Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/ems/intern

Free Space:

10.32 TB

🔧 Quick Actions

✏️ Editing: edit-profile.php

<?php
include('config/db.php');

// Validate employee ID
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    header("Location: my-profile.php?error=invalid_id");
    exit;
}

$emp_id = (int)$_GET['id'];

// Fetch employee data with prepared statement
$stmt = $conn->prepare("SELECT * FROM employees WHERE id = ?");
$stmt->bind_param("i", $emp_id);
$stmt->execute();
$result = $stmt->get_result();

if ($result->num_rows === 0) {
    header("Location: employees.php?error=employee_not_found");
    exit;
}

$employee = $result->fetch_assoc();

// Process form submission
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Validate and sanitize inputs
    $name = filter_input(INPUT_POST, 'name', FILTER_SANITIZE_STRING);
    $dob = filter_input(INPUT_POST, 'dob', FILTER_SANITIZE_STRING);
    $email = filter_input(INPUT_POST, 'email', FILTER_VALIDATE_EMAIL);
    $phone = filter_input(INPUT_POST, 'phone', FILTER_SANITIZE_STRING);
    $alt_no = filter_input(INPUT_POST, 'alt_no', FILTER_SANITIZE_STRING) ?? '';
    $address = filter_input(INPUT_POST, 'address', FILTER_SANITIZE_STRING);
    $blood_group = filter_input(INPUT_POST, 'blood_group', FILTER_SANITIZE_STRING) ?? '';
    
    // Validate required fields
    if (empty($name) || empty($email) || empty($phone) || empty($address)) {
        $error = "Please fill all required fields";
    } else {
        // Handle password update
        $password_param = null;
        if (!empty($_POST['password'])) {
            if (strlen($_POST['password']) < 8) {
                $error = "Password must be at least 8 characters long";
            } else {
                $password_param = password_hash($_POST['password'], PASSWORD_DEFAULT);
            }
        }
        
        if (!isset($error)) {
            // Handle file uploads
            $uploadDir = "../uploads/employees/";
            if (!is_dir($uploadDir)) {
                mkdir($uploadDir, 0755, true);
            }
            
            function uploadFile($field, $emp_id, $name, $current_file) {
                global $uploadDir;
                
                if (!empty($_FILES[$field]['name'])) {
                    // Validate file type and size
                    $allowedTypes = ['image/jpeg', 'image/png'];
                    $maxSize = 5 * 1024 * 1024; // 5MB
                    
                    if (!in_array($_FILES[$field]['type'], $allowedTypes) || $_FILES[$field]['size'] > $maxSize) {
                        return false;
                    }
                    
                    $ext = pathinfo($_FILES[$field]['name'], PATHINFO_EXTENSION);
                    $cleanName = preg_replace("/[^a-zA-Z0-9]/", "", $name);
                    $filename = "{$cleanName}_{$emp_id}_{$field}_" . time() . "." . $ext;
                    $targetPath = $uploadDir . $filename;
                    
                    if (move_uploaded_file($_FILES[$field]['tmp_name'], $targetPath)) {
                        // Delete old file if exists
                        if ($current_file && file_exists($current_file)) {
                            unlink($current_file);
                        }
                        return $targetPath;
                    }
                }
                return $current_file;
            }
            
            // Upload profile picture only (since other fields were removed from form)
            $profilepic = uploadFile('profilepic', $emp_id, $name, $employee['profilepic']);
            
            if ($profilepic === false) {
                $error = "Invalid profile picture file type or size (max 5MB allowed)";
            } else {
                // Prepare update query with only the fields present in the form
                $query = "UPDATE employees SET 
                    name = ?, 
                    dob = ?, 
                    phone = ?, 
                    alt_no = ?, 
                    address = ?, 
                    blood_group = ?, 
                    profilepic = ?";
                
                // Add password if provided
                if ($password_param !== null) {
                    $query .= ", password = ?";
                }
                
                $query .= " WHERE id = ?";
                
                // Prepare the statement
                $stmt = $conn->prepare($query);
                if (!$stmt) {
                    $error = "Prepare failed: " . $conn->error;
                } else {
                    // Bind parameters
                    if ($password_param !== null) {
                        $stmt->bind_param(
                            "ssssssssi",
                            $name, $dob, $phone, $alt_no,
                            $address, $blood_group, $profilepic,
                            $password_param, $emp_id
                        );
                    } else {
                        $stmt->bind_param(
                            "sssssssi",
                            $name, $dob, $phone, $alt_no,
                            $address, $blood_group, $profilepic,
                            $emp_id
                        );
                    }
                    
                    // Execute the statement
                    if ($stmt->execute()) {
                        $_SESSION['success'] = "Profile updated successfully!";
                        header("Location: my-profile.php");
                        exit;
                    } else {
                        $error = "Database error: " . $stmt->error;
                    }
                }
            }
        }
    }
}
?>

<!doctype html>
<html lang="en">
<head>
    <title>Admin | Edit Employee</title>
    <?php include('links/head.php'); ?>
    <style>
        .form-container {
            background: #fff;
            padding: 25px;
            border-radius: 8px;
            box-shadow: 0 2px 15px rgba(0,0,0,0.1);
        }
        .section-title {
            color: #2c3e50;
            border-bottom: 2px solid #f1f1f1;
            padding-bottom: 10px;
            margin: 30px 0 20px;
            font-weight: 600;
        }
        .document-preview {
            margin-top: 10px;
        }
        .document-preview a {
            color: #3498db;
            text-decoration: none;
            display: inline-flex;
            align-items: center;
            margin-right: 15px;
            transition: color 0.3s;
        }
        .document-preview a:hover {
            color: #2980b9;
            text-decoration: underline;
        }
        .document-preview i {
            margin-right: 5px;
        }
        .form-group {
            margin-bottom: 20px;
        }
        .form-group label {
            display: block;
            margin-bottom: 8px;
            font-weight: 500;
            color: #555;
        }
        .form-group .required:after {
            content: " *";
            color: #e74c3c;
        }
        .form-control {
            width: 100%;
            padding: 10px 15px;
            border: 1px solid #ddd;
            border-radius: 4px;
            transition: border-color 0.3s;
        }
        .form-control:focus {
            border-color: #3498db;
            box-shadow: 0 0 0 0.2rem rgba(52,152,219,.25);
            outline: 0;
        }
        .btn {
            padding: 10px 20px;
            border-radius: 4px;
            font-weight: 500;
            cursor: pointer;
            transition: all 0.3s;
        }
        .btn-primary {
            background-color: #3498db;
            border: 1px solid #3498db;
            color: white;
        }
        .btn-primary:hover {
            background-color: #2980b9;
            border-color: #2980b9;
        }
        .btn-secondary {
            background-color: #95a5a6;
            border: 1px solid #95a5a6;
            color: white;
        }
        .btn-secondary:hover {
            background-color: #7f8c8d;
            border-color: #7f8c8d;
        }
        .alert {
            padding: 15px;
            margin-bottom: 20px;
            border-radius: 4px;
        }
        .alert-danger {
            background-color: #f8d7da;
            border-color: #f5c6cb;
            color: #721c24;
        }
        .row {
            display: flex;
            flex-wrap: wrap;
            margin: 0 -15px;
        }
        .col-md-6 {
            flex: 0 0 50%;
            max-width: 50%;
            padding: 0 15px;
        }
        @media (max-width: 768px) {
            .col-md-6 {
                flex: 0 0 100%;
                max-width: 100%;
            }
        }
    </style>
</head>

<div class="main-content p-3">
            <div class="page-content">
                <div class="container-fluid">
                    <div class="container-fluid">
                        <div class="row">
                            <div class="col-12">
                                <div class="page-title-box d-flex align-items-center justify-content-between">
                                    <h4 class="mb-0">Edit Employee</h4>
                                </div>
                            </div>
                        </div>

<div class="row">
                            <div class="col-12">
                                <div class="form-container">
                                    <?php if (isset($error)): ?>
                                        <div class="alert alert-danger"><?php echo htmlspecialchars($error); ?></div>
                                    <?php endif; ?>
                                    
                                    <form method="POST" enctype="multipart/form-data">
                                        <h5 class="section-title">Personal Information</h5>
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label class="required">Employee ID</label>
                                                    <input type="text" class="form-control" value="<?php echo htmlspecialchars($employee['emp_id']); ?>" readonly>
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="name" class="required">Full Name</label>
                                                    <input type="text" name="name" class="form-control" value="<?php echo htmlspecialchars($employee['name']); ?>" required>
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="dob" class="required">Date of Birth</label>
                                                    <input type="date" name="dob" class="form-control" value="<?php echo htmlspecialchars($employee['dob']); ?>" required>
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="email" class="required">Email</label>
                                                    <input type="email" name="email" class="form-control" value="<?php echo htmlspecialchars($employee['email']); ?>" readonly>
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="password">Password (Leave blank to keep current)</label>
                                                    <input type="password" name="password" class="form-control" placeholder="Enter new password">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="phone" class="required">Phone Number</label>
                                                    <input type="tel" name="phone" class="form-control" value="<?php echo htmlspecialchars($employee['phone']); ?>" readonly>
                                                </div>
                                            </div>
                                        </div>

<div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="alt_no">Alternative Number</label>
                                                    <input type="tel" name="alt_no" class="form-control" value="<?php echo htmlspecialchars($employee['alt_no']); ?>">
                                                </div>
                                            </div>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="blood_group">Blood Group</label>
                                                    <select name="blood_group" class="form-control">
                                                        <option value="">Select Blood Group</option>
                                                        <?php
                                                        $blood_groups = ['A+', 'A-', 'B+', 'B-', 'AB+', 'AB-', 'O+', 'O-'];
                                                        foreach ($blood_groups as $bg) {
                                                            $selected = ($employee['blood_group'] === $bg) ? 'selected' : '';
                                                            echo "<option value=\"$bg\" $selected>$bg</option>";
                                                        }
                                                        ?>
                                                    </select>
                                                </div>
                                            </div>
                                        </div>

<div class="form-group">
                                            <label for="address" class="required">Address</label>
                                            <textarea name="address" class="form-control" rows="3" required><?php echo htmlspecialchars($employee['address']); ?></textarea>
                                        </div>

<h5 class="section-title">Documents</h5>
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label for="profilepic">Profile Picture</label>
                                                    <?php if (!empty($employee['profilepic'])): ?>
                                                        <div class="document-preview">
                                                            <a href="<?php echo htmlspecialchars($employee['profilepic']); ?>" target="_blank">
                                                                <i class="fas fa-file-image"></i> View Current
                                                            </a>
                                                        </div>
                                                    <?php endif; ?>
                                                    <input type="file" name="profilepic" class="form-control" accept="image/*">
                                                </div>
                                            </div>

</div>

<div class="form-actions">
                                            <button type="submit" class="btn btn-primary">Update Employee</button>
                                            <a href="my-profile.php" class="btn btn-secondary">Cancel</a>
                                        </div>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
            <?php include('includes/footer.php') ?>
        </div>
    </div>

<?php include('includes/rightbar.php') ?>
    
    <div class="rightbar-overlay"></div>

<?php include('links/scripts.php') ?>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: edit-profile.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation