Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.54.1.lve.el8.x86_64

PHP Version:

7.3.33

User:

u435171512

Directory:

/home/u435171512/domains/3dotsarchitect.com/public_html/admin

Free Space:

4.09 TB

🔧 Quick Actions

✏️ Editing: project_gallery.php

<?php 
session_start();
ob_start();
include("config/db.php");	
include_once 'functions/processes.php';
include 'functions/pagination.class.php';
$Login_Process = new Login_Process;
$Login_Process->check_status($_SERVER['SCRIPT_NAME']);

if($_SESSION['user_level'] >= 5)
{
	$smarty->assign('admin','Web Admin');
	
	$where='order by sort_order';
}
else
{
	$where='WHERE admin_menu.status=1 order by sort_order';
}

// table
$TABLE_PROJECT_GALLERY=$smarty->getTemplateVars('TABLE_PROJECT_GALLERY');
$TABLE_SUB_CATEGORY=$smarty->getTemplateVars('TABLE_SUB_CATEGORY');
$TABLE_CATEGORY=$smarty->getTemplateVars('TABLE_CATEGORY');
$TABLE_GALLERY_SETTINGS=$smarty->getTemplateVars('TABLE_GALLERY_SETTINGS');
$TABLE_ADMIN_MENU=$smarty->getTemplateVars('TABLE_ADMIN_MENU');
$TABLE_STATUS=$smarty->getTemplateVars('TABLE_STATUS');
$TABLE_PROJECTS=$smarty->getTemplateVars('TABLE_PROJECTS');

// menu 
 $sql_menu = "SELECT admin_menu_id, menu_name, menu_link, sort_order, status_name FROM ".$TABLE_ADMIN_MENU." LEFT JOIN ".$TABLE_STATUS." ON  ".$TABLE_ADMIN_MENU.".status=".$TABLE_STATUS.".status ".$where."  ";
 
$result_menu = mysqli_query($_SESSION['con'],$sql_menu) or die('Query failed.'); 
	
while($row_menu = mysqli_fetch_array($result_menu))
{
	$menu[] = $row_menu; 
}
$smarty->assign('menu',$menu);	
// menu

//sortby dropdown 
$sql_filter = "SELECT * FROM ".$TABLE_PROJECTS." where status_id='1' ";
 $result_filter = mysqli_query($_SESSION['con'],$sql_filter) or die('Query failed.'); 
 while($row_filter = mysqli_fetch_array($result_filter))
 {
	 $datafilter[] = $row_filter; 
 }
 $smarty->assign('datafilter',$datafilter);
// end dropdown

// select box condition only
$eid2=$_GET['eid'];
$smarty->assign('eid2',$eid2);

// add entry
if($_GET['action']=='add')
{	
	if($_GET['event']=="save")	
	{		
			$errors=0;
			// checks if the form has been submitted

if(isset($_FILES['files']['tmp_name']))
			{
				//reads the name of the file the user submitted for uploading
				$image=$_FILES['files']['tmp_name'];
		
				// Number of uploaded files
				 $num_files = count($_FILES['files']['tmp_name']);
				 
				/** loop through the array of files ***/
				for($i=0; $i < $num_files;$i++) 
				{
					// get the original name of the file from the clients machine
					  //$filename = stripslashes($_FILES['files']['name'][$i]);
					  $filename = time().'_'.str_replace(' ','',$_FILES['files']['name'][$i]);
									
					// get the extension of the file in a lower case format
					
					$extension = $Login_Process->getExtension($filename);
					$extension = strtolower($extension);
					// if it is not a known extension, we will suppose it is an error, print an error message
					//and will not upload the file, otherwise we continue
					if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "JPG") && ($extension != "JPEG") && ($extension != "PNG") )
					{
						$res="<font color=red><h1>Unknown extension!</h1></font>";
						$errors=1;
						$smarty->assign('res',$res);
					}
					else
					{
						// get the size of the image in bytes
						// $_FILES[\'image\'][\'tmp_name\'] is the temporary filename of the file in which the uploaded file was stored on the server
						$size=getimagesize($_FILES['files']['tmp_name'][$i]);
							
						$sizekb=filesize($_FILES['files']['tmp_name'][$i]);
						//compare the size with the maxim size we defined and print error if bigger
						if ($sizekb > MAX_SIZE*1024)
						{
							$res="<font color=red><h1>You have exceeded the size limit!</h1></font>";
							$errors=1;
						}
						//we will give an unique name, for example the time in unix time format
						 $image_name=$filename;
						//the new name will be containing the full path where will be stored (images folder)
						// make directory
												
						$mainPath = "project_gallery/";
						$main_paths= "project_gallery/";		
						$mainPath;
						
						if(is_dir($mainPath))
						{ 
							$err ="Exists!"; 
						} 
						else
						{ 
							$err = "Doesn't exist";
							mkdir($mainPath,0777);
							$msg= "created"; 
						}
						//end 
													
						$newname=$mainPath.''.$image_name;
						$new_name=$main_paths.''.$image_name;
								
						$copied = copy($_FILES['files']['tmp_name'][$i], $newname);
						//we verify if the image has been uploaded, and print error instead
						if (!$copied)
						{
							$res="<font color=red><h1>Copy unsuccessfull!</h1></font>";
							$errors=1;
							$smarty->assign('res',$res);
						}
						else
						{
							// make thumb directory							 
							$thumbPath = "project_gallery/thumb/";
							$thumb_paths= "project_gallery/thumb/";
							$thumbPath;
							if(is_dir($thumbPath))
							{ 
								$thumb_error= "Exists!"; 
							} 
							else
							{ 
								$thumb_error= "Doesn't exist" ;
								mkdir($thumbPath,0777);
								$thumb_msg= "created"; 
							}
							//end  thumb							
							// the new thumbnail image will be placed in images/thumbs/ folder
							$thumb_name=$thumbPath.''.$image_name;
							$thumbName=$thumb_paths.''.$image_name;
							// call the function that will create the thumbnail. The function will get as parameters
							//the image name, the thumbnail name and the width and height desired for the thumbnail
							$thumb=$Login_Process->make_thumb($newname,$thumb_name,WIDTH,HEIGHT);
						 }							
						 // copy the file to the specified dir

$sql = "insert into ".$TABLE_PROJECT_GALLERY." (project_id,sort_order,imgpath,thumbpath,title,status_id) values('".$_POST['event_id']."', '".$_POST['sort_order'][$i]."', '".$new_name."', '".$thumbName."', '".$_POST['image_title'][$i]."','1')";			
						
						
						$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 	
											
						
						$res="<font color=green>Inserted Successfully</font>";
						$smarty->assign('res',$res);
						/*** give praise and thanks to the php gods ***/
						$messages[] = $_FILES['files']['name'][$i].' uploaded';
						$smarty->assign('messages',$messages);
																
					header("Location: project_gallery.php");
				}
			} // if isset files
		} // files end      	
	// file upload end
	}
	else if($_GET['event']=="notsave")	
	{
		// status
		$qry_status = "SELECT * FROM ".$TABLE_STATUS." ";
		$res_status = mysqli_query($_SESSION['con'],$qry_status) or die('Query failed.1'); 
		while($row_status = mysqli_fetch_array($res_status))
		{
			$status[] = $row_status; 
		}
		$smarty->assign('status',$status);		
		
		// events
		
		$event_id=$_GET['event_id'];
		$smarty->assign('event_id',$event_id);
		
		
		if($event_id!='')
		{
			$qry_event = "SELECT * FROM projects where event_list_id='".$event_id."' ";
		
		}
		else
		{
			$qry_event = "SELECT project_id,project_name FROM projects order by sort_order asc";
		}
		
		$res_event = mysqli_query($_SESSION['con'],$qry_event) or die('Query failed2.'); 
		while($row_event = mysqli_fetch_array($res_event))
		{
			$event[] = $row_event; 
			$event_title=$row_event['project_name'];
			$event_list_id=$row_event['project_id'];
		}
		$smarty->assign('events',$event);	
		$smarty->assign('event_title',$event_title);	
		$smarty->assign('event_list_id',$event_list_id);
		
		$smarty->display("project_gallery/project_gallery_form.tpl");	
	}
}
// update entry
else if($_GET['action']=='edit')
{	
	if($_GET['event']=="save")	
	{
		// edit files		
		// This variable is used as a flag. The value is initialized with 0 (meaning no error found)
		//and it will be changed to 1 if an errro occures. If the error occures the file will not be uploaded.
		$errors=0;
		// checks if the form has been submitted
		if($_FILES['files']['tmp_name']!="")
		{	
				 
			//reads the name of the file the user submitted for uploading
			$image=$_FILES['files']['tmp_name'];
			// Number of uploaded files
			$num_files = count($_FILES['files']['tmp_name']);
			/** loop through the array of files ***/
			// get the original name of the file from the clients machine
			//$filename = stripslashes($_FILES['files']['name']);
			$filename = time().'_'.str_replace(' ','',$_FILES['files']['name']);
			// get the extension of the file in a lower case format
			$extension = $Login_Process->getExtension($filename);
			$extension = strtolower($extension);
			// if it is not a known extension, we will suppose it is an error, print an error message
			//and will not upload the file, otherwise we continue
			if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "JPG") && ($extension != "JPEG") && ($extension != "PNG") )
			{
				$res="<font color=red><h1>Unknown extension!</h1></font>";
				$errors=1;
				$smarty->assign('res',$res);
			}
			else
			{
				// get the size of the image in bytes
				// $_FILES[\'image\'][\'tmp_name\'] is the temporary filename of the file in which the uploaded file was stored on the server
				$size=getimagesize($_FILES['files']['tmp_name']);
				$sizekb=filesize($_FILES['files']['tmp_name']);
				//compare the size with the maxim size we defined and print error if bigger
				if ($sizekb > MAX_SIZE*1024)
				{
					$res="<font color=red><h1>You have exceeded the size limit!</h1></font>";
					$errors=1;
				}
				//we will give an unique name, for example the time in unix time format
				$image_name=$filename;
				//the new name will be containing the full path where will be stored (images folder)
				// make directory
				
				$mainPath = "project_gallery/";
				$main_paths= "project_gallery/";		
				$mainPath;
				if(is_dir($mainPath))
				{ 
					$err ="Exists!"; 
				} 
				else
				{ 
					$err = "Doesn't exist";
					mkdir($mainPath,0777);
					$msg= "created"; 
				}
				//end 
				
				$newname=$mainPath.''.$image_name;
				$new_name=$main_paths.''.$image_name;
				
				$copied = copy($_FILES['files']['tmp_name'], $newname);
				//we verify if the image has been uploaded, and print error instead
				if (!$copied)
				{
					$res="<font color=red><h1>Copy unsuccessfull!</h1></font>";
					$errors=1;
					$smarty->assign('res',$res);
				}
				else
				{
					// make thumb directory
						  
					$thumbPath = "project_gallery/thumb/";
					$thumb_paths= "project_gallery/thumb/";
					$thumbPath;
					if(is_dir($thumbPath))
					{ 
						$thumb_error= "Exists!"; 
					} 
					else
					{ 
						$thumb_error= "Doesn't exist" ;
						mkdir($thumbPath,0777);
						$thumb_msg= "created"; 
					}
					//end  thumb							
					// the new thumbnail image will be placed in images/thumbs/ folder
					$thumb_name=$thumbPath.''.$image_name;
					$thumbName=$thumb_paths.''.$image_name;
					// call the function that will create the thumbnail. The function will get as parameters
					//the image name, the thumbnail name and the width and height desired for the thumbnail
					$thumb=$Login_Process->make_thumb($newname,$thumb_name,WIDTH,HEIGHT);
				}							
				// copy the file to the specified dir 
					
								
				$sql = "update ".$TABLE_PROJECT_GALLERY." set project_id='".$_POST['event_id']."', status_id='".$_POST['status_id']."', sort_order='".$_POST['sort_order']."', imgpath='".$new_name."', thumbpath='".$thumbName."', title='".$_POST['img_des']."' where project_gallery_id='".$_GET['id']."' ";				
				
				
				$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 											
					
				$res="<font color=green>Updated Successfully</font>";
				$smarty->assign('res',$res);
				/*** give praise and thanks to the php gods ***/
				$messages[] = $_FILES['files']['name'].' uploaded';
				$smarty->assign('messages',$messages);
											
				header("Location: project_gallery.php");
			} // if isset files
		}
		else
		{		
						
			$sql = "update ".$TABLE_PROJECT_GALLERY." set project_id='".$_POST['event_id']."', status_id='".$_POST['status_id']."', sort_order='".$_POST['sort_order']."', title='".$_POST['img_des']."' where project_gallery_id='".$_GET['id']."' ";	
	
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 											
			
			$res="<font color=green>Updated Successfully</font>";
			$smarty->assign('res',$res);
			/*** give praise and thanks to the php gods ***/
			$smarty->assign('messages',$messages);
									
			header("Location: project_gallery.php");
		}
		// edit files	
	}
	else if($_GET['event']=="notsave")	
	{
		$sql = "SELECT * FROM ".$TABLE_PROJECT_GALLERY." where project_gallery_id='".$_GET['id']."'";	
		$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 
		while($row = mysqli_fetch_array($result))
		{
			 $data[] = $row; 
		}
		 $catid; // for getting sub category
		$smarty->assign('data',$data);
		
		// get status array 
		$qry_status = "SELECT * FROM ".$TABLE_STATUS." ";
		$res_status = mysqli_query($_SESSION['con'],$qry_status) or die('Query failed.'); 
		while($row_status = mysqli_fetch_array($res_status))
		{
			$status[] = $row_status; 
		}	
		$smarty->assign('status',$status);	
		
		
		
		// events
		$qry_event = "SELECT * FROM projects ";
		$res_event = mysqli_query($_SESSION['con'],$qry_event) or die('Query failed2.'); 
		while($row_event = mysqli_fetch_array($res_event))
		{
			$event[] = $row_event; 
			$event_title=$row_event['project_name'];
			$event_list_id=$row_event['project_id'];
		}
		$smarty->assign('events',$event);	
		$smarty->assign('event_title',$event_title);	
		$smarty->assign('event_list_id',$event_list_id);
		
		
		$smarty->display("project_gallery/project_gallery_edit_form.tpl");	
	}
}
// delete record
else if($_GET['action']=='delete')
{	
    // image & thumb image delete 
	
	$sql_del_gall = "SELECT * FROM project_gallery where project_gallery_id='".$_GET['id']."' ";
	$result_del_gall = mysqli_query($_SESSION['con'],$sql_del_gall) or die('Query failed.'); 
	while($row_del_gall = mysqli_fetch_array($result_del_gall))
	{
	  	$img=$row_del_gall['imgpath'];
		unlink($img);
		$thumbimg=$row_del_gall['thumbpath']; 
		unlink($thumbimg);
	}
	// end image delete
	
	
	$sql = "delete from project_gallery where gallery_id='".$_GET['id']."' ";
	$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 		
	header("Location: project_gallery.php?evid=".$_POST['evid']."");		
}
// delete all record
else if($_GET['action']=='viewrecords')
{	
   if(isset($_POST['delete']))
   {
		$count= count($_POST['checkbox']);
		for($i=0;$i<$count;$i++)
		{
			$del_id = $_POST['checkbox'][$i];
			$sql = "delete from ".$TABLE_PROJECT_GALLERY." where project_gallery_id='".$del_id."' ";
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.');
		}
		// if successful redirect to delete_multiple.php
		if($result)
		{
			header("Location: project_gallery.php?evid=".$_POST['evid']."");		
		}
	}
	
	// disable start
	if(isset($_POST['disable']))
   {
		$count= count($_POST['checkbox']);
		
		for($i=0;$i<$count;$i++)
		{
			$del_id = $_POST['checkbox'][$i];
			$sql = "update ".$TABLE_PROJECT_GALLERY." set status_id=0  where project_gallery_id='".$del_id."' ";
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.');
		}
		// if successful redirect to delete_multiple.php
		if($result)
		{
			header("Location: project_gallery.php?evid=".$_POST['evid']."");		
		}
	}
	// disable end
	
	
	// enable start
	if(isset($_POST['enable']))
   {
						
		$count= count($_POST['checkbox']);
		
		for($i=0;$i<$count;$i++)
		{
			$del_id = $_POST['checkbox'][$i];
			$sql = "update ".$TABLE_PROJECT_GALLERY." set status_id=1  where project_gallery_id='".$del_id."' ";
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.');
		}
		// if successful redirect to delete_multiple.php
		if($result)
		{
			header("Location: project_gallery.php?evid=".$_POST['evid']."");		
		}
	}
	// enable end
	$smarty->display("project_gallery/project_gallery.tpl");	
}
else if($_GET['event_id']!='')
{
	$event_id=$_GET['event_id'];
	
	$sql = "SELECT gallery_id, thumbpath, img_des, sort_order, status_name FROM ".$TABLE_PROJECT_GALLERY." LEFT JOIN ".$TABLE_STATUS." ON ".$TABLE_PROJECT_GALLERY.".status_id=".$TABLE_STATUS.".status where project_id=".$event_id." order by sort_order ";
 
	$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 
	while($row = mysqli_fetch_array($result))
	{
		$data[] = $row; 				
	}
	$event_id=$_GET['event_id'];
	$smarty->assign('event_id',$event_id);

$smarty->assign('data',$data);	
	
	$smarty->display("project_gallery/project_gallery.tpl");	
}
// default display
else
{  
	
		
	if($_GET['eid']!='')
	{
		
	 	$sql1 = "SELECT event_list_id FROM event_list where start_date='".$_GET['eid']."' ";
 		$result1 = mysqli_query($_SESSION['con'],$sql1) or die('Query failed.'); 
		while($row1= mysqli_fetch_array($result1))		
		{			
	 		$sql = "SELECT gallery_id, event_id, thumbpath, img_des, sort_order, status_name FROM ".$TABLE_PROJECT_GALLERY." LEFT JOIN ".$TABLE_STATUS." ON ".$TABLE_PROJECT_GALLERY.".status_id=".$TABLE_STATUS.".status where project_id='".$row1['event_list_id']."' ";
			
 			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 
			while($row = mysqli_fetch_array($result))
			{
				$data[] = $row; 			
			}
		}					
	}
	else if($_GET['evid']!='')
	{
		
		$sql2 = "SELECT start_date FROM event_list where event_list_id='".$_GET['evid']."' ";
 		$result2 = mysqli_query($_SESSION['con'],$sql2) or die('Query failed.'); 
		$row2= mysqli_fetch_array($result2);	
	    $startdate=$row2['start_date'];
	
		$sql1 = "SELECT event_list_id FROM event_list where start_date='".$startdate."' ";
 		$result1 = mysqli_query($_SESSION['con'],$sql1) or die('Query failed.'); 
		while($row1= mysqli_fetch_array($result1))		
		{			
	 		$sql = "SELECT gallery_id, event_id, thumbpath, img_des, sort_order, status_name FROM ".$TABLE_PROJECT_GALLERY." LEFT JOIN ".$TABLE_STATUS." ON ".$TABLE_PROJECT_GALLERY.".status_id=".$TABLE_STATUS.".status where project_id='".$row1['event_list_id']."' ";
			
 			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 
			while($row = mysqli_fetch_array($result))
			{
				$data[] = $row; 			
			}
		}				
	}
	else
	{
		if($_GET['gid']!=''){
			
			$sql = "SELECT g.*,p.project_name, status_name FROM ".$TABLE_PROJECT_GALLERY." AS g LEFT JOIN ".$TABLE_STATUS." AS s ON s.status = g.status_id LEFT JOIN projects AS p ON p.project_id = g.project_id where g.project_id = '".$_GET['gid']."' ";
			
		}else{
		
		$sql = "SELECT g.*,p.project_name, status_name FROM ".$TABLE_PROJECT_GALLERY." AS g LEFT JOIN ".$TABLE_STATUS." AS s ON s.status = g.status_id LEFT JOIN projects AS p ON p.project_id = g.project_id";
	}
 		$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 
		while($row = mysqli_fetch_array($result))
		{
			$data[] = $row; 			
		}
	}
	//~ print_r($data);
	//~ exit;
	
	// Smarty Pagination Script Start 
		
    if (count($data))
	{
    	$pagination = new pagination($data, (isset($_GET['page']) ? $_GET['page'] : 1), 10);
    	$pagination->setShowFirstAndLast(false);
        $pagination->setMainSeperator('  ');
          // Parse through the pagination class
          $productPages = $pagination->getResults();
          // If we have items 
          if (count($productPages) != 0) 
		  {
          	$pageNumbers = '<div class="numbers">'.$pagination->getLinks($_GET).'</div>';
           	$smarty->assign('dataset',$productPages);	
		    $smarty->assign('pageNumbers',$pageNumbers);		
		  }
    }
		// Smarty Pagination Script End 
		
	$smarty->display("project_gallery/project_gallery.tpl");	
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: project_gallery.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation