Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/rutzotech.com/public_html/ems/superadmin

Free Space:

10.25 TB

🔧 Quick Actions

✏️ Editing: process-employee.php

<?php
include '../db.php';
include 'auth.php';

if (!isset($_SESSION['user_id']) || $_SESSION['user_role'] !== 'admin') {
    header("Location: /ems/superadmin/index.php");
    exit();
}

// Function to generate the next employee ID
function generateEmployeeId($conn) {
    // Get the highest existing employee ID
    $result = $conn->query("SELECT MAX(employee_id) as max_id FROM users WHERE employee_id LIKE 'RZT%'");
    $row = $result->fetch_assoc();
    
    if ($row['max_id']) {
        // Extract the numeric part and increment
        $num = (int) substr($row['max_id'], 3);
        $nextNum = $num + 1;
    } else {
        // Start from 1000 if no records exist
        $nextNum = 1000;
    }
    
    return 'RZT' . $nextNum;
}

// Initialize response
$response = ['success' => false, 'message' => ''];

try {
    // Basic required fields
    $requiredFields = ['name', 'email', 'role', 'join_date', 'status', 'password', 'confirm_password'];
    foreach ($requiredFields as $field) {
        if (empty($_POST[$field])) {
            throw new Exception(ucfirst(str_replace("_", " ", $field)) . " is required");
        }
    }

// If role is employee, then designation is required
    $role = $_POST['role'];
    if (strtolower($role) === 'employee' && empty($_POST['designation'])) {
        throw new Exception("Designation is required for Employee role");
    }

// Password checks
    if ($_POST['password'] !== $_POST['confirm_password']) {
        throw new Exception("Passwords do not match");
    }
    if (strlen($_POST['password']) < 6) {
        throw new Exception("Password must be at least 6 characters");
    }

// Email validation
    $email = $conn->real_escape_string($_POST['email']);
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        throw new Exception("Invalid email format");
    }

// Check if email already exists
    $checkEmail = $conn->query("SELECT id FROM users WHERE email = '$email'");
    if ($checkEmail->num_rows > 0) {
        throw new Exception("Email already exists");
    }

// Handle profile picture upload if exists
    $profilePic = null;
    if (!empty($_FILES['profile_pic']['name'])) {
        $uploadDir = '../uploads/profiles/';
        if (!file_exists($uploadDir)) {
            mkdir($uploadDir, 0777, true);
        }

$fileExt = pathinfo($_FILES['profile_pic']['name'], PATHINFO_EXTENSION);
        $fileName = uniqid() . '.' . strtolower($fileExt);
        $targetPath = $uploadDir . $fileName;

$allowedTypes = ['image/jpeg', 'image/png', 'image/gif'];
        if (!in_array($_FILES['profile_pic']['type'], $allowedTypes)) {
            throw new Exception("Only JPG, PNG, or GIF images are allowed");
        }

if ($_FILES['profile_pic']['size'] > 2 * 1024 * 1024) {
            throw new Exception("Image size exceeds 2MB limit");
        }

if (!move_uploaded_file($_FILES['profile_pic']['tmp_name'], $targetPath)) {
            throw new Exception("Failed to upload profile picture");
        }

$profilePic = $fileName;
    }

// Generate employee ID
    $employeeId = generateEmployeeId($conn);

// Prepare and sanitize data
    $data = [
        'name' => $conn->real_escape_string($_POST['name']),
        'email' => $email,
        'password_hash' => password_hash($_POST['password'], PASSWORD_DEFAULT),
        'phone' => !empty($_POST['phone']) ? $conn->real_escape_string($_POST['phone']) : NULL,
        'dob' => !empty($_POST['dob']) ? $conn->real_escape_string($_POST['dob']) : NULL,
        'address' => !empty($_POST['address']) ? $conn->real_escape_string($_POST['address']) : NULL,
        'employee_id' => $employeeId, // Using the generated employee ID
        'join_date' => $conn->real_escape_string($_POST['join_date']),
        'gender' => !empty($_POST['gender']) ? $conn->real_escape_string($_POST['gender']) : NULL,
        'role' => $conn->real_escape_string($role),
        'status' => $conn->real_escape_string($_POST['status']),
        'profile_pic' => $profilePic
    ];

// Add designation only if role is employee
    if (strtolower($role) === 'employee' && !empty($_POST['designation'])) {
        $data['designation'] = $conn->real_escape_string($_POST['designation']);
    }

// Insert data
    $columns = implode(', ', array_keys($data));
    $values = implode(', ', array_map(function ($v) {
        return $v === NULL ? 'NULL' : "'" . $v . "'";
    }, $data));

$query = "INSERT INTO users ($columns) VALUES ($values)";

if ($conn->query($query)) {
        $response['success'] = true;
        $response['message'] = "Employee added successfully!";
        $response['employee_id'] = $employeeId; // Optionally return the generated ID
    } else {
        if ($profilePic && file_exists("../uploads/profiles/$profilePic")) {
            unlink("../uploads/profiles/$profilePic");
        }
        throw new Exception("Database error: " . $conn->error);
    }

} catch (Exception $e) {
    $response['message'] = $e->getMessage();
}

header('Content-Type: application/json');
echo json_encode($response);
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: process-employee.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation