Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.40.1.lve.el8.x86_64

PHP Version:

8.2.27

User:

u176930106

Directory:

/home/u176930106/domains/udan.org.in/public_htmlbkp/webadmin

Free Space:

1.92 TB

🔧 Quick Actions

✏️ Editing: addpdf.php

<?php
ob_start();
session_start();
include("includes/inall.php");
unset($_SESSION['ipage']);
unset($_SESSION['ifield']);
unset($_SESSION['itype']);
$action = isset($_REQUEST['action']) ? $_REQUEST['action'] : 'Add';
$eid = isset($_REQUEST['eid']) ? $_REQUEST['eid'] : '';
$name = isset($_REQUEST['name']) ? $_REQUEST['name'] : '';
$flag = isset($_REQUEST['flag']) ? $_REQUEST['flag'] : '';
$heading = "PDF";
$addpage = "addpdf.php";
$listpage = "viewpdfs.php";
$table = "pdfs";
$pkey = "id";
if (isset($_POST['get_subjects']) && $_POST['get_subjects'] == 1) {
	$subjects = [];
	if (!empty($_POST['course_ids'])) {
		$course_ids = array_map('intval', explode(',', $_POST['course_ids']));
		$conditions = [];
		foreach ($course_ids as $cid) {
			// Match exact number in CSV string
			$conditions[] = "FIND_IN_SET('$cid', course_id)";
		}
		$where = implode(' OR ', $conditions);

$res = mysqli_query($con, "SELECT * FROM `subjects` WHERE `status`='1' AND ($where) ORDER BY `name`");
		while ($row = mysqli_fetch_assoc($res)) {
			$subjects[] = ['id' => $row['id'], 'name' => $row['name']];
		}
	}
	echo json_encode($subjects);
	exit;
}

$_SESSION['ifield'] = array("class", "course", "subject", "topic", "pdflink");
if (isset($_POST['submitin']) && $_POST['submitin'] == "Add") {
	$dt = date("Y-m-d");
	foreach ($_SESSION['ifield'] as $val) {
		$$val = isset($_POST[$val]) ? addslashes(trim($_POST[$val])) : '';
	}
	$insert_sql_data = array(
		'date' => $dt,
		'status' => "1",
		'created_by' => $_SESSION['userid']   // logged-in user ID

);
	foreach ($_SESSION['ifield'] as $val) {
		$insert_sql_data[$val] = $$val;
	}
	$ins_query = tep_db_perform($table, $insert_sql_data, "insert");
	$id = mysqli_insert_id($con);
	if (isset($_FILES['pdf']['name']) && $_FILES['pdf']['name'] != "") {
		$userfile_name = $_FILES['pdf']['name'];
		$userfile_tmp = $_FILES['pdf']['tmp_name'];
		$img = $_FILES['pdf']['tmp_name'];
		$userfile_size = $_FILES['pdf']['size'];
		$userfile_type = $_FILES['pdf']['type'];
		$t = explode(".", $userfile_name);
		if ($t[1] == "pdf" || $t[1] == "PDF") {
			$path = time() . $userfile_name; //original path
			$uppath = "pdf/" . $path;
			move_uploaded_file($_FILES['pdf']['tmp_name'], $uppath);
		}
		//createThumbs("uimages/",$path,"smallimage/",300);
		//unlink($uppath);
		$insert_sql_data = array('pdf' => $path);
		tep_db_perform($table, $insert_sql_data, 'update', $pkey . '=' . $id);
	}
	if ($ins_query) {
		$_SESSION['msg'] = $heading . " is successfully added.";
		header("location:" . $addpage);
		exit();
	} else {
		$_SESSION['msgerr'] = "Some error occured.";
		header("location:" . $addpage);
		exit();
	}
}
if (isset($_POST['submitin']) && $_POST['submitin'] == "Update") {
	foreach ($_SESSION['ifield'] as $val) {
		$$val = isset($_POST[$val]) ? addslashes(trim($_POST[$val])) : '';
	}
	$insert_sql_data = array();
	foreach ($_SESSION['ifield'] as $val) {
		$insert_sql_data[$val] = $$val;
	}
	$insert_sql_data['updated_by'] = $_SESSION['userid'];  // logged-in user ID
	$ins_query = tep_db_perform($table, $insert_sql_data, "update", $pkey . "=" . $eid);
	if (isset($_FILES['pdf']['name']) && $_FILES['pdf']['name'] != "") {
		$userfile_name = $_FILES['pdf']['name'];
		$userfile_tmp = $_FILES['pdf']['tmp_name'];
		$img = $_FILES['pdf']['tmp_name'];
		$userfile_size = $_FILES['pdf']['size'];
		$userfile_type = $_FILES['pdf']['type'];
		$t = explode(".", $userfile_name);
		if ($t[1] == "pdf" || $t[1] == "PDF") {
			$path = time() . $userfile_name; //original path
			$uppath = "pdf/" . $path;
			move_uploaded_file($_FILES['pdf']['tmp_name'], $uppath);
		}
		//createThumbs("uimages/",$path,"smallimage/",300);
		//unlink($uppath);
		$insert_sql_data = array('pdf' => $path);
		tep_db_perform($table, $insert_sql_data, 'update', $pkey . '=' . $eid);
	}
	$flag = "go" . $flag;
	if ($ins_query) {
		$_SESSION['msg'] = $heading . " updation is successful.";
		header("location:" . $listpage . "?name=" . $name . "#" . $flag);
		exit();
	} else {
		$_SESSION['msgerr'] = "Some error occured.";
		header("location:" . $listpage . "?name=" . $name . "#" . $flag);
		exit();
	}
}
if (isset($action) && $action == "Update" && !isset($submitin['submitin']) && $_REQUEST['submitin'] == "") {
	$rowm = mysqli_fetch_object(mysqli_query($con, "select * from `" . $table . "` where `" . $pkey . "`='" . $eid . "'"));
}
include("includes/headermain.php");
?>

<body>
	
	
	<div id="preloader">
		<div class="loader"></div>
	</div>
	
	
	<div class="page-container">
		
		<?php include("includes/leftmenu.php"); ?>
		
		
		<div class="main-content">
			
			<?php include("includes/header.php"); ?>
			
			<div class="main-content-innera">
				
				<div> 
					<div class="col-lg-12 mt-5">
						<div class="card">
							<div class="card-body">
								<h4 class="header-title"><?php print $action; ?> <?php print $heading; ?></h4>
								<form action="#" method="post" name="rform" enctype="multipart/form-data">
									<input type="hidden" name="submitin" value="<?php print $action; ?>">
									<input type="hidden" name="eid" value="<?php print $eid; ?>">
									<input type="hidden" name="name" value="<?php print $name; ?>">
									<input type="hidden" name="flag" value="<?php print $flag; ?>">
									<?php if ($_SESSION['msgerr']) { ?><span class="redtxt"><?php print $_SESSION['msgerr'];
																							$_SESSION['msgerr'] = ""; ?></span>
										<div class="cleaner h10"></div><?php } ?>
									<?php if ($_SESSION['msg']) { ?><span class="grtxt"><?php print $_SESSION['msg'];
																						$_SESSION['msg'] = ""; ?></span>
										<div class="cleaner h10"></div><?php } ?>
									<div class="form-group">
										<label for="example-text-input" class="col-form-label">*Class</label>
										<select class="form-control sphgt" name="class">
											<option value="">Select
											<option value="IX-X" <?php if ($rowm->class == "IX-X") { ?>selected<?php } ?>>IX-X
											<option value="XI-XII" <?php if ($rowm->class == "XI-XII") { ?>selected<?php } ?>>XI-XII
										</select>
									</div>
									<div class="cleaner"></div>
									<div class="form-group">
										<label for="courseSelect" class="col-form-label">*Course</label>
										<select class="form-control sphgt" id="courseSelect" name="tp_type">
											<option value="">Select Course</option>
											<?php
											$res = mysqli_query($con, "SELECT * FROM `categories` WHERE `status`='1' ORDER BY `name`");
											$selectedCourse = isset($rowm->tp_type) ? $rowm->tp_type : '';
											while ($row = mysqli_fetch_array($res)) {
												$selected = ($row['id'] == $selectedCourse) ? 'selected' : '';
												echo '<option value="' . $row['id'] . '" ' . $selected . '>' . $row['name'] . '</option>';
											}
											?>
										</select>
									</div>

<div class="cleaner"></div>
									<div class="form-group">
										<label for="example-text-input" class="col-form-label">Subject</label>
										<select class="form-control sphgt" name="tp_subject" id="tp_subject">
											<option value="">Select</option>
											<?php
											$res = mysqli_query($con, "select * from `subjects` where `status`='1' order by `name`");
											while ($row = mysqli_fetch_array($res)) {
											?>
												<option value="<?php print $row['id']; ?>" <?php if ($row['id'] == $rowm->tp_subject) { ?>selected<?php } ?>><?php print $row['name']; ?></option>
											<?php } ?>
										</select>
									</div>
									<div class="cleaner"></div>
									<div class="form-group">
										<label for="example-text-input" class="col-form-label">*Topic</label>
										<input class="form-control" type="text" name="topic" id="topic" value="<?php print $rowm->topic; ?>" required>
									</div>
									<div class="cleaner"></div>
									<div class="form-group">
										<label for="example-text-input" class="col-form-label">*PDF</label>
										<input class="form-control" type="file" name="pdf" id="pdf" value="<?php print $rowm->pdf; ?>" <?php if ($rowm->pdf == "") { ?>required<?php } ?>>
										<?php if ($rowm->pdf) { ?>
											<a href="pdf/<?php print $rowm->pdf; ?>" target="_new">View PDF</a>
										<?php } ?>
									</div>
									<div class="cleaner"></div>
									<div class="form-group">
										<label for="example-text-input" class="col-form-label">PDF Link</label>
										<input class="form-control" type="text" name="pdflink" id="pdflink" value="<?php print $rowm->pdflink; ?>">
									</div>
									<div class="cleaner"></div>
									<button type="submit" class="btn btn-primary mt-2 pr-4 pl-4">Submit</button>
								</form>
							</div>
						</div>
					</div>
				</div>
				
			</div>
		</div>
		
		<?php include("includes/footer.php"); ?>
		<script>
			document.addEventListener("DOMContentLoaded", function() {
				const courseSelect = document.getElementById("courseSelect");
				const subjectSelect = document.getElementById("tp_subject");

function updateSubjects() {
					const selectedCourse = courseSelect.value;

if (!selectedCourse) {
						subjectSelect.innerHTML = '<option value="">Select</option>';
						return;
					}

fetch(window.location.href, {
							method: "POST",
							headers: {
								'Content-Type': 'application/x-www-form-urlencoded'
							},
							body: "get_subjects=1&course_ids=" + encodeURIComponent(selectedCourse)
						})
						.then(res => res.json())
						.then(data => {
							subjectSelect.innerHTML = '<option value="">Select</option>';
							if (data.length > 0) {
								data.forEach(sub => {
									let opt = document.createElement("option");
									opt.value = sub.id;
									opt.textContent = sub.name;
									subjectSelect.appendChild(opt);
								});
							}
						})
						.catch(err => console.error(err));
				}

courseSelect.addEventListener("change", updateSubjects);
				updateSubjects(); // Initialize on page load
			});
		</script>
	</div>
	
</body>

</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: addpdf.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation