Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/finance

Free Space:

10.28 TB

🔧 Quick Actions

✏️ Editing: save-investment.php

<?php
// Start session
session_start();

// Include database connection
include 'includes/db.php';

// Check if finance is selected
if (!isset($_SESSION['finance_id']) || $_SESSION['finance_id'] <= 0) {
    $_SESSION['error'] = "Please select a finance first.";
    header("Location: investments.php");
    exit;
}

// Check if form is submitted
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    // Get and sanitize form data
    $finance_id = intval($_SESSION['finance_id']);
    $investment_name = trim($_POST['investment_name'] ?? '');
    $amount = floatval($_POST['amount'] ?? 0);
    $investment_date = trim($_POST['investment_date'] ?? '');
    $category = trim($_POST['category'] ?? '');
    $remark = trim($_POST['remark'] ?? '');

// Validate required fields
    if (empty($investment_name) || $amount <= 0 || empty($investment_date) || empty($category)) {
        $_SESSION['error'] = "All required fields must be filled correctly.";
        header("Location: investments.php");
        exit;
    }

// Validate date format
    if (!preg_match('/^\d{4}-\d{2}-\d{2}$/', $investment_date)) {
        $_SESSION['error'] = "Invalid date format.";
        header("Location: investments.php");
        exit;
    }

// Validate date is not in the future
    if (strtotime($investment_date) > strtotime(date('Y-m-d'))) {
        $_SESSION['error'] = "Investment date cannot be in the future.";
        header("Location: investments.php");
        exit;
    }

// Validate category
    $valid_categories = ['Fixed Deposit', 'Mutual Fund', 'Stocks', 'Real Estate', 'Gold', 'Bonds', 'Other'];
    if (!in_array($category, $valid_categories)) {
        $_SESSION['error'] = "Invalid category selected.";
        header("Location: investments.php");
        exit;
    }

// Check if finance_id exists in finance table
    $sql_check_finance = "SELECT id FROM finance WHERE id = ?";
    $stmt_check = $conn->prepare($sql_check_finance);
    $stmt_check->bind_param("i", $finance_id);
    $stmt_check->execute();
    $result_check = $stmt_check->get_result();
    
    if ($result_check->num_rows === 0) {
        $_SESSION['error'] = "Invalid finance selected. Please select a valid finance.";
        header("Location: investments.php");
        exit;
    }
    $stmt_check->close();

// Insert investment using prepared statement
    $sql = "INSERT INTO investments (finance_id, investment_name, amount, investment_date, category, remark) VALUES (?, ?, ?, ?, ?, ?)";
    $stmt = $conn->prepare($sql);
    
    if (!$stmt) {
        $_SESSION['error'] = "Database error: " . $conn->error;
        header("Location: investments.php");
        exit;
    }

$stmt->bind_param("isdsss", $finance_id, $investment_name, $amount, $investment_date, $category, $remark);
    
    if ($stmt->execute()) {
        $_SESSION['success'] = "Investment added successfully!";
    } else {
        $_SESSION['error'] = "Error adding investment: " . $stmt->error;
    }

$stmt->close();
    $conn->close();
    
    header("Location: investments.php");
    exit;
} else {
    $_SESSION['error'] = "Invalid request method.";
    header("Location: investments.php");
    exit;
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: save-investment.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation