Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/chikhalikar.com/public_html

Free Space:

8.3 TB

🔧 Quick Actions

✏️ Editing: qr-auth.php

<?php
require_once 'config.php';

// Redirect logged-in users away (QR login is for logging into a *new* device)
if (is_logged_in()) {
    redirect('/dashboard');
}

$page_title = 'QR Login Handler';
$token = $_GET['t'] ?? null;

if (empty($token) || strlen($token) !== 64) {
    // Malformed request
    $_SESSION['errors']['qr'] = 'Invalid QR code token.';
    redirect('/login');
}

$client_ip = $_SERVER['REMOTE_ADDR'] ?? 'UNKNOWN';

try {
    $now = date('Y-m-d H:i:s');
    
    // 1. Look up token, status pending, not expired (3.4)
    $stmt = $pdo->prepare("SELECT user_id FROM qr_logins WHERE token = ? AND status = 'pending' AND expires_at > ?");
    $stmt->execute([$token, $now]);
    $qr_record = $stmt->fetch();

if ($qr_record) {
        $user_id = $qr_record['user_id'];
        
        // 2. SUCCESS: Mark token as used, log IP/UA (3.4)
        $stmt = $pdo->prepare("UPDATE qr_logins SET status = 'used', used_at = ?, ip = ? WHERE token = ?");
        $stmt->execute([$now, $client_ip, $token]);

// 3. Set permanent session (3.4)
        session_regenerate_id(true);
        
        $stmt = $pdo->prepare("SELECT id, role FROM users WHERE id = ?");
        $stmt->execute([$user_id]);
        $user_data = $stmt->fetch();
        
        $_SESSION['user_id'] = $user_data['id'];
        $_SESSION['role'] = $user_data['role'];

// 4. Update last login time
        $pdo->prepare("UPDATE users SET last_login_at = ? WHERE id = ?")->execute([$now, $user_id]);

// Optional: Set remember_device cookie (3.4) - Simplified implementation: always set it on QR login
        $device_token = generate_secure_token(32);
        $token_hash = hash('sha256', $device_token);
        $expires_at = date('Y-m-d H:i:s', time() + (REMEMBER_DEVICE_DAYS * 86400));

$stmt = $pdo->prepare("INSERT INTO login_devices (user_id, device_token_hash, user_agent, ip, created_at, last_used_at, expires_at)
                               VALUES (?, ?, ?, ?, ?, ?, ?)");
        $stmt->execute([$user_id, $token_hash, $_SERVER['HTTP_USER_AGENT'] ?? 'Unknown', $client_ip, $now, $now, $expires_at]);

setcookie('remember_device', $device_token, [
            'expires' => time() + (REMEMBER_DEVICE_DAYS * 86400),
            'path' => '/',
            'domain' => '.' . parse_url(BASE_URL, PHP_URL_HOST),
            'secure' => true,
            'httponly' => true,
            'samesite' => 'Lax'
        ]);

$_SESSION['success_message'] = 'QR Login successful! You are now logged in.';
        redirect('/dashboard');

} else {
        // Token was not found, was used, or expired
        $_SESSION['errors']['qr'] = 'The QR code is invalid or has expired. Please generate a new one.';
        redirect('/login');
    }

} catch (PDOException $e) {
    error_log("QR Login DB Error: " . $e->getMessage());
    $_SESSION['errors']['database'] = 'A server error occurred during QR login.';
    redirect('/login');
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: qr-auth.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation