Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/aqua-walrus-487298.hostingersite.com/public_html/admin

Free Space:

8.25 TB

🔧 Quick Actions

✏️ Editing: manage-admins.php

<?php
// File: /esarthi/admin/manage-admins.php (Admin Panel - Admin User Management)

session_start();
// --- 1. SECURITY CHECK ---
// Ensure user is logged in
if (!isset($_SESSION['admin'])) {
    header("Location: login.php");
    exit();
}

require_once("../config/db.php");

$message = "";
$error = false;
$current_admin_email = $_SESSION['admin'];

// Fetch the role of the currently logged-in user (essential for access control)
$q_current_role = $conn->query("SELECT role, admin_id FROM admins WHERE email='$current_admin_email'");
$current_admin_data = $q_current_role->fetch_assoc();
$current_user_role = $current_admin_data['role'] ?? 'ContentManager';
$current_user_id = $current_admin_data['admin_id'] ?? 0;

// Enforce SuperAdmin access for this page
if ($current_user_role !== 'SuperAdmin') {
    header("Location: dashboard.php?msg=" . urlencode("❌ Access Denied: You do not have SuperAdmin permissions to manage other administrators."));
    exit();
}

// --- 2. HANDLE ACTIONS (Activate/Deactivate/Delete) ---
if (isset($_GET['action']) && isset($_GET['id'])) {
    $admin_id = (int)$_GET['id'];
    $action = $conn->real_escape_string($_GET['action']);
    $sql = "";
    
    // Safety check against modifying the current user or the assumed primary admin (ID 1)
    if ($admin_id == $current_user_id) { 
        $error = true;
        $message = "❌ Action Blocked: You cannot modify your own active account status.";
    } elseif ($admin_id === 1) {
         $error = true;
         $message = "❌ Action Blocked: Cannot modify the primary SuperAdmin account (ID 1).";
    } else {
        if ($action == 'deactivate') {
            $sql = "UPDATE admins SET status='inactive' WHERE admin_id=$admin_id";
            $message = "✅ Admin ID #<b>{$admin_id}</b> deactivated successfully.";
        } elseif ($action == 'activate') {
            $sql = "UPDATE admins SET status='active' WHERE admin_id=$admin_id";
            $message = "✅ Admin ID #<b>{$admin_id}</b> activated successfully.";
        } elseif ($action == 'delete') {
            $sql = "DELETE FROM admins WHERE admin_id=$admin_id"; 
            $message = "🗑️ WARNING: Admin ID #<b>{$admin_id}</b> deleted permanently.";
        }
    }
    
    if (!empty($sql) && !$error) {
        if ($conn->query($sql) === FALSE) {
            $error = true;
            $message = "❌ Error processing action: " . $conn->error;
        }
        // Redirect to clear URL parameters
        header("Location: manage-admins.php?msg=" . urlencode($message));
        exit();
    }
}

// --- 3. HANDLE ADD ADMIN FORM SUBMISSION ---
if (isset($_POST['add_admin'])) {
    $full_name = $conn->real_escape_string($_POST['full_name']);
    $email = $conn->real_escape_string($_POST['email']);
    $password = $conn->real_escape_string($_POST['password']);
    $role = $conn->real_escape_string($_POST['role']);
    
    $password_hashed = md5($password); // Using MD5 as per your schema
    $status = 'active';

if (empty($full_name) || empty($email) || empty($password)) {
        $error = true;
        $message = "❌ Error: All fields are mandatory.";
    } else {
        // Check if email already exists
        $q_check = $conn->query("SELECT admin_id FROM admins WHERE email='$email'");
        if ($q_check->num_rows > 0) {
            $error = true;
            $message = "❌ Error: Email already exists in the admin database.";
        } else {
            // --- INSERT NEW ADMIN ---
            $sql = "INSERT INTO admins (full_name, email, password, role, status)
                    VALUES ('$full_name', '$email', '$password_hashed', '$role', '$status')";
            
            if ($conn->query($sql) === TRUE) {
                $message = "✅ Success! Admin <b>{$full_name}</b> added with role <b>{$role}</b>.";
                $_POST = array(); // Clear inputs
                header("Location: manage-admins.php?msg=" . urlencode($message));
                exit();
            } else {
                $error = true;
                $message = "❌ Error: Database insertion failed. " . $conn->error;
            }
        }
    }
}

// Check for redirection message
if (isset($_GET['msg'])) {
    $message = urldecode($_GET['msg']);
    $error = (strpos($message, '❌') !== false || strpos($message, '🗑️') !== false);
}

// --- 4. FETCH ALL ADMINS ---
$q_admins = $conn->query("
    SELECT 
        admin_id, full_name, email, role, status
    FROM admins
    ORDER BY FIELD(role, 'SuperAdmin', 'ContentManager'), status DESC
");

$total_admins = $q_admins->num_rows;

// --- 5. HTML structure and output follow below ---
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Admin Panel - Manage Admin Users</title>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
    <style>
        /* Admin UI Style Consistency */
        body { font-family: 'Poppins', sans-serif; padding: 0; margin: 0; background-color: #f4f4f9; color: #333; }
        .wrapper { padding: 20px 40px; max-width: 1400px; margin: 0 auto; }
        h1, h2 { color: #0f2b46; }
        
        /* Navigation Bar */
        .admin-nav { padding: 10px 0; margin-bottom: 20px; border-bottom: 2px solid #eee; }
        .admin-nav a { 
            color: #555; text-decoration: none; font-weight: 600; padding: 5px 10px; border-radius: 5px; 
            margin-right: 10px; transition: color 0.2s;
        }
        .admin-nav a:hover, .admin-nav a.active { color: #dc3545; }

/* Messages */
        .message { padding: 12px; border-radius: 6px; margin-bottom: 20px; font-weight: 600; }
        .success { background-color: #d4edda; color: #155724; border: 1px solid #c3e6cb; }
        .error { background-color: #f8d7da; color: #721c24; border: 1px solid #f5c6fb; }
        
        /* Forms and Containers */
        .grid-layout {
            display: grid;
            grid-template-columns: 2fr 1fr; /* Main content and sidebar form */
            gap: 30px;
            margin-bottom: 40px;
        }
        .form-card { 
            background: white; 
            padding: 20px; 
            border-radius: 12px; 
            box-shadow: 0 4px 15px rgba(0,0,0,0.1); 
            border-top: 5px solid #0f2b46;
        }
        .form-group { margin-bottom: 15px; }
        label { display: block; font-weight: 600; color: #0f2b46; margin-bottom: 5px; }
        input[type="text"], input[type="email"], input[type="password"], select { 
            width: 100%; padding: 10px; border: 1px solid #ccc; border-radius: 4px; box-sizing: border-box; 
        }
        .btn-action-primary { background-color: #28a745; color: white; padding: 10px 20px; border: none; border-radius: 4px; cursor: pointer; font-size: 16px; margin-top: 10px; font-weight: <b>bold</b>; }
        
        /* Admin List Table */
        .admin-table {
            width: 100%; border-collapse: collapse; margin-top: 20px; 
            box-shadow: 0 4px 15px rgba(0,0,0,0.1); background: white; border-radius: 8px; overflow: hidden;
        }
        .admin-table th, .admin-table td { padding: 12px 15px; text-align: left; border-bottom: 1px solid #e0e0e0; font-size: 0.9em; }
        .admin-table th { background-color: #dc3545; color: white; font-weight: 600; }
        
        .status-badge { padding: 3px 8px; border-radius: 4px; font-size: 0.75em; font-weight: <b>bold</b>; }
        .status-active { background-color: #d4edda; color: #155724; }
        .status-inactive { background-color: #f8d7da; color: #721c24; }

/* Role Badges */
        .role-SuperAdmin { background-color: #0f2b46; color: white; }
        .role-ContentManager { background-color: #ffc107; color: #0f2b46; }

/* Action Buttons */
        .btn-action { 
            padding: 5px 10px; 
            text-decoration: none; 
            border-radius: 4px; 
            font-size: 0.8em; 
            margin-right: 5px; 
            display: inline-block;
        }
        .btn-delete { background-color: #dc3545; color: white; }
        .btn-edit { background-color: #ffc107; color: #0f2b46; }
        .btn-activate { background-color: #28a745; color: white; }
        .btn-deactivate { background-color: #555; color: white; }

/* Responsive */
        @media (max-width: 992px) {
            .grid-layout { grid-template-columns: 1fr; } /* Stack form and list */
        }
    </style>
</head>
<body>
    <div class="wrapper">
        
        <h1>👑 Admin Users Management</h1>
        <div class="admin-nav">
            <a href="dashboard.php"><i class="fas fa-tachometer-alt"></i> Dashboard</a>
            <a href="manage-admins.php" class="active"><i class="fas fa-user-shield"></i> Admin Users</a>
            <a href="logout.php" style="float: right;"><i class="fas fa-sign-out-alt"></i> Logout</a>
        </div>
        <hr>

<?php if (!empty($message)): ?>
            <div class="message <?= $error ? 'error' : 'success' ?>">
                <?= strip_tags($message, '<b><strong><em>') ?>
            </div>
        <?php endif; ?>

<div class="grid-layout">
            
            <div>
                <h2>Existing Admin Accounts (<?= $total_admins ?>)</h2>

<?php if ($total_admins > 0): ?>
                <table class="admin-table">
                    <thead>
                        <tr>
                            <th>ID / Name</th>
                            <th>Role</th>
                            <th>Status</th>
                            <th>Actions</th>
                        </tr>
                    </thead>
                    <tbody>
                        <?php while($admin = $q_admins->fetch_assoc()): ?>
                        <tr>
                            <td data-label="ID / Name">
                                <b><?= htmlspecialchars($admin['full_name']) ?></b> (ID: <?= $admin['admin_id'] ?>)<br>
                                <small style="color:#666;"><?= htmlspecialchars($admin['email']) ?></small>
                            </td>
                            <td data-label="Role">
                                <span class="status-badge role-<?= $admin['role'] ?>">
                                    <?= htmlspecialchars($admin['role']) ?>
                                </span>
                            </td>
                            <td data-label="Status">
                                <span class="status-badge status-<?= $admin['status'] ?>">
                                    <?= ucfirst($admin['status']) ?>
                                </span>
                            </td>
                            <td data-label="Actions">
                                
                                <a href="edit-admin.php?id=<?= $admin['admin_id'] ?>" class="btn-action btn-edit">
                                    <i class="fas fa-edit"></i> Edit
                                </a>
                                
                                <?php if ($admin['status'] == 'active'): ?>
                                    <a href="?action=deactivate&id=<?= $admin['admin_id'] ?>" class="btn-action btn-deactivate"
                                        onclick="return confirm('Deactivate account for <?= htmlspecialchars($admin['full_name']) ?>?');">
                                        <i class="fas fa-power-off"></i> Deactivate
                                    </a>
                                <?php else: ?>
                                    <a href="?action=activate&id=<?= $admin['admin_id'] ?>" class="btn-action btn-activate">
                                        <i class="fas fa-check"></i> Activate
                                    </a>
                                <?php endif; ?>
                                
                                <a href="?action=delete&id=<?= $admin['admin_id'] ?>" class="btn-action btn-delete"
                                    onclick="return confirm('DANGER: Permanently delete this admin account?');">
                                    <i class="fas fa-trash-alt"></i> Delete
                                </a>
                            </td>
                        </tr>
                        <?php endwhile; ?>
                    </tbody>
                </table>
                <?php else: ?>
                    <p style="padding: 20px; background: white; border-radius: 8px;">No administrative accounts found besides the primary one.</p>
                <?php endif; ?>
            </div>

<div>
                <div class="form-card">
                    <h2><i class="fas fa-user-plus"></i> Add New Admin User</h2>
                    
                    <form method="POST" action="manage-admins.php">
                        
                        <div class="form-group">
                            <label for="full_name">Full Name *</label>
                            <input type="text" name="full_name" id="full_name" required value="<?= htmlspecialchars($_POST['full_name'] ?? '') ?>">
                        </div>
                        
                        <div class="form-group">
                            <label for="email">Email (Login ID) *</label>
                            <input type="email" name="email" id="email" required value="<?= htmlspecialchars($_POST['email'] ?? '') ?>">
                        </div>
                        
                        <div class="form-group">
                            <label for="password">Initial Password *</label>
                            <input type="password" name="password" id="password" required>
                        </div>

<div class="form-group">
                            <label for="role">Role *</label>
                            <select name="role" id="role" required>
                                <option value="ContentManager" <?= (isset($_POST['role']) && $_POST['role'] == 'ContentManager') ? 'selected' : '' ?>>Content Manager</option>
                                <option value="SuperAdmin" <?= (isset($_POST['role']) && $_POST['role'] == 'SuperAdmin') ? 'selected' : '' ?>>Super Admin</option>
                            </select>
                        </div>
                        
                        <button type="submit" name="add_admin" class="btn-action-primary" style="width: 100%;">
                            <i class="fas fa-user-plus"></i> Create Admin Account
                        </button>
                    </form>
                </div>
            </div>
        </div>
    </div>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: manage-admins.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation