Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-570.19.1.el9_6.x86_64

PHP Version:

8.2.28

User:

u802471691

Directory:

/home/u802471691/domains/thetechnozone.in/public_html/admin

Free Space:

9.31 TB

🔧 Quick Actions

✏️ Editing: edit_testimonial.php

<?php
include '../db.php';

$message = '';
$testimonial = null;
$is_edit = false;

if (isset($_GET['id'])) {
    $is_edit = true;
    $id = intval($_GET['id']);
    $sql = "SELECT * FROM testimonials WHERE id = ?";
    $stmt = $conn->prepare($sql);
    $stmt->bind_param("i", $id);
    $stmt->execute();
    $result = $stmt->get_result();
    if ($result->num_rows > 0) {
        $testimonial = $result->fetch_assoc();
    } else {
        $message = "Testimonial not found.";
    }
    $stmt->close();
}

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $name = trim($_POST['name']);
    $designation = trim($_POST['designation']);
    $message_text = trim($_POST['message']);
    $rating = intval($_POST['rating']);
    $status = isset($_POST['status']) ? 1 : 0;
    
    $image_path = $is_edit && isset($testimonial['image']) ? $testimonial['image'] : '';

if (empty($name) || empty($message_text)) {
        $message = "Name and Message are required.";
    } else {
        // Handle file upload
        if (isset($_FILES['image']) && $_FILES['image']['error'] == 0) {
            $target_dir = "../uploads/";
            $target_file = $target_dir . basename($_FILES["image"]["name"]);
            $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));
            
            $check = getimagesize($_FILES["image"]["tmp_name"]);
            if ($check !== false) {
                if ($_FILES["image"]["size"] > 5000000) {
                    $message = "Sorry, your file is too large.";
                } elseif (!in_array($imageFileType, ['jpg', 'png', 'jpeg', 'gif'])) {
                    $message = "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";
                } else {
                    $new_filename = uniqid() . "." . $imageFileType;
                    $target_file = $target_dir . $new_filename;
                    if (move_uploaded_file($_FILES["image"]["tmp_name"], $target_file)) {
                        $image_path = "uploads/" . $new_filename;
                    } else {
                        $message = "Sorry, there was an error uploading your file.";
                    }
                }
            } else {
                $message = "File is not an image.";
            }
        }

if (empty($message)) {
            if ($is_edit) {
                $sql = "UPDATE testimonials SET name = ?, designation = ?, message = ?, rating = ?, image = ?, status = ? WHERE id = ?";
                $stmt = $conn->prepare($sql);
                $stmt->bind_param("sssissi", $name, $designation, $message_text, $rating, $image_path, $status, $id);
            } else {
                $sql = "INSERT INTO testimonials (name, designation, message, rating, image, status) VALUES (?, ?, ?, ?, ?, ?)";
                $stmt = $conn->prepare($sql);
                $stmt->bind_param("sssiis", $name, $designation, $message_text, $rating, $image_path, $status); // status last binding
            }
            
            // Fix binding mismatch for Insert (sssis -> sssisi)
            // Wait, for INSERT: name(s), desig(s), msg(s), rate(i), img(s), stat(i) -> "sssisi"
            
            if (!$is_edit) {
               // Re-prepare for insert to be safe with types
               $stmt = $conn->prepare("INSERT INTO testimonials (name, designation, message, rating, image, status) VALUES (?, ?, ?, ?, ?, ?)");
               $stmt->bind_param("sssiis", $name, $designation, $message_text, $rating, $image_path, $status); // status is int in DB? Tinyint is int. image is string. rating is int.
               // Check bind param types:
               // name: s
               // designation: s
               // message: s
               // rating: i
               // image: s
               // status: i
               // total: sssisi
            }

if ($stmt->execute()) {
                header("Location: manage_testimonials.php?msg=" . ($is_edit ? "Updated successfully" : "Created successfully"));
                exit();
            } else {
                $message = "Error: " . $stmt->error;
            }
            $stmt->close();
        }
    }
}

include 'header.php';
?>

<?php if ($message): ?>
        <div class="mb-4 p-4 rounded <?php echo strpos($message, 'successfully') !== false ? 'bg-green-100 text-green-700' : 'bg-red-100 text-red-700'; ?>">
            <?php echo $message; ?>
        </div>
    <?php endif; ?>

<form method="POST" enctype="multipart/form-data">
        <div class="grid grid-cols-1 md:grid-cols-2 gap-4 mb-4">
            <div>
                <label class="block text-gray-700 font-bold mb-2">Name *</label>
                <input type="text" name="name" value="<?php echo $is_edit ? htmlspecialchars($testimonial['name']) : ''; ?>" class="w-full px-3 py-2 border border-gray-300 rounded focus:ring-red-900 focus:border-red-900" required>
            </div>
            <div>
                <label class="block text-gray-700 font-bold mb-2">Designation</label>
                <input type="text" name="designation" value="<?php echo $is_edit ? htmlspecialchars($testimonial['designation']) : ''; ?>" class="w-full px-3 py-2 border border-gray-300 rounded focus:ring-red-900 focus:border-red-900" placeholder="e.g. CEO, verified customer">
            </div>
        </div>

<div class="mb-4">
            <label class="block text-gray-700 font-bold mb-2">Message *</label>
            <textarea name="message" rows="4" class="w-full px-3 py-2 border border-gray-300 rounded focus:ring-red-900 focus:border-red-900" required><?php echo $is_edit ? htmlspecialchars($testimonial['message']) : ''; ?></textarea>
        </div>

<div class="grid grid-cols-1 md:grid-cols-2 gap-4 mb-4">
            <div>
                <label class="block text-gray-700 font-bold mb-2">Rating (1-5)</label>
                <select name="rating" class="w-full px-3 py-2 border border-gray-300 rounded focus:ring-red-900 focus:border-red-900">
                    <?php for($i=5; $i>=1; $i--): ?>
                        <option value="<?php echo $i; ?>" <?php echo ($is_edit && $testimonial['rating'] == $i) ? 'selected' : ''; ?>><?php echo $i; ?> Stars</option>
                    <?php endfor; ?>
                </select>
            </div>
            <div>
                <label class="block text-gray-700 font-bold mb-2">Status</label>
                <label class="inline-flex items-center mt-2 cursor-pointer">
                    <input type="checkbox" name="status" value="1" class="form-checkbox text-red-900 h-5 w-5" <?php echo (!$is_edit || $testimonial['status'] == 1) ? 'checked' : ''; ?>>
                    <span class="ml-2 text-gray-700">Active</span>
                </label>
            </div>
        </div>

<div class="mb-6">
            <label class="block text-gray-700 font-bold mb-2">User Image</label>
            <?php if ($is_edit && $testimonial['image']): ?>
                <div class="mb-2">
                    <img src="../<?php echo $testimonial['image']; ?>" class="h-16 w-16 rounded-full object-cover border">
                    <p class="text-sm text-gray-500">Current image</p>
                </div>
            <?php endif; ?>
            <input type="file" name="image" accept="image/*" class="w-full px-3 py-2 border border-gray-300 rounded focus:ring-red-900 focus:border-red-900">
        </div>

<div class="flex justify-end space-x-4">
            <a href="manage_testimonials.php" class="bg-gray-500 text-white px-4 py-2 rounded hover:bg-gray-600 transition">Cancel</a>
            <button type="submit" class="bg-red-900 text-white px-4 py-2 rounded hover:bg-red-800 transition">
                <i class="fa-solid fa-save mr-2"></i> <?php echo $is_edit ? 'Update Testimonial' : 'Save Testimonial'; ?>
            </button>
        </div>
    </form>
</div>

<?php include 'footer.php'; ?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: edit_testimonial.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation