Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/digitalraj.in/public_html/dashboard

Free Space:

8.25 TB

🔧 Quick Actions

✏️ Editing: save_qr.php

<?php
// /public_html/dashboard/save_qr.php
session_start();
require '../config/db_connect.php';

// LOAD SECURITY MODULE
require_once '../includes/Security.php';
$security = new Security($conn);

if (!isset($_SESSION['user_id'])) { die("Unauthorized"); }

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $user_id = $_SESSION['user_id'];
    $long_url = filter_var($_POST['long_url'], FILTER_SANITIZE_URL);
    $qr_name = $conn->real_escape_string($_POST['qr_name']);
    
    // --- 1. CHECK PLAN LIMITS ---
    
    // Get User's Plan ID
    $user_result = $conn->query("SELECT plan_id FROM users WHERE id = '$user_id'");
    $user_data = $user_result->fetch_assoc();
    $plan_id = $user_data['plan_id'] ?? 1; // Default to 1 (Free)

// Count Existing QRs
    $count_result = $conn->query("SELECT COUNT(*) as total FROM qrcodes WHERE user_id = '$user_id'");
    $count_data = $count_result->fetch_assoc();
    $current_total = $count_data['total'];

// Define Limits
    $limit = 5; // Free Limit
    if ($plan_id == 2) {
        $limit = 1000; // Pro Limit
    }

if ($current_total >= $limit) {
        die("<h3>Limit Reached</h3><p>You have reached the limit ($limit QRs). <a href='upgrade.php'>Upgrade to Pro</a>.</p>");
    }

// --- 2. VALIDATE URL ---
    if (!filter_var($long_url, FILTER_VALIDATE_URL)) {
        die("Invalid URL format.");
    }

// --- 3. SECURITY CHECK (Anti-Phishing) ---
    // Checks if the domain is in your 'blocked_domains' table
    if (!$security->isUrlSafe($long_url)) {
        die("<h1>Unsafe URL Detected</h1><p>The destination URL is flagged as unsafe/phishing by our security system and cannot be used.</p>");
    }

// --- 4. GENERATE SHORT CODE ---
    function generateRandomString($length = 6) {
        $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
        $randomString = '';
        for ($i = 0; $i < $length; $i++) {
            $randomString .= $characters[rand(0, strlen($characters) - 1)];
        }
        return $randomString;
    }

$short_code = generateRandomString();

// Collision Check
    $check = $conn->query("SELECT id FROM qrcodes WHERE short_code = '$short_code'");
    while($check->num_rows > 0) {
        $short_code = generateRandomString();
        $check = $conn->query("SELECT id FROM qrcodes WHERE short_code = '$short_code'");
    }

// --- 5. INSERT DATABASE ---
    $sql = "INSERT INTO qrcodes (user_id, name, short_code, long_url, status) VALUES ('$user_id', '$qr_name', '$short_code', '$long_url', 'active')";

if ($conn->query($sql)) {
        header("Location: view_qr.php?code=$short_code");
        exit();
    } else {
        echo "Error: " . $conn->error;
    }
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: save_qr.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation