Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/buldhanaupdates.com/public_html/app/Controllers

Free Space:

8.19 TB

🔧 Quick Actions

✏️ Editing: BaseController.php

<?php
namespace App\Controllers;

// Database class loaded from config/database.php (global namespace)

class BaseController
{
    protected $db;
    private $rolesHasSlug;
    
    public function __construct()
    {
        $this->db = \Database::getInstance();
        
        // Start session if not already started
        if (session_status() === PHP_SESSION_NONE) {
            session_start();
        }
        
        // Load user data if logged in
        if (isset($_SESSION['user_id']) && !isset($_SESSION['user'])) {
            $roleNameExpr = $this->roleNameExpression('r');
            $user = $this->db->fetch(
                "SELECT u.*, {$roleNameExpr} as role_name, r.name as role_display
                 FROM users u
                 JOIN roles r ON u.role_id = r.id
                 WHERE u.id = ?",
                [$_SESSION['user_id']]
            );
            if ($user) {
                $_SESSION['user'] = $user;
                $_SESSION['user_role'] = $user['role_name'];
            }
        }
    }

protected function roleNameExpression($alias = 'r')
    {
        if ($this->rolesHasSlug === null) {
            $this->rolesHasSlug = false;
            try {
                $rows = $this->db->fetchAll("SHOW COLUMNS FROM roles");
                if (is_array($rows)) {
                    foreach ($rows as $column) {
                        if (($column['Field'] ?? '') === 'slug') {
                            $this->rolesHasSlug = true;
                            break;
                        }
                    }
                }
            } catch (\Throwable $e) {
                error_log("BaseController schema check failed: " . $e->getMessage());
            }
        }

return $this->rolesHasSlug ? "{$alias}.slug" : "REPLACE(REPLACE(LOWER({$alias}.name), ' ', '_'), '-', '_')";
    }

protected function normalizeRole($role)
    {
        return strtolower(str_replace([' ', '-'], '_', (string) $role));
    }
    
    /**
     * Render a view
     */
    protected function render($view, $data = [], $title = null)
    {
        // Extract data to variables
        extract($data);
        $db = $data['db'] ?? $this->db;
        
        // Set page title
        $pageTitle = $title ?? 'बुलढाणा अपडेट्स';
        
        // Build view path
        $viewPath = APP_PATH . '/Views/' . $view . '.php';
        
        if (!file_exists($viewPath)) {
            throw new \Exception("View not found: $view");
        }
        
        // Capture view content
        ob_start();
        require $viewPath;
        $content = ob_get_clean();

// Dashboard views already render their own layout.
        if (strpos($view, 'dashboard/') === 0) {
            echo $content;
            return;
        }
        
        // Include layout with content
        $layoutPath = APP_PATH . '/Views/layouts/main.php';
        if (file_exists($layoutPath)) {
            require $layoutPath;
        } else {
            // If no layout, just output content
            echo $content;
        }
    }
    
    /**
     * Redirect to URL
     */
    protected function redirect($url)
    {
        header('Location: ' . BASE_URL . $url);
        exit;
    }
    
    /**
     * Set flash message
     */
    protected function setFlash($type, $message)
    {
        $_SESSION['flash'] = [
            'type' => $type,
            'message' => $message
        ];
    }
    
    /**
     * Validate CSRF token
     */
    protected function validateCSRF()
    {
        $token = $_POST['csrf_token'] ?? $_SERVER['HTTP_X_CSRF_TOKEN'] ?? '';
        
        if (!hash_equals($_SESSION['csrf_token'] ?? '', $token)) {
            header('HTTP/1.1 403 Forbidden');
            echo json_encode(['error' => 'Invalid CSRF token']);
            exit;
        }
    }
    
    /**
     * Check if user is logged in
     */
    protected function requireAuth()
    {
        if (!isset($_SESSION['user_id'])) {
            $_SESSION['redirect_after_login'] = $_SERVER['REQUEST_URI'];
            $this->redirect('/login');
        }
    }
    
    /**
     * Check if user is admin
     */
    protected function requireAdmin()
    {
        $this->requireAuth();
        
        if (!in_array($this->normalizeRole($_SESSION['user_role'] ?? ''), ['admin', 'super_admin'], true)) {
            header('HTTP/1.1 403 Forbidden');
            $this->render('errors/403', [], 'Access Denied');
            exit;
        }
    }
    
    /**
     * Check if user is reporter
     */
    protected function requireReporter()
    {
        $this->requireAuth();
        
        if (!in_array($this->normalizeRole($_SESSION['user_role'] ?? ''), ['reporter', 'admin', 'super_admin'], true)) {
            header('HTTP/1.1 403 Forbidden');
            $this->render('errors/403', [], 'Access Denied');
            exit;
        }
    }
    
    /**
     * Return JSON response
     */
    protected function json($data, $statusCode = 200)
    {
        header('Content-Type: application/json');
        http_response_code($statusCode);
        echo json_encode($data);
        exit;
    }
    
    /**
     * Handle 404
     */
    protected function notFound()
    {
        http_response_code(404);
        $viewPath = APP_PATH . '/Views/errors/404.php';
        if (file_exists($viewPath)) {
            require $viewPath;
        } else {
            echo '<h1>404 - Page Not Found</h1>';
        }
        exit;
    }
    
    /**
     * Upload image helper
     */
    protected function uploadImage($file, $folder = 'uploads')
    {
        // Validate file
        if (!isset($file['tmp_name']) || empty($file['tmp_name'])) {
            return ['success' => false, 'error' => 'No file uploaded'];
        }
        
        // Check file type
        $allowedTypes = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
        $finfo = finfo_open(FILEINFO_MIME_TYPE);
        $mimeType = finfo_file($finfo, $file['tmp_name']);
        finfo_close($finfo);
        
        if (!in_array($mimeType, $allowedTypes)) {
            return ['success' => false, 'error' => 'Invalid file type. Allowed: JPG, PNG, GIF, WebP'];
        }
        
        // Check file size (max 5MB)
        if ($file['size'] > 5 * 1024 * 1024) {
            return ['success' => false, 'error' => 'File too large. Max 5MB allowed'];
        }
        
        // Create upload directory
        $uploadDir = UPLOADS_PATH . '/' . $folder;
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0755, true);
        }
        
        // Generate unique filename
        $ext = pathinfo($file['name'], PATHINFO_EXTENSION);
        $filename = uniqid() . '_' . time() . '.' . $ext;
        $filepath = $uploadDir . '/' . $filename;
        
        // Move uploaded file
        if (move_uploaded_file($file['tmp_name'], $filepath)) {
            return [
                'success' => true,
                'path' => $folder . '/' . $filename,
                'filename' => $filename
            ];
        }
        
        return ['success' => false, 'error' => 'Failed to move uploaded file'];
    }
    
    /**
     * Get pagination data
     */
    protected function paginate($page, $perPage, $total)
    {
        $page = max(1, intval($page));
        $perPage = max(1, min(100, intval($perPage)));
        $totalPages = max(1, ceil($total / $perPage));
        $page = min($page, $totalPages);
        
        return [
            'page' => $page,
            'perPage' => $perPage,
            'total' => $total,
            'totalPages' => $totalPages,
            'offset' => ($page - 1) * $perPage,
            'hasPrev' => $page > 1,
            'hasNext' => $page < $totalPages
        ];
    }
    
    /**
     * Log activity
     */
    protected function logActivity($action, $details = null)
    {
        $this->db->query(
            "INSERT INTO activity_logs (user_id, action, details, ip_address, created_at)
             VALUES (?, ?, ?, ?, NOW())",
            [
                $_SESSION['user_id'] ?? null,
                $action,
                $details ? json_encode($details) : null,
                $_SERVER['REMOTE_ADDR']
            ]
        );
    }
    
    /**
     * Send notification
     */
    protected function sendNotification($userId, $type, $title, $message, $link = null)
    {
        $this->db->query(
            "INSERT INTO notifications (user_id, type, title, message, link, is_read, created_at)
             VALUES (?, ?, ?, ?, ?, 0, NOW())",
            [$userId, $type, $title, $message, $link]
        );
    }
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: BaseController.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation