Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/rutzotech.com/public_html/bill

Free Space:

10.26 TB

🔧 Quick Actions

✏️ Editing: saveuser.php

<?php
// saveuser.php
require_once 'db_connection.php';

// Start session
session_start();

header('Content-Type: application/json');

// Debug logging
error_log("saveuser.php called with method: " . $_SERVER['REQUEST_METHOD']);
error_log("POST data: " . print_r($_POST, true));

// Function to validate email
function isValidEmail($email) {
    return filter_var($email, FILTER_VALIDATE_EMAIL);
}

// Function to validate phone
function isValidPhone($phone) {
    return preg_match('/^[0-9]{10}$/', $phone);
}

// Check if request is POST
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['success' => false, 'message' => 'Invalid request method. Use POST.']);
    exit;
}

// Check database connection
if (!$conn) {
    echo json_encode(['success' => false, 'message' => 'Database connection failed']);
    exit;
}

try {
    $conn->begin_transaction();
    
    $response = ['success' => false, 'message' => 'Operation failed'];
    
    // Get data from POST
    $user_id = isset($_POST['user_id']) ? intval($_POST['user_id']) : 0;
    $name = isset($_POST['name']) ? trim($_POST['name']) : '';
    $email = isset($_POST['email']) ? trim($_POST['email']) : '';
    $password = $_POST['password'] ?? '';
    $role = $_POST['role'] ?? 'employee';
    $phone = isset($_POST['phone']) ? trim($_POST['phone']) : '';
    $address = isset($_POST['address']) ? trim($_POST['address']) : '';
    $status = 1; // Default active
    
    error_log("Processing user: Name=$name, Email=$email, UserID=$user_id");
    
    // Validate required fields
    if (empty($name)) {
        throw new Exception('Name is required');
    }
    
    if (empty($email)) {
        throw new Exception('Email is required');
    }
    
    if (!isValidEmail($email)) {
        throw new Exception('Invalid email format');
    }
    
    if (!empty($phone) && !isValidPhone($phone)) {
        throw new Exception('Phone number must be 10 digits');
    }
    
    // Check if email already exists (for new users)
    if ($user_id == 0) {
        $check_stmt = $conn->prepare("SELECT id FROM users WHERE email = ?");
        if (!$check_stmt) {
            throw new Exception('Prepare failed: ' . $conn->error);
        }
        
        $check_stmt->bind_param("s", $email);
        if (!$check_stmt->execute()) {
            throw new Exception('Execute failed: ' . $check_stmt->error);
        }
        
        $check_result = $check_stmt->get_result();
        
        if ($check_result->num_rows > 0) {
            throw new Exception('Email already exists');
        }
        $check_stmt->close();
        
        // For new user, password is required
        if (empty($password)) {
            throw new Exception('Password is required for new users');
        }
        
        if (strlen($password) < 6) {
            throw new Exception('Password must be at least 6 characters');
        }
    }
    
    if ($user_id == 0) {
        // INSERT new user
        $hashed_password = password_hash($password, PASSWORD_DEFAULT);
        
        $stmt = $conn->prepare("INSERT INTO users (name, email, password, role, phone, address, status, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, NOW())");
        if (!$stmt) {
            throw new Exception('Prepare failed: ' . $conn->error);
        }
        
        $stmt->bind_param("ssssssi", $name, $email, $hashed_password, $role, $phone, $address, $status);
        
        if ($stmt->execute()) {
            $new_user_id = $conn->insert_id;
            $response = ['success' => true, 'message' => 'User added successfully', 'user_id' => $new_user_id];
            error_log("User added successfully with ID: $new_user_id");
        } else {
            throw new Exception('Failed to add user: ' . $stmt->error);
        }
        $stmt->close();
    } else {
        // UPDATE existing user
        if (!empty($password)) {
            if (strlen($password) < 6) {
                throw new Exception('Password must be at least 6 characters');
            }
            $hashed_password = password_hash($password, PASSWORD_DEFAULT);
            $stmt = $conn->prepare("UPDATE users SET name = ?, email = ?, password = ?, role = ?, phone = ?, address = ?, updated_at = NOW() WHERE id = ?");
            if (!$stmt) {
                throw new Exception('Prepare failed: ' . $conn->error);
            }
            $stmt->bind_param("ssssssi", $name, $email, $hashed_password, $role, $phone, $address, $user_id);
        } else {
            $stmt = $conn->prepare("UPDATE users SET name = ?, email = ?, role = ?, phone = ?, address = ?, updated_at = NOW() WHERE id = ?");
            if (!$stmt) {
                throw new Exception('Prepare failed: ' . $conn->error);
            }
            $stmt->bind_param("sssssi", $name, $email, $role, $phone, $address, $user_id);
        }
        
        if ($stmt->execute()) {
            $response = ['success' => true, 'message' => 'User updated successfully'];
            error_log("User updated successfully: ID=$user_id");
        } else {
            throw new Exception('Failed to update user: ' . $stmt->error);
        }
        $stmt->close();
    }
    
    $conn->commit();
    
} catch (Exception $e) {
    if (isset($conn) && $conn) {
        $conn->rollback();
    }
    $response = ['success' => false, 'message' => $e->getMessage()];
    error_log("Error in saveuser.php: " . $e->getMessage());
}

echo json_encode($response);

if (isset($conn) && $conn) {
    $conn->close();
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: saveuser.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation