Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.40.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u530111037

Directory:

/home/u530111037/domains/goodcharacteropc.com/public_html/admin

Free Space:

3.34 TB

🔧 Quick Actions

✏️ Editing: students.php

<?php
require_once __DIR__ . '/../db.php';
require_once './../header.php';

require_admin();

// -------- Helpers ----------
function fetch_schools(mysqli $db): array {
    $rows = [];
    $res = $db->query("SELECT id, name FROM schools ORDER BY name ASC");
    while ($r = $res->fetch_assoc()) $rows[] = $r;
    return $rows;
}

function fetch_student(mysqli $db, int $id): ?array {
    $stmt = $db->prepare("
        SELECT s.*, sc.name AS school_name
        FROM students s
        JOIN schools sc ON sc.id = s.school_id
        WHERE s.id = ?");
    $stmt->bind_param("i", $id);
    $stmt->execute();
    $res = $stmt->get_result();
    return $res->num_rows ? $res->fetch_assoc() : null;
}

// -------- Mode detection ----------
$is_add  = isset($_GET['add']);
$edit_id = isset($_GET['edit']) ? (int)$_GET['edit'] : 0;
$view_id = isset($_GET['view']) ? (int)$_GET['view'] : 0;

// -------- POST handlers (PRG) ----------
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $full_name     = trim($_POST['full_name'] ?? '');
    $student_phone = (int)($_POST['student_phone'] ?? 0);
    $parent_phone  = (int)($_POST['parent_phone'] ?? 0);
    $standard      = trim($_POST['standard']);
    $email         = trim($_POST['email'] ?? '');
    $password      = trim($_POST['password'] ?? '');
    $school_id     = (int)($_POST['school_id'] ?? 0);
    $language      = $_POST['language'] === 'urdu' ? 'urdu' : 'english';
    $active        = ($_POST['active'] ?? 'y') === 'n' ? 'n' : 'y';

$errors = [];
    if ($full_name === '') $errors[] = 'Full name is required';
    if ($standard === '') $errors[] = 'Standard is required';
    if ($email === '') $errors[] = 'Email is required';
    if ($is_add && $password === '') $errors[] = 'Password is required';
    if ($school_id <= 0) $errors[] = 'School is required';

// Handle ID image upload
    $id_image_path = '';
    if ($edit_id) {
        $student = fetch_student($mysqli, $edit_id);
        $id_image_path = $student['id_image'] ?? '';
    }

if (!empty($_FILES['id_image']['name'])) {
        $upload_dir = 'uploads/idcards/';
        if (!is_dir($upload_dir)) mkdir($upload_dir, 0777, true);

$file_name = time() . '_' . basename($_FILES['id_image']['name']);
        $target_file = $upload_dir . $file_name;

if (move_uploaded_file($_FILES['id_image']['tmp_name'], $target_file)) {
            $id_image_path = 'uploads/idcards/' . $file_name;
        } else {
            $errors[] = "Failed to upload ID image";
        }
    }

// Unique email check
    if ($is_add) {
        $stmt = $mysqli->prepare("SELECT id FROM students WHERE email = ? LIMIT 1");
        $stmt->bind_param("s", $email);
        $stmt->execute();
        if ($stmt->get_result()->num_rows) $errors[] = 'Email already exists';
    } elseif ($edit_id) {
        $stmt = $mysqli->prepare("SELECT id FROM students WHERE email = ? AND id <> ? LIMIT 1");
        $stmt->bind_param("si", $email, $edit_id);
        $stmt->execute();
        if ($stmt->get_result()->num_rows) $errors[] = 'Email already exists for another student';
    }

if (!empty($errors)) {
        $msg = urlencode(implode(', ', $errors));
        header("Location: students.php" . ($is_add ? "?add=1&err=$msg" : "?edit=$edit_id&err=$msg"));
        exit;
    }

// Save to DB
    if ($is_add) {
        $password_hash = password_hash($password, PASSWORD_DEFAULT);
        $stmt = $mysqli->prepare("
            INSERT INTO students
              (full_name, student_phone, parent_phone, standard, email, password_hash, school_id, language, active, id_image)
            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
        $stmt->bind_param(
            "siisssisss",
            $full_name, $student_phone, $parent_phone, $standard, $email, $password_hash, $school_id, $language, $active, $id_image_path
        );
        $stmt->execute();

echo "<script>alert('Student created successfully!');</script>";
        echo "<script>location.href = '${base_url}admin/students.php';</script>";

// header("Location: students.php?msg=added");
        exit;
    }

if ($edit_id) {
        if ($password !== '') {
            $password_hash = password_hash($password, PASSWORD_DEFAULT);
            $stmt = $mysqli->prepare("
                UPDATE students
                   SET full_name=?, student_phone=?, parent_phone=?, standard=?, email=?, password_hash=?, school_id=?, language=?, active=?, id_image=?
                 WHERE id=?");
            $stmt->bind_param(
                "siisssisssi",
                $full_name, $student_phone, $parent_phone, $standard, $email, $password_hash, $school_id, $language, $active, $id_image_path, $edit_id
            );
        } else {
            $stmt = $mysqli->prepare("
                UPDATE students
                   SET full_name=?, student_phone=?, parent_phone=?, standard=?, email=?, school_id=?, language=?, active=?, id_image=?
                 WHERE id=?");
            $stmt->bind_param(
                "siississsi",
                $full_name, $student_phone, $parent_phone, $standard, $email, $school_id, $language, $active, $id_image_path, $edit_id
            );
        }
        $stmt->execute();

echo "<script>alert('Record updated successfully!');</script>";
        echo "<script>location.href = '${base_url}admin/students.php?view=$edit_id';</script>";
        // header("Location: /admin/students.php?view=$edit_id");
        exit;
    }
}

// Data for views
$schools = fetch_schools($mysqli);
$msg  = $_GET['msg'] ?? '';
$err  = $_GET['err'] ?? '';

$student = null;
if ($edit_id || $view_id) {
    $student = fetch_student($mysqli, $edit_id ?: $view_id);
    if (!$student) { header("Location: students.php?err=Student+not+found"); exit; }
}

// Students list (index)
$students = [];
if (!$is_add && !$edit_id && !$view_id) {
    $res = $mysqli->query("
        SELECT s.*, sc.name AS school_name
        FROM students s
        JOIN schools sc ON sc.id = s.school_id
        ORDER BY s.id DESC
    ");
    while ($r = $res->fetch_assoc()) $students[] = $r;
}
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Students</title>
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
<link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
<style>
.container-narrow{max-width:1100px}
.select2-container .select2-selection--single{height:38px;}
.select2-selection__rendered{line-height:38px !important;}
.select2-selection__arrow{height:38px !important;}
</style>
</head>
<body class="p-0 pb-3">
<div class="pt-3 container-fluid">

<div class="d-flex justify-content-between align-items-center mb-1">
<h3 class="m-0">
<?php if ($is_add): ?>
  <div id="header" class="mb-1 text-end">
      <a href="students.php?view=list" class="btn btn-outline-secondary" style="padding: 2px 8px !important; border-radius: 50%; background: gray; color: white">←</a>
      <span class="mb-1 fw-bold" style="font-size: 18px;">Students - Create</span>
  </div>
    
<?php elseif ($edit_id): ?>
    <div id="header" class="mb-1 text-end">
        <a href="students.php?view=list" class="btn btn-outline-secondary" style="padding: 2px 8px !important; border-radius: 50%; background: gray; color: white">←</a>
        <span class="mb-1 fw-bold" style="font-size: 18px;">Students - Edit</span>
    </div>
<?php elseif ($view_id): ?>
    <div id="header" class="mb-1 text-end">
        <a href="students.php?view=list" class="btn btn-outline-secondary" style="padding: 2px 8px !important; border-radius: 50%; background: gray; color: white">←</a>
        <span class="mb-1 fw-bold" style="font-size: 18px;">Students - View</span>
    </div>
<?php else: ?>
    
    <div id="header" class="mb-1 text-end">
        <span class="mb-1 fw-bold" style="float: left; font-size: 18px;">Students - List</span>
    </div>
<?php endif; ?>
</h3>
<?php if (!$is_add && !$edit_id && !$view_id): ?>
    <a class="btn btn-sm btn-success" href="students.php?add=1">+ Add Student</a>
<?php endif; ?>
</div>

<?php if ($err): ?>
<div class="alert alert-danger py-2"><?= e($err) ?></div>
<?php endif; ?>

<?php if (!$is_add && !$edit_id && !$view_id): ?>
<div class="card">
  <div class="card-body p-0">
    <input type="text" id="searchBox" class="form-control mb-2" placeholder="Search by student id, name, school, phone, email...">
    <table class="table table-hover align-middle m-0" id="students_table">
      <thead class="table-dark">
        <tr>
          <th>ID</th>
          <th>Name</th>
          <th>School</th>
          <th>Standard</th>
          <th>Student Phone</th>
          <th>Email</th>
          <th>Language</th>
          <th>Active</th>
          <th>ID Card</th>
          <th>Actions</th>
        </tr>
      </thead>
      <tbody>
        <?php if (empty($students)): ?>
          <tr><td colspan="10" class="text-center text-muted py-4">No students found.</td></tr>
        <?php else: foreach ($students as $st): ?>
          <tr>
            <td><?= $st['id'] ?></td>
            <td><?= e($st['full_name']) ?></td>
            <td><?= e($st['school_name']) ?></td>
            <td><?= e($st['standard']) ?></td>
            <td><?= e($st['student_phone']) ?></td>
            <td><?= e($st['email']) ?></td>
            <td><?= ucfirst($st['language']) ?></td>
            <td><?= strtoupper($st['active']) ?></td>
            <td><?= $st['id_image'] ? '<a href="../'.$st['id_image'].'" target="_blank">View</a>' : '-' ?></td>
            <td>
              <a class="btn btn-sm btn-info" href="students.php?view=<?= $st['id'] ?>">View</a>
              <a class="btn btn-sm btn-warning" href="students.php?edit=<?= $st['id'] ?>">Edit</a>
            </td>
          </tr>
        <?php endforeach; endif; ?>
      </tbody>
    </table>
  </div>
</div>
<?php endif; ?>

<?php if ($is_add || $edit_id || $view_id): ?>
<div class="card">
    <div class="card-header">
        <?= $view_id ? 'Student Details' : ($is_add ? 'Add Student' : 'Edit Student') ?>
    </div>
    <div class="card-body">
        <?php if ($view_id): ?>
            <div class="row">
              <div class="col-sm-9">
                <table class="table table-borderless">
                    <tr><th>ID:</th><td><?= $student['id'] ?></td></tr>
                    <tr><th>Name:</th><td><?= e($student['full_name']) ?></td></tr>
                    <tr><th>School:</th><td><?= e($student['school_name']) ?></td></tr>
                    <tr><th>Standard:</th><td><?= e($student['standard']) ?></td></tr>
                    <tr><th>Student Phone:</th><td><?= e($student['student_phone']) ?></td></tr>
                    <tr><th>Parent Phone:</th><td><?= e($student['parent_phone']) ?></td></tr>
                    <tr><th>Email:</th><td><?= e($student['email']) ?></td></tr>
                    <tr><th>Language:</th><td><?= ucfirst($student['language']) ?></td></tr>
                    <tr><th>Active:</th><td><?= strtoupper($student['active']) ?></td></tr>
                </table>
              </div>
              <div class="col-md-3">
                <?php if ($student['id_image']): ?>
                    <div class="text-center mb-3">
                        <img src="<?= './../'.e($student['id_image']) ?>" class="img-fluid rounded" style="height:350px;">
                    </div>
                <?php endif; ?>
              </div>
            </div>

<?php else: ?>
            <form method="post" action="students.php<?= $is_add ? '?add=1' : '?edit=' . $edit_id ?>" enctype="multipart/form-data">
                <div class="row g-3">
                    <div class="col-md-12">
                      <label class="form-label">Student Full Name</label>
                      <input class="form-control" name="full_name" value="<?= $student['full_name'] ?? '' ?>" required>
                    </div>
                    <div class="col-md-6">
                      <label class="form-label">Standard</label>
                      <input class="form-control" name="standard" value="<?= $student['standard'] ?? '' ?>" required>
                    </div>
                    <div class="col-md-6">
                      <label class="form-label">Language</label>
                      <select class="form-select" name="language">
                        <option value="english" <?= ($student['language'] ?? '')==='english'?'selected':''; ?>>English</option>
                        <option value="urdu" <?= ($student['language'] ?? '')==='urdu'?'selected':''; ?>>Urdu</option>
                      </select>
                    </div>
                    <div class="col-md-6">
                      <label class="form-label">Student Phone No</label>
                      <input class="form-control" name="student_phone" type="number" value="<?= $student['student_phone'] ?? '' ?>" required>
                    </div>
                    <div class="col-md-6">
                      <label class="form-label">Parent Phone No</label>
                      <input class="form-control" name="parent_phone" type="number" value="<?= $student['parent_phone'] ?? '' ?>" required>
                    </div>
                    <div class="col-md-6">
                      <label class="form-label">Email</label>
                      <input class="form-control" name="email" type="email" value="<?= $student['email'] ?? '' ?>" required>
                    </div>
                    <div class="col-md-6">
                      <label class="form-label">School</label>
                      <select class="form-select select2" name="school_id" required>
                        <option value="">Select a school…</option>
                        <?php foreach ($schools as $sc): ?>
                          <option value="<?= $sc['id'] ?>" <?= (isset($student['school_id']) && (int)$student['school_id']===(int)$sc['id'])?'selected':''; ?>>
                            <?= e($sc['name']) ?>
                          </option>
                        <?php endforeach; ?>
                      </select>
                    </div>
                    <div class="col-md-12">
                      <label class="form-label">Password <?= $edit_id ? '<small class="text-muted">(leave blank to keep unchanged)</small>' : '' ?></label>
                      <input class="form-control" name="password" type="password" placeholder="<?= $edit_id ? '••••••••' : '' ?>">
                    </div>
                    <div class="col-md-12">
                      <label class="form-label">ID Card Image</label>
                      <input class="form-control" type="file" name="id_image" accept="image/*">
                      <?php if ($edit_id && !empty($student['id_image'])): ?>
                          <small>Current: <a href="<?= './../'.e($student['id_image']) ?>" target="_blank">View</a></small>
                      <?php endif; ?>
                    </div>
                    <div class="col-md-12">
                      <label class="form-label">Active</label>
                      <select class="form-select" name="active">
                        <option value="y" <?= ($student['active'] ?? 'y')==='y'?'selected':''; ?>>Y</option>
                        <option value="n" <?= ($student['active'] ?? '')==='n'?'selected':''; ?>>N</option>
                      </select>
                    </div>
                    <div class="col-md-12">
                        <button class="btn btn-success btn-sm"><?= $is_add ? 'Save' : 'Update' ?></button>
                        <a href="students.php" class="btn btn-danger btn-sm">Cancel</a>
                    </div>
                </div>
            </form>
        <?php endif; ?>
    </div>
</div>
<?php endif; ?>

rows.forEach(row => {
            const studentId = row.cells[0].textContent.toLowerCase();
            const studentName = row.cells[1].textContent.toLowerCase();
            const schoolName = row.cells[2].textContent.toLowerCase();
            const phoneNo = row.cells[4].textContent.toLowerCase();
            const emailId = row.cells[5].textContent.toLowerCase();

if (studentId.includes(searchValue) || studentName.includes(searchValue) || schoolName.includes(searchValue) || phoneNo.includes(searchValue) || emailId.includes(searchValue)) {
                row.style.display = '';
            } else {
                row.style.display = 'none';
            }
        });
    });
    $(function(){ $('.select2').select2({ width: '100%' }); });
</script>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: students.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation