Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/finance

Free Space:

10.28 TB

🔧 Quick Actions

✏️ Editing: save-expense.php

<?php
// Start session
session_start();

// Include database connection
include 'includes/db.php';

// Check if finance is selected
if (!isset($_SESSION['finance_id']) || $_SESSION['finance_id'] <= 0) {
    $_SESSION['error'] = "Please select a finance first.";
    header("Location: expenses.php");
    exit;
}

// Check if form is submitted
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    // Get and sanitize form data
    $finance_id = intval($_SESSION['finance_id']);
    $remark = trim($_POST['remark'] ?? '');
    $amount = floatval($_POST['amount'] ?? 0);
    $expense_date = trim($_POST['expense_date'] ?? '');
    $category = trim($_POST['category'] ?? '');

// Validate required fields
    if ($amount <= 0 || empty($expense_date) || empty($category)) {
        $_SESSION['error'] = "All required fields must be filled correctly.";
        header("Location: expenses.php");
        exit;
    }

// Validate date format
    if (!preg_match('/^\d{4}-\d{2}-\d{2}$/', $expense_date)) {
        $_SESSION['error'] = "Invalid date format.";
        header("Location: expenses.php");
        exit;
    }

// Validate date is not in the future
    if (strtotime($expense_date) > strtotime(date('Y-m-d'))) {
        $_SESSION['error'] = "Expense date cannot be in the future.";
        header("Location: expenses.php");
        exit;
    }

// Validate category
    $valid_categories = ['Office Supplies', 'Travel', 'Salary', 'Marketing', 'Utilities', 'Miscellaneous'];
    if (!in_array($category, $valid_categories)) {
        $_SESSION['error'] = "Invalid category selected.";
        header("Location: expenses.php");
        exit;
    }

// Check if finance_id exists in finance table
    $sql_check_finance = "SELECT id FROM finance WHERE id = ?";
    $stmt_check = $conn->prepare($sql_check_finance);
    $stmt_check->bind_param("i", $finance_id);
    $stmt_check->execute();
    $result_check = $stmt_check->get_result();
    
    if ($result_check->num_rows === 0) {
        $_SESSION['error'] = "Invalid finance selected. Please select a valid finance.";
        header("Location: expenses.php");
        exit;
    }
    $stmt_check->close();

// Insert expense using prepared statement
    $sql = "INSERT INTO expenses (finance_id, remark, amount, expense_date, category) VALUES (?, ?, ?, ?, ?)";
    $stmt = $conn->prepare($sql);
    
    if (!$stmt) {
        $_SESSION['error'] = "Database error: " . $conn->error;
        header("Location: expenses.php");
        exit;
    }

$stmt->bind_param("isdss", $finance_id, $remark, $amount, $expense_date, $category);
    
    if ($stmt->execute()) {
        $_SESSION['success'] = "Expense added successfully!";
    } else {
        $_SESSION['error'] = "Error adding expense: " . $stmt->error;
    }

$stmt->close();
    $conn->close();
    
    header("Location: expenses.php");
    exit;
} else {
    $_SESSION['error'] = "Invalid request method.";
    header("Location: expenses.php");
    exit;
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: save-expense.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation