Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/buldhanaupdates.com/public_html/app/Controllers

Free Space:

8.19 TB

🔧 Quick Actions

✏️ Editing: ReporterController.php

<?php
namespace App\Controllers;

use App\Models\NewsArticle;

class ReporterController extends BaseController
{
    protected $db;
    private $schemaCache = [];

public function __construct()
    {
        parent::__construct();
        $this->checkReporterAuth();
        $this->db = \Database::getInstance();
    }

private function checkReporterAuth()
    {
        if (!isset($_SESSION['user_id']) || !isset($_SESSION['user_role'])) {
            header('Location: ' . BASE_URL . '/login');
            exit;
        }

if (!in_array($this->normalizeRole($_SESSION['user_role'] ?? ''), ['reporter', 'admin', 'super_admin'], true)) {
            header('Location: ' . BASE_URL . '/dashboard');
            exit;
        }
    }

private function tableExists($table)
    {
        if (array_key_exists($table, $this->schemaCache)) {
            return $this->schemaCache[$table];
        }

$safeTable = preg_replace('/[^a-zA-Z0-9_]/', '', $table);
        $this->schemaCache[$table] = (bool) $this->db->fetchColumn("SHOW TABLES LIKE '{$safeTable}'");
        return $this->schemaCache[$table];
    }

public function index()
    {
        $db = $this->db;
        $reporterId = $_SESSION['user_id'];

$stats = [
            'total_articles' => $db->fetchColumn("SELECT COUNT(*) FROM news_articles WHERE reporter_id = ?", [$reporterId]),
            'published' => $db->fetchColumn("SELECT COUNT(*) FROM news_articles WHERE reporter_id = ? AND status = 'published'", [$reporterId]),
            'pending' => $db->fetchColumn("SELECT COUNT(*) FROM news_articles WHERE reporter_id = ? AND status = 'pending'", [$reporterId]),
            'drafts' => $db->fetchColumn("SELECT COUNT(*) FROM news_articles WHERE reporter_id = ? AND status = 'draft'", [$reporterId]),
        ];

$recentArticles = $db->fetchAll(
            "SELECT id, title, slug, status, views_count, created_at, published_at, featured_image
             FROM news_articles
             WHERE reporter_id = ?
             ORDER BY created_at DESC
             LIMIT 10",
            [$reporterId]
        );

$recentUsers = $db->fetchAll(
            "SELECT u.*, r.name as role_name
             FROM users u
             JOIN roles r ON u.role_id = r.id
             ORDER BY u.created_at DESC
             LIMIT 5"
        );

$this->render('dashboard/reporter/index', [
            'stats' => $stats,
            'recentArticles' => $recentArticles,
            'recentUsers' => $recentUsers,
            'db' => $db
        ], 'Reporter Dashboard');
    }

public function write()
    {
        $db = $this->db;

try {
            $categories = $db->fetchAll("SELECT * FROM categories WHERE is_active = 1 ORDER BY name_mr");
            $locations = $db->fetchAll("SELECT * FROM locations WHERE is_active = 1 ORDER BY name_mr");
        } catch (\Throwable $e) {
            error_log('Reporter write bootstrap error: ' . $e->getMessage());
            $categories = [];
            $locations = [];
            $_SESSION['errors'] = ['Unable to load categories or locations. Please verify the database schema.'];
        }

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            $this->validateCSRF();

$title = trim($_POST['title'] ?? '');
            $content = $_POST['content'] ?? '';
            $categoryId = $_POST['category_id'] ?? '';
            $locationId = $_POST['location_id'] ?? null;
            $isBreaking = isset($_POST['is_breaking']) ? 1 : 0;
            $tags = trim($_POST['tags'] ?? '');
            $action = $_POST['action'] ?? 'draft';

$errors = [];

if (strlen($title) < 10) {
                $errors[] = 'Title must be at least 10 characters.';
            }

if (strlen($content) < 100) {
                $errors[] = 'Content must be at least 100 characters.';
            }

if (!$categoryId) {
                $errors[] = 'Please select a category.';
            }

$featuredImage = null;
            if (!empty($_FILES['featured_image']['tmp_name'])) {
                $upload = $this->uploadImage($_FILES['featured_image'], 'articles');
                if ($upload['success']) {
                    $featuredImage = $upload['path'];
                } else {
                    $errors[] = $upload['error'];
                }
            }

if (empty($errors)) {
                try {
                    $slug = generateUniqueSlug($title, 'news_articles');
                    $excerpt = substr(strip_tags($content), 0, 200) . '...';
                    $wordCount = str_word_count(strip_tags($content));
                    $status = $action === 'submit' ? 'pending' : 'draft';
                    $riskScore = $this->calculateRiskScore($title, $content);

$db->query(
                        "INSERT INTO news_articles
                         (title, slug, excerpt, content, category_id, location_id, reporter_id,
                          featured_image, tags, word_count, status, is_breaking, risk_score, created_at)
                         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NOW())",
                        [$title, $slug, $excerpt, $content, $categoryId, $locationId ?: null, $_SESSION['user_id'],
                         $featuredImage, $tags, $wordCount, $status, $isBreaking, $riskScore]
                    );

$articleId = $db->lastInsertId();

if (!empty($_FILES['gallery']['tmp_name'][0])) {
                        foreach ($_FILES['gallery']['tmp_name'] as $i => $tmpName) {
                            if (($_FILES['gallery']['error'][$i] ?? UPLOAD_ERR_NO_FILE) === UPLOAD_ERR_OK) {
                                $upload = $this->uploadImage([
                                    'tmp_name' => $tmpName,
                                    'name' => $_FILES['gallery']['name'][$i] ?? ('gallery_' . $i . '.jpg'),
                                    'type' => $_FILES['gallery']['type'][$i] ?? null,
                                    'size' => $_FILES['gallery']['size'][$i] ?? null
                                ], 'gallery');

if ($upload['success']) {
                                    $db->query(
                                        "INSERT INTO media (article_id, file_path, media_type, created_at)
                                         VALUES (?, ?, 'image', NOW())",
                                        [$articleId, $upload['path']]
                                    );
                                }
                            }
                        }
                    }

$this->setFlash('success', $action === 'submit' ? 'Article submitted successfully.' : 'Draft saved successfully.');
                    header('Location: ' . BASE_URL . '/dashboard/reporter/my-articles');
                    exit;
                } catch (\Throwable $e) {
                    error_log('Reporter write save error: ' . $e->getMessage());
                    $errors[] = 'Unable to save the article. Please verify the database columns for news articles and media.';
                }
            }

$_SESSION['old'] = $_POST;
            $_SESSION['errors'] = $errors;
        }

$this->render('dashboard/reporter/write', [
            'categories' => $categories,
            'locations' => $locations,
            'db' => $db
        ], 'Write Article');
    }

public function edit($id)
    {
        $db = $this->db;
        $reporterId = $_SESSION['user_id'];
        $article = $db->fetch("SELECT * FROM news_articles WHERE id = ? AND reporter_id = ?", [$id, $reporterId]);

if (!$article) {
            $this->notFound();
            return;
        }

if ($article['status'] === 'published') {
            $this->setFlash('error', 'Published articles cannot be edited.');
            header('Location: ' . BASE_URL . '/dashboard/reporter/my-articles');
            exit;
        }

$categories = $db->fetchAll("SELECT * FROM categories WHERE is_active = 1 ORDER BY name_mr");
        $locations = $db->fetchAll("SELECT * FROM locations WHERE is_active = 1 ORDER BY name_mr");

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            $this->validateCSRF();

if (strlen($title) < 10) {
                $errors[] = 'Title must be at least 10 characters.';
            }
            if (strlen($content) < 100) {
                $errors[] = 'Content must be at least 100 characters.';
            }
            if (!$categoryId) {
                $errors[] = 'Please select a category.';
            }

$featuredImage = $article['featured_image'];
            if (!empty($_FILES['featured_image']['tmp_name'])) {
                $upload = $this->uploadImage($_FILES['featured_image'], 'articles');
                if ($upload['success']) {
                    if ($featuredImage && file_exists(UPLOADS_PATH . '/' . $featuredImage)) {
                        unlink(UPLOADS_PATH . '/' . $featuredImage);
                    }
                    $featuredImage = $upload['path'];
                } else {
                    $errors[] = $upload['error'];
                }
            }

if (empty($errors)) {
                $excerpt = substr(strip_tags($content), 0, 200) . '...';
                $wordCount = str_word_count(strip_tags($content));
                $status = $action === 'submit' ? 'pending' : 'draft';

$db->query(
                    "UPDATE news_articles SET
                     title = ?, excerpt = ?, content = ?, category_id = ?, location_id = ?,
                     featured_image = ?, tags = ?, word_count = ?, status = ?, is_breaking = ?,
                     updated_at = NOW()
                     WHERE id = ?",
                    [$title, $excerpt, $content, $categoryId, $locationId ?: null,
                     $featuredImage, $tags, $wordCount, $status, $isBreaking, $id]
                );

$this->setFlash('success', $action === 'submit' ? 'Article submitted successfully.' : 'Draft updated successfully.');
                header('Location: ' . BASE_URL . '/dashboard/reporter/my-articles');
                exit;
            }

$_SESSION['errors'] = $errors;
        }

$this->render('dashboard/reporter/edit', [
            'article' => $article,
            'categories' => $categories,
            'locations' => $locations,
            'db' => $db
        ], 'Edit Article');
    }

public function myArticles()
    {
        $db = $this->db;
        $reporterId = $_SESSION['user_id'];
        $status = $_GET['status'] ?? '';
        $page = max(1, intval($_GET['page'] ?? 1));
        $perPage = 20;
        $where = 'reporter_id = ?';
        $params = [$reporterId];

if ($status) {
            $where .= ' AND status = ?';
            $params[] = $status;
        }

$articles = $db->fetchAll(
            "SELECT a.*, c.name_mr as category_name
             FROM news_articles a
             LEFT JOIN categories c ON a.category_id = c.id
             WHERE $where
             ORDER BY a.created_at DESC
             LIMIT $perPage OFFSET " . (($page - 1) * $perPage),
            $params
        );

$totalCount = $db->fetchColumn("SELECT COUNT(*) FROM news_articles WHERE $where", $params);
        $statusCounts = $db->fetch(
            "SELECT
                SUM(CASE WHEN status = 'published' THEN 1 ELSE 0 END) as published,
                SUM(CASE WHEN status = 'pending' THEN 1 ELSE 0 END) as pending,
                SUM(CASE WHEN status = 'draft' THEN 1 ELSE 0 END) as draft,
                SUM(CASE WHEN status = 'rejected' THEN 1 ELSE 0 END) as rejected
             FROM news_articles WHERE reporter_id = ?",
            [$reporterId]
        );

$this->render('dashboard/reporter/my-articles', [
            'articles' => $articles,
            'status' => $status,
            'page' => $page,
            'perPage' => $perPage,
            'totalCount' => $totalCount,
            'statusCounts' => $statusCounts,
            'db' => $db
        ], 'My Articles');
    }

public function drafts()
    {
        $_GET['status'] = 'draft';
        $this->myArticles();
    }

public function analytics()
    {
        $this->render('dashboard/reporter/analytics', ['db' => $this->db], 'My Analytics');
    }

public function earnings()
    {
        $this->render('dashboard/reporter/earnings', ['db' => $this->db], 'My Earnings');
    }

public function paymentMethods()
    {
        $this->setFlash('info', 'Payment method management is not available yet. You can still review earnings and request payouts here.');
        header('Location: ' . BASE_URL . '/dashboard/reporter/earnings');
        exit;
    }

public function profile()
    {
        $user = $this->db->fetch("SELECT * FROM users WHERE id = ?", [$_SESSION['user_id']]);
        $this->render('dashboard/reporter/profile', ['user' => $user], 'Reporter Profile');
    }

public function updateProfile()
    {
        if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
            header('Location: ' . BASE_URL . '/dashboard/reporter/profile');
            exit;
        }

$this->validateCSRF();
        $fields = ['first_name = ?', 'last_name = ?', 'phone = ?'];
        $params = [clean($_POST['first_name'] ?? ''), clean($_POST['last_name'] ?? ''), clean($_POST['phone'] ?? '')];

if (!empty($_FILES['avatar']['tmp_name'])) {
            $upload = $this->uploadImage($_FILES['avatar'], 'avatars');
            if (!$upload['success']) {
                $this->setFlash('error', $upload['error']);
                header('Location: ' . BASE_URL . '/dashboard/reporter/profile');
                exit;
            }
            $fields[] = 'avatar = ?';
            $params[] = $upload['path'];
        }

$params[] = $_SESSION['user_id'];
        $this->db->query("UPDATE users SET " . implode(', ', $fields) . " WHERE id = ?", $params);
        $this->setFlash('success', 'Profile updated successfully.');
        header('Location: ' . BASE_URL . '/dashboard/reporter/profile');
        exit;
    }

public function requestPayout()
    {
        if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
            header('HTTP/1.1 405 Method Not Allowed');
            exit;
        }

$this->validateCSRF();
        $reporterId = $_SESSION['user_id'];

if (!$this->tableExists('reporter_earnings') || !$this->tableExists('payouts')) {
            header('Content-Type: application/json');
            echo json_encode(['success' => false, 'message' => 'Payouts are not configured yet.']);
            exit;
        }

$pendingAmount = $this->db->fetchColumn(
            "SELECT SUM(amount) FROM reporter_earnings WHERE reporter_id = ? AND payment_status = 'pending'",
            [$reporterId]
        );

if ($pendingAmount < 500) {
            header('Content-Type: application/json');
            echo json_encode(['success' => false, 'message' => 'Minimum payout is 500.']);
            exit;
        }

$this->db->query(
            "INSERT INTO payouts (reporter_id, amount, status, created_at) VALUES (?, ?, 'pending', NOW())",
            [$reporterId, $pendingAmount]
        );

$this->db->query(
            "UPDATE reporter_earnings SET payment_status = 'processing' WHERE reporter_id = ? AND payment_status = 'pending'",
            [$reporterId]
        );

header('Content-Type: application/json');
        echo json_encode(['success' => true]);
        exit;
    }

public function delete($id)
    {
        if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
            header('HTTP/1.1 405 Method Not Allowed');
            exit;
        }

$this->validateCSRF();
        $article = $this->db->fetch("SELECT * FROM news_articles WHERE id = ? AND reporter_id = ?", [$id, $_SESSION['user_id']]);

if (!$article) {
            header('HTTP/1.1 404 Not Found');
            exit;
        }

if ($article['status'] === 'published') {
            header('Content-Type: application/json');
            echo json_encode(['success' => false, 'message' => 'Published articles cannot be deleted.']);
            exit;
        }

if ($article['featured_image'] && file_exists(UPLOADS_PATH . '/' . $article['featured_image'])) {
            unlink(UPLOADS_PATH . '/' . $article['featured_image']);
        }

$this->db->query("DELETE FROM news_articles WHERE id = ?", [$id]);
        header('Content-Type: application/json');
        echo json_encode(['success' => true]);
        exit;
    }

private function calculateRiskScore($title, $content)
    {
        $score = 0;
        $suspiciousKeywords = ['breaking', 'exclusive', 'shocking', 'unbelievable', 'viral'];
        $titleLower = strtolower($title);

foreach ($suspiciousKeywords as $keyword) {
            if (strpos($titleLower, $keyword) !== false) {
                $score += 10;
            }
        }

preg_match_all('/[A-Z]{3,}/', $title, $caps);
        if (count($caps[0]) > 2) {
            $score += 15;
        }

if (preg_match('/[!?]{2,}/', $title)) {
            $score += 10;
        }

if (str_word_count(strip_tags($content)) < 100) {
            $score += 10;
        }

if (!preg_match('/(source|reporter|said|agency)/i', $content)) {
            $score += 10;
        }

return min(100, $score);
    }

private function uploadImage($file, $folder)
    {
        if (empty($file['tmp_name'])) {
            return ['success' => false, 'error' => 'No file uploaded.'];
        }

$allowedTypes = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
        $maxSize = 5 * 1024 * 1024;

$mimeType = $file['type'] ?? null;
        if (!$mimeType && file_exists($file['tmp_name'])) {
            $finfo = finfo_open(FILEINFO_MIME_TYPE);
            $mimeType = finfo_file($finfo, $file['tmp_name']);
            finfo_close($finfo);
        }

$size = $file['size'] ?? (file_exists($file['tmp_name']) ? filesize($file['tmp_name']) : 0);

if (!$mimeType || !in_array($mimeType, $allowedTypes, true)) {
            return ['success' => false, 'error' => 'Invalid file type. Allowed: JPG, PNG, GIF, WebP.'];
        }

if ($size > $maxSize) {
            return ['success' => false, 'error' => 'File too large. Max 5MB allowed.'];
        }

$uploadDir = UPLOADS_PATH . '/' . $folder;
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0755, true);
        }

$ext = pathinfo($file['name'] ?? 'image.jpg', PATHINFO_EXTENSION) ?: 'jpg';
        $filename = uniqid() . '_' . time() . '.' . preg_replace('/[^a-zA-Z0-9]/', '', $ext);
        $filepath = $uploadDir . '/' . $filename;

if (move_uploaded_file($file['tmp_name'], $filepath)) {
            return ['success' => true, 'path' => $folder . '/' . $filename];
        }

return ['success' => false, 'error' => 'Failed to upload file.'];
    }
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: ReporterController.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation