Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/ems/admin

Free Space:

10.26 TB

🔧 Quick Actions

✏️ Editing: edit-employee.php

<?php
session_start();
include('config/db.php');

// Validate employee ID
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    header("Location: employees.php?error=invalid_id");
    exit;
}

$emp_id = (int)$_GET['id'];

// Fetch employee data with prepared statement
$stmt = $conn->prepare("SELECT * FROM employees WHERE id = ?");
$stmt->bind_param("i", $emp_id);
$stmt->execute();
$result = $stmt->get_result();

if ($result->num_rows === 0) {
    header("Location: employees.php?error=employee_not_found");
    exit;
}

$employee = $result->fetch_assoc();

// Process form submission
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Validate and sanitize inputs
    $name = filter_input(INPUT_POST, 'name', FILTER_SANITIZE_STRING);
    $dob = filter_input(INPUT_POST, 'dob', FILTER_SANITIZE_STRING);
    $email = filter_input(INPUT_POST, 'email', FILTER_VALIDATE_EMAIL);
    $phone = filter_input(INPUT_POST, 'phone', FILTER_SANITIZE_STRING);
    $alt_no = filter_input(INPUT_POST, 'alt_no', FILTER_SANITIZE_STRING) ?? '';
    $address = filter_input(INPUT_POST, 'address', FILTER_SANITIZE_STRING);
    $blood_group = filter_input(INPUT_POST, 'blood_group', FILTER_SANITIZE_STRING) ?? '';
    $current_role = filter_input(INPUT_POST, 'current_role', FILTER_SANITIZE_STRING);
    $experience = filter_input(INPUT_POST, 'experience', FILTER_VALIDATE_INT);
    $start_date = !empty($_POST['start_date']) ? $_POST['start_date'] : NULL;
    $end_date = !empty($_POST['end_date']) ? $_POST['end_date'] : NULL;
    $past_role = filter_input(INPUT_POST, 'past_role', FILTER_SANITIZE_STRING) ?? '';
    $aadhar = filter_input(INPUT_POST, 'aadhar', FILTER_SANITIZE_STRING) ?? '';
    $acc_holder = filter_input(INPUT_POST, 'acc_holder', FILTER_SANITIZE_STRING) ?? '';
    $acc_number = filter_input(INPUT_POST, 'acc_number', FILTER_SANITIZE_STRING) ?? '';
    $ifsc = filter_input(INPUT_POST, 'ifsc', FILTER_SANITIZE_STRING) ?? '';
    $bank_name = filter_input(INPUT_POST, 'bank_name', FILTER_SANITIZE_STRING) ?? '';
    $status = filter_input(INPUT_POST, 'status', FILTER_SANITIZE_STRING);
    
    // Validate required fields
    if (empty($name) || empty($email) || empty($phone) || empty($current_role) || empty($status)) {
        $error = "Please fill all required fields";
    } elseif ($experience === false) {
        $error = "Invalid experience value";
    } else {
        // Handle password update
        $password_param = null;
        if (!empty($_POST['password'])) {
            if (strlen($_POST['password']) < 8) {
                $error = "Password must be at least 8 characters long";
            } else {
                $password_param = password_hash($_POST['password'], PASSWORD_DEFAULT);
            }
        }
        
        if (!isset($error)) {
            // Handle file uploads
            $uploadDir = "../uploads/employees/";
            if (!is_dir($uploadDir)) {
                mkdir($uploadDir, 0755, true);
            }
            
            function uploadFile($field, $emp_id, $name, $current_file) {
                global $uploadDir;
                
                if (!empty($_FILES[$field]['name'])) {
                    // Validate file type and size
                    $allowedTypes = ['image/jpeg', 'image/png', 'application/pdf', 'application/msword', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document'];
                    $maxSize = 5 * 1024 * 1024; // 5MB
                    
                    if (!in_array($_FILES[$field]['type'], $allowedTypes) || $_FILES[$field]['size'] > $maxSize) {
                        return false;
                    }
                    
                    $ext = pathinfo($_FILES[$field]['name'], PATHINFO_EXTENSION);
                    $cleanName = preg_replace("/[^a-zA-Z0-9]/", "", $name);
                    $filename = "{$cleanName}_{$emp_id}_{$field}_" . time() . "." . $ext;
                    $targetPath = $uploadDir . $filename;
                    
                    if (move_uploaded_file($_FILES[$field]['tmp_name'], $targetPath)) {
                        // Delete old file if exists
                        if ($current_file && file_exists($current_file)) {
                            unlink($current_file);
                        }
                        return $targetPath;
                    }
                }
                return $current_file;
            }
            
            // Upload files with validation
            $profilepic = uploadFile('profilepic', $emp_id, $name, $employee['profilepic']);
            $resume = uploadFile('resume', $emp_id, $name, $employee['resume']);
            $aadhar_card = uploadFile('aadhar_card', $emp_id, $name, $employee['aadhar_card']);
            $education_cert = uploadFile('education_cert', $emp_id, $name, $employee['education_cert']);
            $other1 = uploadFile('other1', $emp_id, $name, $employee['other1']);
            $other2 = uploadFile('other2', $emp_id, $name, $employee['other2']);
            
            if ($profilepic === false || $resume === false || $aadhar_card === false || 
                $education_cert === false || $other1 === false || $other2 === false) {
                $error = "Invalid file type or size (max 5MB allowed)";
            } else {
                // Prepare update query
                $query = "UPDATE employees SET 
                    name = ?, 
                    dob = ?, 
                    email = ?, 
                    phone = ?, 
                    alt_no = ?, 
                    address = ?, 
                    blood_group = ?, 
                    `current_role` = ?, 
                    experience = ?, 
                    start_date = ?, 
                    end_date = ?, 
                    past_role = ?, 
                    aadhar = ?, 
                    acc_holder = ?, 
                    acc_number = ?, 
                    ifsc = ?, 
                    bank_name = ?, 
                    status = ?, 
                    profilepic = ?, 
                    resume = ?, 
                    aadhar_card = ?, 
                    education_cert = ?, 
                    other1 = ?, 
                    other2 = ?";
                
                // Add password if provided
                if ($password_param !== null) {
                    $query .= ", password = ?";
                }
                
                $query .= " WHERE id = ?";
                
                // Prepare the statement
                $stmt = $conn->prepare($query);
                if (!$stmt) {
                    $error = "Prepare failed: " . $conn->error;
                } else {
                    // Bind parameters
                    if ($password_param !== null) {
                        $stmt->bind_param(
                            "ssssssssissssssssssssssssi",
                            $name, $dob, $email, $phone, $alt_no,
                            $address, $blood_group, $current_role, $experience,
                            $start_date, $end_date, $past_role, $aadhar,
                            $acc_holder, $acc_number, $ifsc, $bank_name,
                            $status, $profilepic, $resume, $aadhar_card,
                            $education_cert, $other1, $other2, $password_param, $emp_id
                        );
                    } else {
                        $stmt->bind_param(
                            "ssssssssisssssssssssssssi",
                            $name, $dob, $email, $phone, $alt_no,
                            $address, $blood_group, $current_role, $experience,
                            $start_date, $end_date, $past_role, $aadhar,
                            $acc_holder, $acc_number, $ifsc, $bank_name,
                            $status, $profilepic, $resume, $aadhar_card,
                            $education_cert, $other1, $other2, $emp_id
                        );
                    }
                    
                    // Execute the statement
                    if ($stmt->execute()) {
                        $_SESSION['success'] = "Employee updated successfully!";
                        header("Location: employees.php");
                        exit;
                    } else {
                        $error = "Database error: " . $stmt->error;
                    }
                }
            }
        }
    }
}
?>

<!doctype html>
<html lang="en">
<head>
    <title>Admin | Edit Employee</title>
    <?php include('links/head.php'); ?>
    <style>
        .form-container {
            background: #fff;
            padding: 25px;
            border-radius: 8px;
            box-shadow: 0 2px 15px rgba(0,0,0,0.1);
        }
        .section-title {
            color: #2c3e50;
            border-bottom: 2px solid #f1f1f1;
            padding-bottom: 10px;
            margin: 30px 0 20px;
            font-weight: 600;
        }
        .document-preview {
            margin-top: 10px;
        }
        .document-preview a {
            color: #3498db;
            text-decoration: none;
            display: inline-flex;
            align-items: center;
            margin-right: 15px;
            transition: color 0.3s;
        }
        .document-preview a:hover {
            color: #2980b9;
            text-decoration: underline;
        }
        .document-preview i {
            margin-right: 5px;
        }
        .form-group {
            margin-bottom: 20px;
        }
        .form-group label {
            display: block;
            margin-bottom: 8px;
            font-weight: 500;
            color: #555;
        }
        .form-group .required:after {
            content: " *";
            color: #e74c3c;
        }
        .form-control {
            width: 100%;
            padding: 10px 15px;
            border: 1px solid #ddd;
            border-radius: 4px;
            transition: border-color 0.3s;
        }
        .form-control:focus {
            border-color: #3498db;
            box-shadow: 0 0 0 0.2rem rgba(52,152,219,.25);
            outline: 0;
        }
        .btn {
            padding: 10px 20px;
            border-radius: 4px;
            font-weight: 500;
            cursor: pointer;
            transition: all 0.3s;
        }
        .btn-primary {
            background-color: #3498db;
            border: 1px solid #3498db;
            color: white;
        }
        .btn-primary:hover {
            background-color: #2980b9;
            border-color: #2980b9;
        }
        .btn-secondary {
            background-color: #95a5a6;
            border: 1px solid #95a5a6;
            color: white;
        }
        .btn-secondary:hover {
            background-color: #7f8c8d;
            border-color: #7f8c8d;
        }
        .alert {
            padding: 15px;
            margin-bottom: 20px;
            border-radius: 4px;
        }
        .alert-danger {
            background-color: #f8d7da;
            border-color: #f5c6cb;
            color: #721c24;
        }
        .row {
            display: flex;
            flex-wrap: wrap;
            margin: 0 -15px;
        }
        .col-md-6 {
            flex: 0 0 50%;
            max-width: 50%;
            padding: 0 15px;
        }
        @media (max-width: 768px) {
            .col-md-6 {
                flex: 0 0 100%;
                max-width: 100%;
            }
        }
    </style>
</head>

<div class="main-content p-3">
            <div class="page-content">
                <div class="container-fluid">
                    <div class="container-fluid">
                        <div class="row">
                            <div class="col-12">
                                <div class="page-title-box d-flex align-items-center justify-content-between">
                                    <h4 class="mb-0">Edit Employee</h4>
                                </div>
                            </div>
                        </div>

<div class="row">
                            <div class="col-12">
                                <div class="form-container">
                                    <?php if (isset($error)): ?>
                                        <div class="alert alert-danger"><?php echo htmlspecialchars($error); ?></div>
                                    <?php endif; ?>
                                    
                                    <form method="POST" enctype="multipart/form-data">
                                        <h5 class="section-title">Personal Information</h5>
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label class="required">Employee ID</label>
                                                    <input type="text" class="form-control" value="<?php echo htmlspecialchars($employee['emp_id']); ?>" readonly>
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="name" class="required">Full Name</label>
                                                    <input type="text" name="name" class="form-control" value="<?php echo htmlspecialchars($employee['name']); ?>" required>
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="dob" class="required">Date of Birth</label>
                                                    <input type="date" name="dob" class="form-control" value="<?php echo htmlspecialchars($employee['dob']); ?>" required>
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="email" class="required">Email</label>
                                                    <input type="email" name="email" class="form-control" value="<?php echo htmlspecialchars($employee['email']); ?>" required>
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="password">Password (Leave blank to keep current)</label>
                                                    <input type="password" name="password" class="form-control" placeholder="Enter new password">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="phone" class="required">Phone Number</label>
                                                    <input type="tel" name="phone" class="form-control" value="<?php echo htmlspecialchars($employee['phone']); ?>" required>
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="alt_no">Alternative Number</label>
                                                    <input type="tel" name="alt_no" class="form-control" value="<?php echo htmlspecialchars($employee['alt_no']); ?>">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="blood_group">Blood Group</label>
                                                    <select name="blood_group" class="form-control">
                                                        <option value="">Select Blood Group</option>
                                                        <?php
                                                        $blood_groups = ['A+', 'A-', 'B+', 'B-', 'AB+', 'AB-', 'O+', 'O-'];
                                                        foreach ($blood_groups as $bg) {
                                                            $selected = ($employee['blood_group'] === $bg) ? 'selected' : '';
                                                            echo "<option value=\"$bg\" $selected>$bg</option>";
                                                        }
                                                        ?>
                                                    </select>
                                                </div>
                                            </div>
                                        </div>

<div class="form-group">
                                            <label for="address" class="required">Address</label>
                                            <textarea name="address" class="form-control" rows="3" required><?php echo htmlspecialchars($employee['address']); ?></textarea>
                                        </div>

<h5 class="section-title">Employment Details</h5>
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
    <label for="current_role" class="required">Current Role</label>
    <select name="current_role" class="form-control" required>
        <option value="">Select Role</option>
        <?php
        // Fetch roles from the database
        $query = "SELECT role_id, role_name FROM roles ORDER BY role_name ASC";
        $result = mysqli_query($conn, $query);
        while ($row = mysqli_fetch_assoc($result)) {
            $selected = ($employee['current_role'] == $row['role_name']) ? 'selected' : '';
            echo '<option value="' . $row['role_name'] . '" ' . $selected . '>' . htmlspecialchars($row['role_name']) . '</option>';
        }
        ?>
    </select>
</div>

</div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="experience" class="required">Experience (years)</label>
                                                    <input type="number" name="experience" class="form-control" value="<?php echo htmlspecialchars($employee['experience']); ?>" required min="0">
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="start_date">Start Date</label>
                                                    <input type="date" name="start_date" class="form-control" value="<?php echo htmlspecialchars($employee['start_date'] ?? ''); ?>">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="end_date">End Date</label>
                                                    <input type="date" name="end_date" class="form-control" value="<?php echo htmlspecialchars($employee['end_date'] ?? ''); ?>">
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="past_role">Past Role</label>
                                                    <input type="text" name="past_role" class="form-control" value="<?php echo htmlspecialchars($employee['past_role']); ?>">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="status" class="required">Status</label>
                                                    <select name="status" class="form-control" required>
                                                        <option value="active" <?php echo ($employee['status'] === 'active') ? 'selected' : ''; ?>>Active</option>
                                                        <option value="inactive" <?php echo ($employee['status'] === 'inactive') ? 'selected' : ''; ?>>Inactive</option>
                                                    </select>
                                                </div>
                                            </div>
                                        </div>

<h5 class="section-title">Financial Details</h5>
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="aadhar">Aadhar Number</label>
                                                    <input type="text" name="aadhar" class="form-control" value="<?php echo htmlspecialchars($employee['aadhar']); ?>">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="acc_holder">Account Holder Name</label>
                                                    <input type="text" name="acc_holder" class="form-control" value="<?php echo htmlspecialchars($employee['acc_holder']); ?>">
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="acc_number">Account Number</label>
                                                    <input type="text" name="acc_number" class="form-control" value="<?php echo htmlspecialchars($employee['acc_number']); ?>">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="ifsc">IFSC Code</label>
                                                    <input type="text" name="ifsc" class="form-control" value="<?php echo htmlspecialchars($employee['ifsc']); ?>">
                                                </div>
                                            </div>
                                        </div>

<h5 class="section-title">Documents</h5>
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="profilepic">Profile Picture</label>
                                                    <?php if (!empty($employee['profilepic'])): ?>
                                                        <div class="document-preview">
                                                            <a href="<?php echo htmlspecialchars($employee['profilepic']); ?>" target="_blank">
                                                                <i class="fas fa-file-image"></i> View Current
                                                            </a>
                                                        </div>
                                                    <?php endif; ?>
                                                    <input type="file" name="profilepic" class="form-control" accept="image/*">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="resume">Resume</label>
                                                    <?php if (!empty($employee['resume'])): ?>
                                                        <div class="document-preview">
                                                            <a href="<?php echo htmlspecialchars($employee['resume']); ?>" target="_blank">
                                                                <i class="fas fa-file-pdf"></i> View Current
                                                            </a>
                                                        </div>
                                                    <?php endif; ?>
                                                    <input type="file" name="resume" class="form-control" accept=".pdf,.doc,.docx">
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="aadhar_card">Aadhar Card</label>
                                                    <?php if (!empty($employee['aadhar_card'])): ?>
                                                        <div class="document-preview">
                                                            <a href="<?php echo htmlspecialchars($employee['aadhar_card']); ?>" target="_blank">
                                                                <i class="fas fa-id-card"></i> View Current
                                                            </a>
                                                        </div>
                                                    <?php endif; ?>
                                                    <input type="file" name="aadhar_card" class="form-control" accept=".pdf,.jpg,.jpeg,.png">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="education_cert">Education Certificate</label>
                                                    <?php if (!empty($employee['education_cert'])): ?>
                                                        <div class="document-preview">
                                                            <a href="<?php echo htmlspecialchars($employee['education_cert']); ?>" target="_blank">
                                                                <i class="fas fa-certificate"></i> View Current
                                                            </a>
                                                        </div>
                                                    <?php endif; ?>
                                                    <input type="file" name="education_cert" class="form-control" accept=".pdf,.jpg,.jpeg,.png">
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="other1">Other Document 1</label>
                                                    <?php if (!empty($employee['other1'])): ?>
                                                        <div class="document-preview">
                                                            <a href="<?php echo htmlspecialchars($employee['other1']); ?>" target="_blank">
                                                                <i class="fas fa-file-alt"></i> View Current
                                                            </a>
                                                        </div>
                                                    <?php endif; ?>
                                                    <input type="file" name="other1" class="form-control">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="other2">Other Document 2</label>
                                                    <?php if (!empty($employee['other2'])): ?>
                                                        <div class="document-preview">
                                                            <a href="<?php echo htmlspecialchars($employee['other2']); ?>" target="_blank">
                                                                <i class="fas fa-file-alt"></i> View Current
                                                            </a>
                                                        </div>
                                                    <?php endif; ?>
                                                    <input type="file" name="other2" class="form-control">
                                                </div>
                                            </div>
                                        </div>

<div class="form-actions">
                                            <button type="submit" class="btn btn-primary">Update Employee</button>
                                            <a href="employees.php" class="btn btn-secondary">Cancel</a>
                                        </div>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
            <?php include('includes/footer.php') ?>
        </div>
    </div>

<?php include('includes/rightbar.php') ?>
    
    <div class="rightbar-overlay"></div>

<?php include('links/scripts.php') ?>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: edit-employee.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation