Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.54.1.lve.el8.x86_64

PHP Version:

7.3.33

User:

u435171512

Directory:

/home/u435171512/domains/demo.sigmacomputers.in/public_html/kidscolorchamp/admin

Free Space:

4.11 TB

🔧 Quick Actions

✏️ Editing: prize_gallery.php

<?php
session_start();
ob_start();
include("config/db.php");	
include_once 'functions/processes.php';
include 'functions/pagination.class.php';
$Login_Process = new Login_Process;
$Login_Process->check_status($_SERVER['SCRIPT_NAME']);

if($_SESSION['user_level'] >= 5)
{
	$smarty->assign('admin','Web Admin');
	
	$where='order by sort_order';
}
else
{
	$where='WHERE admin_menu.status=1 order by sort_order';
}

// table
$TABLE_PRIZE_GALLERY=$smarty->getTemplateVars('TABLE_PRIZE_GALLERY');

$TABLE_GALLERY_SETTINGS=$smarty->getTemplateVars('TABLE_GALLERY_SETTINGS');
$TABLE_ADMIN_MENU=$smarty->getTemplateVars('TABLE_ADMIN_MENU');
$TABLE_STATUS=$smarty->getTemplateVars('TABLE_STATUS');
$TABLE_EVENT_LIST=$smarty->getTemplateVars('TABLE_EVENT_LIST');

// menu 
 $sql_menu = "SELECT admin_menu_id, menu_name, menu_link, sort_order, status_name FROM ".$TABLE_ADMIN_MENU." LEFT JOIN ".$TABLE_STATUS." ON  ".$TABLE_ADMIN_MENU.".status=".$TABLE_STATUS.".status ".$where."  ";
 
$result_menu = mysqli_query($_SESSION['con'],$sql_menu) or die('Query failed.'); 
	
while($row_menu = mysqli_fetch_array($result_menu))
{
	$menu[] = $row_menu; 
}
$smarty->assign('menu',$menu);	
// menu

// sortby dropdown 
	$sql_filter = "SELECT distinct title, event_list_id FROM ".$TABLE_EVENT_LIST." where status_id='1' GROUP BY title order by title asc ";
	$result_filter = mysqli_query($_SESSION['con'],$sql_filter) or die('Query failed.'); 
	while($row_filter = mysqli_fetch_array($result_filter))
	{
		$datafilter[] = $row_filter; 
	}
	$smarty->assign('datafilter',$datafilter);
// end dropdown

// select box condition only
$eid2=$_GET['gid'];
$smarty->assign('eid2',$eid2);

// add entry
if($_GET['action']=='add')
{	
	if($_GET['event']=="save")	
	{		
		$smarty->display("prize_gallery/prize_gallery_form.tpl");	
		
		// file upload
			
			// This variable is used as a flag. The value is initialized with 0 (meaning no error found)
			//and it will be changed to 1 if an errro occures. If the error occures the file will not be uploaded.
			$errors=0;
			// checks if the form has been submitted

if(isset($_FILES['files']['tmp_name']))
			{
				//reads the name of the file the user submitted for uploading
				$image=$_FILES['files']['tmp_name'];
		
				// Number of uploaded files
				 $num_files = count($_FILES['files']['tmp_name']);
				 
				 
					$unique_qry = "SELECT * FROM prize_gallery order by unique_id desc limit 1 ";
					$unique_res = mysqli_query($_SESSION['con'],$unique_qry) or die('Query failed.'); 
					
					while($unique_row = mysqli_fetch_array($unique_res))
					{
						$unique_id=$unique_row['unique_id'];
					}	 
							 	
				 	if($unique_id=="")
					{
						$unique_id=1;
					}else
					{
						$unique_id=$unique_id+1;
					}
				
				/** loop through the array of files ***/
				for($i=0; $i < $num_files;$i++) 
				{
					// get the original name of the file from the clients machine
					  $filename = time().'_'.stripslashes($_FILES['files']['name'][$i]);
									
					// get the extension of the file in a lower case format
					
					$extension = $Login_Process->getExtension($filename);
					$extension = strtolower($extension);
					// if it is not a known extension, we will suppose it is an error, print an error message
					//and will not upload the file, otherwise we continue
					if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "JPG") && ($extension != "JPEG") && ($extension != "PNG") )
					{
						$res="<font color=red><h1>Unknown extension!</h1></font>";
						$errors=1;
						$smarty->assign('res',$res);
					}
					else
					{
						// get the size of the image in bytes
						// $_FILES[\'image\'][\'tmp_name\'] is the temporary filename of the file in which the uploaded file was stored on the server
						$size=getimagesize($_FILES['files']['tmp_name'][$i]);
							
						$sizekb=filesize($_FILES['files']['tmp_name'][$i]);
						//compare the size with the maxim size we defined and print error if bigger
						if ($sizekb > MAX_SIZE*1024)
						{
							$res="<font color=red><h1>You have exceeded the size limit!</h1></font>";
							$errors=1;
						}
						//we will give an unique name, for example the time in unix time format
						 $image_name=$filename;
						//the new name will be containing the full path where will be stored (images folder)
						// make directory
						
						if(!empty($_POST['event_id'])){
							$mainPath = "prize_gallery/".$_POST['event_id']."/";
							$main_paths= "prize_gallery/".$_POST['event_id']."/";
						}else{
												
						$mainPath = "prize_gallery/";
						$main_paths= "prize_gallery/";		
						
						}
						$mainPath;
						
						
						if(is_dir($mainPath))
						{ 
							$err ="Exists!"; 
						} 
						else
						{ 
							$err = "Doesn't exist";
							mkdir($mainPath,0777);
							$msg= "created"; 
						}
						//end 
													
						$newname=$mainPath.''.$image_name;
						$new_name=$main_paths.''.$image_name;
						
						$copied = copy($_FILES['files']['tmp_name'][$i], $newname);
						
						//we verify if the image has been uploaded, and print error instead
						if (!$copied)
						{
							$res="<font color=red><h1>Copy unsuccessfull!</h1></font>";
							$errors=1;
							$smarty->assign('res',$res);
						}
						else
						{
							// make thumb directory
							if(!empty($_POST['event_id'])){ 
								$thumbPath = "prize_gallery/".$_POST['event_id']."/thumb/";
								$thumb_paths= "prize_gallery/".$_POST['event_id']."/thumb/";
							
							}else{
								$thumbPath = "prize_gallery/thumb/";
								$thumb_paths= "prize_gallery/thumb/";
							}
							$thumbPath;
							if(is_dir($thumbPath))
							{ 
								$thumb_error= "Exists!"; 
							} 
							else
							{ 
								$thumb_error= "Doesn't exist" ;
								mkdir($thumbPath,0777);
								$thumb_msg= "created"; 
							}
							//end  thumb							
							// the new thumbnail image will be placed in images/thumbs/ folder
							$thumb_name=$thumbPath.''.$image_name;
							$thumbName=$thumb_paths.''.$image_name;
							// call the function that will create the thumbnail. The function will get as parameters
							//the image name, the thumbnail name and the width and height desired for the thumbnail
							$thumb=$Login_Process->make_thumb($newname,$thumb_name,WIDTH,HEIGHT);
						 }							
						 // copy the file to the specified dir 
							
																
						//$gallery_date=$_POST['start_date'];
						//$gallery_date=date('Y-m-d',strtotime($gallery_date));	
	
						$sql = "insert into ".$TABLE_PRIZE_GALLERY." (event_id,sort_order,imgpath,thumbpath,img_des,unique_id) values('".$_POST['event_id']."', '".$_POST['sort_order'][$i]."', '".$new_name."', '".$thumbName."', '".$_POST['image_title'][$i]."', '".$unique_id."')";
						
						
						
						$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 	
											
						
						$res="<font color=green>Inserted Successfully</font>";
						$smarty->assign('res',$res);
						/*** give praise and thanks to the php gods ***/
						$messages[] = $_FILES['files']['name'][$i].' uploaded';
						$smarty->assign('messages',$messages);
																
					header("Location: prize_gallery.php");
				}
			} // if isset files
		} // files end      	
	// file upload end
	}
	else if($_GET['event']=="notsave")	
	{
		// status
		$qry_status = "SELECT * FROM ".$TABLE_STATUS." ";
		$res_status = mysqli_query($_SESSION['con'],$qry_status) or die('Query failed.'); 
		while($row_status = mysqli_fetch_array($res_status))
		{
			$status[] = $row_status; 
		}
		$smarty->assign('status',$status);		
		
		// events
		
		$event_id=$_GET['event_id'];
		$smarty->assign('event_id',$event_id);
		
		
		if($event_id!='')
		{
			$qry_event = "SELECT * FROM event_list where event_list_id='".$event_id."' ";
		
		}
		else
		{
			$qry_event = "SELECT * FROM event_list order by sort_order asc ";
		}
		
		$res_event = mysqli_query($_SESSION['con'],$qry_event) or die('Query failed.'); 
		while($row_event = mysqli_fetch_array($res_event))
		{
			$events2[] = $row_event; 
			
			$event_title=$row_event['title'];
			$event_list_id=$row_event['event_list_id'];
		}
		
		$smarty->assign('events2',$events2);	
		$smarty->assign('event_title',$event_title);	
		$smarty->assign('event_list_id',$event_list_id);
		
		$smarty->display("prize_gallery/prize_gallery_form.tpl");	
	}
}
// update entry
else if($_GET['action']=='edit')
{	
	if($_GET['event']=="save")	
	{
		// edit files		
		// This variable is used as a flag. The value is initialized with 0 (meaning no error found)
		//and it will be changed to 1 if an errro occures. If the error occures the file will not be uploaded.
		$errors=0;
		// checks if the form has been submitted
		if($_FILES['files']['tmp_name']!="")
		{	
				 
			//reads the name of the file the user submitted for uploading
			$image=$_FILES['files']['tmp_name'];
			// Number of uploaded files
			$num_files = count($_FILES['files']['tmp_name']);
			/** loop through the array of files ***/
			// get the original name of the file from the clients machine
			$filename = time().'_'.stripslashes($_FILES['files']['name']);
			// get the extension of the file in a lower case format
			$extension = $Login_Process->getExtension($filename);
			$extension = strtolower($extension);
			// if it is not a known extension, we will suppose it is an error, print an error message
			//and will not upload the file, otherwise we continue
			if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "JPG") && ($extension != "JPEG") && ($extension != "PNG") )
			{
				$res="<font color=red><h1>Unknown extension!</h1></font>";
				$errors=1;
				$smarty->assign('res',$res);
			}
			else
			{
				// get the size of the image in bytes
				// $_FILES[\'image\'][\'tmp_name\'] is the temporary filename of the file in which the uploaded file was stored on the server
				$size=getimagesize($_FILES['files']['tmp_name']);
				$sizekb=filesize($_FILES['files']['tmp_name']);
				//compare the size with the maxim size we defined and print error if bigger
				if ($sizekb > MAX_SIZE*1024)
				{
					$res="<font color=red><h1>You have exceeded the size limit!</h1></font>";
					$errors=1;
				}
				//we will give an unique name, for example the time in unix time format
				$image_name=$filename;
				//the new name will be containing the full path where will be stored (images folder)
				// make directory
				
				$mainPath = "prize_gallery/";
				$main_paths= "prize_gallery/";		
				$mainPath;
				if(is_dir($mainPath))
				{ 
					$err ="Exists!"; 
				} 
				else
				{ 
					$err = "Doesn't exist";
					mkdir($mainPath,0777);
					$msg= "created"; 
				}
				//end 
				
				$newname=$mainPath.''.$image_name;
				$new_name=$main_paths.''.$image_name;
				
				$copied = copy($_FILES['files']['tmp_name'], $newname);
				//we verify if the image has been uploaded, and print error instead
				if (!$copied)
				{
					$res="<font color=red><h1>Copy unsuccessfull!</h1></font>";
					$errors=1;
					$smarty->assign('res',$res);
				}
				else
				{
					// make thumb directory
						  
					$thumbPath = "prize_gallery/thumb/";
					$thumb_paths= "prize_gallery/thumb/";
					$thumbPath;
					if(is_dir($thumbPath))
					{ 
						$thumb_error= "Exists!"; 
					} 
					else
					{ 
						$thumb_error= "Doesn't exist" ;
						mkdir($thumbPath,0777);
						$thumb_msg= "created"; 
					}
					//end  thumb							
					// the new thumbnail image will be placed in images/thumbs/ folder
					$thumb_name=$thumbPath.''.$image_name;
					$thumbName=$thumb_paths.''.$image_name;
					// call the function that will create the thumbnail. The function will get as parameters
					//the image name, the thumbnail name and the width and height desired for the thumbnail
					$thumb=$Login_Process->make_thumb($newname,$thumb_name,WIDTH,HEIGHT);
				}							
				// copy the file to the specified dir 
					
								
				$sql = "update ".$TABLE_PRIZE_GALLERY." set event_id='".$_POST['event_id']."', status_id='".$_POST['status_id']."', sort_order='".$_POST['sort_order']."', imgpath='".$new_name."', thumbpath='".$thumbName."', img_des='".$_POST['img_des']."' where gallery_id='".$_GET['id']."' ";				
				
				
				$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 											
					
				$res="<font color=green>Updated Successfully</font>";
				$smarty->assign('res',$res);
				/*** give praise and thanks to the php gods ***/
				$messages[] = $_FILES['files']['name'].' uploaded';
				$smarty->assign('messages',$messages);
											
				header("Location: prize_gallery.php?gid=".$_GET['gid']."&page=".$_GET['page']);
			} // if isset files
		}
		else
		{		
						
			$sql = "update ".$TABLE_PRIZE_GALLERY." set event_id='".$_POST['event_id']."', status_id='".$_POST['status_id']."', sort_order='".$_POST['sort_order']."', img_des='".$_POST['img_des']."' where gallery_id='".$_GET['id']."' ";	
	
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 											
			
			$res="<font color=green>Updated Successfully</font>";
			$smarty->assign('res',$res);
			/*** give praise and thanks to the php gods ***/
			$smarty->assign('messages',$messages);
									
			header("Location: prize_gallery.php?gid=".$_GET['gid']."&page=".$_GET['page']);
		}
		// edit files	
	}
	else if($_GET['event']=="notsave")	
	{
		$sql = "SELECT * FROM ".$TABLE_PRIZE_GALLERY." where gallery_id='".$_GET['id']."'";	
		$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 
		while($row = mysqli_fetch_array($result))
		{
			 $data[] = $row; 
			$catid=$row['cat_id'];	
		}
		 $catid; // for getting sub category
		$smarty->assign('data',$data);
		
		// get status array 
		$qry_status = "SELECT * FROM ".$TABLE_STATUS." ";
		$res_status = mysqli_query($_SESSION['con'],$qry_status) or die('Query failed.'); 
		while($row_status = mysqli_fetch_array($res_status))
		{
			$status[] = $row_status; 
		}	
		$smarty->assign('status',$status);	
		
		
		
		// events
		$qry_event = "SELECT * FROM event_list ";
		$res_event = mysqli_query($_SESSION['con'],$qry_event) or die('Query failed.'); 
		while($row_event = mysqli_fetch_array($res_event))
		{
			$events2[] = $row_event; 
		}
		$smarty->assign('events2',$events2);		
		
		$smarty->assign('evid',$_GET['gid']);	
		
		
		$smarty->display("prize_gallery/prize_gallery_edit_form.tpl");	
	}
}
// delete record
else if($_GET['action']=='delete')
{	
    // image & thumb image delete 
	
	$sql_del_gall = "SELECT * FROM prize_gallery where gallery_id='".$_GET['id']."' ";
	$result_del_gall = mysqli_query($_SESSION['con'],$sql_del_gall) or die('Query failed.'); 
	while($row_del_gall = mysqli_fetch_array($result_del_gall))
	{
	  	$img=$row_del_gall['imgpath'];
		unlink($img);
		$thumbimg=$row_del_gall['thumbpath']; 
		unlink($thumbimg);
	}
	// end image delete
	
	
	$sql = "delete from prize_gallery where gallery_id='".$_GET['id']."' ";
	$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 		
	header("Location: prize_gallery.php?gid=".$_GET['gid']."&page=".$_GET['page']);		
}
// delete all record
else if($_GET['action']=='viewrecords')
{	
   if(isset($_POST['delete']))
   {
		$count= count($_POST['checkbox']);
		for($i=0;$i<$count;$i++)
		{
			$del_id = $_POST['checkbox'][$i];
			$sql = "delete from ".$TABLE_PRIZE_GALLERY." where gallery_id='".$del_id."' ";
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.');
		}
		// if successful redirect to delete_multiple.php
		if($result)
		{
			header("Location: prize_gallery.php?gid=".$_GET['gid']."&page=".$_GET['page']);		
		}
	}
	
	// disable start
	if(isset($_POST['disable']))
   {
		$count= count($_POST['checkbox']);
		
		for($i=0;$i<$count;$i++)
		{
			$del_id = $_POST['checkbox'][$i];
			$sql = "update ".$TABLE_PRIZE_GALLERY." set status_id=0  where gallery_id='".$del_id."' ";
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.');
		}
		// if successful redirect to delete_multiple.php
		if($result)
		{
			header("Location: prize_gallery.php?gid=".$_GET['gid']."&page=".$_GET['page']);		
		}
	}
	// disable end
	
	
	// enable start
	if(isset($_POST['enable']))
   {
						
		$count= count($_POST['checkbox']);
		
		for($i=0;$i<$count;$i++)
		{
			$del_id = $_POST['checkbox'][$i];
			$sql = "update ".$TABLE_PRIZE_GALLERY." set status_id=1  where gallery_id='".$del_id."' ";
			$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.');
		}
		// if successful redirect to delete_multiple.php
		if($result)
		{
			header("Location: prize_gallery.php?gid=".$_GET['gid']."&page=".$_GET['page']);		
		}
	}
	// enable end
	$smarty->display("prize_gallery/prize_gallery.tpl");	
}
else if($_GET['event_id']!='')
{
	$event_id=$_GET['event_id'];
	
	$sql = "SELECT gallery_id, thumbpath, img_des, sort_order, status_name FROM ".$TABLE_PRIZE_GALLERY." LEFT JOIN ".$TABLE_STATUS." ON ".$TABLE_PRIZE_GALLERY.".status_id=".$TABLE_STATUS.".status where event_id=".$event_id." order by sort_order ";
 
	$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed.'); 
	while($row = mysqli_fetch_array($result))
	{
		$data[] = $row; 				
	}
	$event_id=$_GET['event_id'];
	$smarty->assign('event_id',$event_id);

$smarty->assign('data',$data);	
	
	$smarty->display("prize_gallery/prize_gallery.tpl");	
}
// default display
else
{  
	if(!empty($_GET['gid'])){
		 $sql = "SELECT gallery_id, event_id, thumbpath, img_des, sort_order, status_name FROM ".$TABLE_PRIZE_GALLERY." LEFT JOIN ".$TABLE_STATUS." ON ".$TABLE_PRIZE_GALLERY.".status_id=".$TABLE_STATUS.".status where  event_id = '".$_GET['gid']."'";
	}else{	
	
		$sql = "SELECT gallery_id, event_id, thumbpath, img_des, sort_order, status_name FROM ".$TABLE_PRIZE_GALLERY." LEFT JOIN ".$TABLE_STATUS." ON ".$TABLE_PRIZE_GALLERY.".status_id=".$TABLE_STATUS.".status ";
	}	
 		$result = mysqli_query($_SESSION['con'],$sql) or die('Query failed5.'); 
		while($row = mysqli_fetch_array($result))
		{
			$data[] = $row; 			
		}
	
	
	
	// pg from admin	
	$sql=mysqli_query($_SESSION['con'],"select * from cw_users order by userid desc");
	$r=mysqli_fetch_array($sql);
	$pg_admin=$r['pg_admin'];
	
	
	// pg admin
	
	// Smarty Pagination Script Start 
		
    if (count($data))
	{
    	$pagination = new pagination($data, (isset($_GET['page']) ? $_GET['page'] : 1), $pg_admin);
    	$pagination->setShowFirstAndLast(false);
        $pagination->setMainSeperator('  ');
          // Parse through the pagination class
          $productPages = $pagination->getResults();
          // If we have items 
          if (count($productPages) != 0) 
		  {
          	$pageNumbers = '<div class="numbers">'.$pagination->getLinks($_GET).'</div>';
           	$smarty->assign('dataset',$productPages);	
		    $smarty->assign('pageNumbers',$pageNumbers);		
		  }
    }
		// Smarty Pagination Script End 
		
	$smarty->display("prize_gallery/prize_gallery.tpl");	
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: prize_gallery.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation