; }
    .spacer { flex:1; }
    .viewer {
      position:fixed; inset:56px 0 0 0; overflow:auto; padding:24px;
      display:flex; flex-direction:column; align-items:center; gap:16px;
    }
    canvas { background:#111827; border-radius:12px; box-shadow:0 1px 0 rgba(255,255,255,.05); }
    .page-num { color:var(--muted); font-size:12px; margin-top:-8px; }
    .viewer, .viewer * { user-select:none; -webkit-user-select:none; }
    .msg { color:#e2e8f0; margin-top:24px; }
  </style>
</head>
<body oncontextmenu="return false;">

<div class="viewer" id="viewer">
    <div id="status" class="msg">Loading…</div>
  </div>

pdfjsLib.GlobalWorkerOptions.workerSrc = 'https://cdn.jsdelivr.net/npm/pdfjs-dist@4.3.136/build/pdf.worker.min.js';

const FILE_URL  = <?= json_encode($streamUrl, JSON_UNESCAPED_SLASHES) ?>;
    const viewer    = document.getElementById('viewer');
    const statusEl  = document.getElementById('status');
    const curPageEl = document.getElementById('curPage');
    const totalEl   = document.getElementById('totalPages');
    const zoomOut   = document.getElementById('zoomOut');
    const zoomIn    = document.getElementById('zoomIn');
    const zoomLabel = document.getElementById('zoomLabel');
    const prevBtn   = document.getElementById('prev');
    const nextBtn   = document.getElementById('next');

let pdfDoc = null;
    let scale = 1.0;

function setZoomLabel() { zoomLabel.textContent = Math.round(scale * 100) + '%'; }

async function renderPage(num) {
      const page = await pdfDoc.getPage(num);
      const viewport = page.getViewport({ scale });

const wrap = document.createElement('div');
      wrap.style.display = 'flex';
      wrap.style.flexDirection = 'column';
      wrap.style.alignItems = 'center';

const canvas = document.createElement('canvas');
      const ctx = canvas.getContext('2d', { alpha: false });
      canvas.width  = Math.floor(viewport.width);
      canvas.height = Math.floor(viewport.height);

wrap.appendChild(canvas);
      const label = document.createElement('div');
      label.className = 'page-num';
      label.textContent = 'Page ' + num;
      wrap.appendChild(label);

viewer.appendChild(wrap);

await page.render({ canvasContext: ctx, viewport }).promise;
    }

async function renderAll() {
      const np = pdfDoc.numPages;
      viewer.innerHTML = '';
      for (let i = 1; i <= np; i++) {
        await renderPage(i);
      }
      curPageEl.textContent = '1';
      totalEl.textContent   = String(np);
    }

zoomOut.addEventListener('click', async () => {
      scale = Math.max(0.5, scale - 0.1);
      setZoomLabel(); await renderAll();
    });
    zoomIn.addEventListener('click', async () => {
      scale = Math.min(2.5, scale + 0.1);
      setZoomLabel(); await renderAll();
    });
    prevBtn.addEventListener('click', () => {
      let cur = parseInt(curPageEl.textContent || '1', 10);
      if (cur > 1) scrollToPage(--cur);
    });
    nextBtn.addEventListener('click', () => {
      let cur = parseInt(curPageEl.textContent || '1', 10);
      if (cur < pdfDoc.numPages) scrollToPage(++cur);
    });

viewer.addEventListener('scroll', () => {
      const ch = viewer.clientHeight;
      let cur = 1;
      Array.from(viewer.children).forEach((wrap, idx) => {
        const rect = wrap.getBoundingClientRect();
        const top = rect.top - 56;
        if (top < ch * 0.5) cur = idx + 1;
      });
      curPageEl.textContent = String(cur);
    });

(async function init() {
      try {
        // Prefetch with credentials so we can show server error text if any
        const res = await fetch(FILE_URL, { credentials: 'include' });
        if (!res.ok) {
          const txt = await res.text();
          statusEl.textContent = 'Failed to load document: ' + (txt || ('HTTP ' + res.status));
          return;
        }
        const blob = await res.blob();
        statusEl.remove();

const buf = await blob.arrayBuffer();
        pdfDoc = await pdfjsLib.getDocument({ data: buf }).promise;

totalEl.textContent = String(pdfDoc.numPages);
        setZoomLabel();
        await renderAll();
      } catch (e) {
        console.error(e);
        statusEl.textContent = 'Failed to load document.';
      }
    })();
  </script>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: viewer.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation