Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/subdrop.in/public_html/admin

Free Space:

8.29 TB

🔧 Quick Actions

✏️ Editing: admin_users.php

<?php
require_once '../includes/config.php';
requirePermission('admin_users');

$conn = getDBConnection();

// Handle add admin
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action'])) {
    if ($_POST['action'] === 'add') {
        $name = sanitize($_POST['name']);
        $username = sanitize($_POST['username']);
        $email = sanitize($_POST['email']);
        $role = sanitize($_POST['role']);
        $password = generateRandomPassword(12);
        $hashed_password = hashPassword($password);
        
        // Check if username or email exists
        $stmt = $conn->prepare("SELECT id FROM admin_users WHERE username = ? OR email = ?");
        $stmt->bind_param('ss', $username, $email);
        $stmt->execute();
        
        if ($stmt->get_result()->num_rows > 0) {
            setFlashMessage('Username or email already exists.', 'error');
        } else {
            $stmt = $conn->prepare("INSERT INTO admin_users (name, username, email, password, role, status, created_at) VALUES (?, ?, ?, ?, ?, 'active', NOW())");
            $stmt->bind_param('sssss', $name, $username, $email, $hashed_password, $role);
            
            if ($stmt->execute()) {
                // Send email with credentials
                $subject = 'Admin Account Created - IHM Aurangabad';
                $body = "
                <html>
                <body style='font-family: Arial, sans-serif;'>
                    <h2>Admin Account Created</h2>
                    <p>Hello {$name},</p>
                    <p>An admin account has been created for you on the IHM Aurangabad Admissions Portal.</p>
                    <table style='border-collapse: collapse; width: 100%; max-width: 400px;'>
                        <tr><td style='padding: 10px; border: 1px solid #ddd;'><strong>Username:</strong></td><td style='padding: 10px; border: 1px solid #ddd;'>{$username}</td></tr>
                        <tr><td style='padding: 10px; border: 1px solid #ddd;'><strong>Password:</strong></td><td style='padding: 10px; border: 1px solid #ddd;'>{$password}</td></tr>
                        <tr><td style='padding: 10px; border: 1px solid #ddd;'><strong>Role:</strong></td><td style='padding: 10px; border: 1px solid #ddd;'>" . ucfirst($role) . "</td></tr>
                    </table>
                    <p>Please login at: " . SITE_URL . "/admin/login.php</p>
                    <p><strong>For security reasons, please change your password after first login.</strong></p>
                </body>
                </html>
                ";
                sendEmail($email, $subject, $body);
                
                setFlashMessage('Admin user created successfully. Credentials sent to email.', 'success');
                logActivity('admin_created', 'Created admin user: ' . $username);
            } else {
                setFlashMessage('Failed to create admin user.', 'error');
            }
        }
        $stmt->close();
        
        header('Location: admin_users.php');
        exit;
    }
    
    if ($_POST['action'] === 'edit') {
        $id = intval($_POST['id']);
        $name = sanitize($_POST['name']);
        $email = sanitize($_POST['email']);
        $role = sanitize($_POST['role']);
        $status = sanitize($_POST['status']);
        
        $stmt = $conn->prepare("UPDATE admin_users SET name = ?, email = ?, role = ?, status = ? WHERE id = ?");
        $stmt->bind_param('ssssi', $name, $email, $role, $status, $id);
        
        if ($stmt->execute()) {
            setFlashMessage('Admin user updated successfully.', 'success');
            logActivity('admin_updated', 'Updated admin user ID: ' . $id);
        } else {
            setFlashMessage('Failed to update admin user.', 'error');
        }
        $stmt->close();
        
        header('Location: admin_users.php');
        exit;
    }
    
    if ($_POST['action'] === 'reset_password') {
        $id = intval($_POST['id']);
        $new_password = generateRandomPassword(12);
        $hashed_password = hashPassword($new_password);
        
        // Get user email
        $stmt = $conn->prepare("SELECT name, email FROM admin_users WHERE id = ?");
        $stmt->bind_param('i', $id);
        $stmt->execute();
        $user = $stmt->get_result()->fetch_assoc();
        $stmt->close();
        
        if ($user) {
            $stmt = $conn->prepare("UPDATE admin_users SET password = ?, password_changed_at = NULL WHERE id = ?");
            $stmt->bind_param('si', $hashed_password, $id);
            
            if ($stmt->execute()) {
                // Send email with new password
                $subject = 'Password Reset - IHM Aurangabad Admin Portal';
                $body = "
                <html>
                <body style='font-family: Arial, sans-serif;'>
                    <h2>Password Reset</h2>
                    <p>Hello {$user['name']},</p>
                    <p>Your password has been reset by the administrator.</p>
                    <table style='border-collapse: collapse; width: 100%; max-width: 400px;'>
                        <tr><td style='padding: 10px; border: 1px solid #ddd;'><strong>New Password:</strong></td><td style='padding: 10px; border: 1px solid #ddd;'>{$new_password}</td></tr>
                    </table>
                    <p>Please login at: " . SITE_URL . "/admin/login.php</p>
                    <p><strong>For security reasons, please change your password after login.</strong></p>
                </body>
                </html>
                ";
                sendEmail($user['email'], $subject, $body);
                
                setFlashMessage('Password reset successfully. New password sent to email.', 'success');
                logActivity('password_reset_by_admin', 'Reset password for admin ID: ' . $id);
            } else {
                setFlashMessage('Failed to reset password.', 'error');
            }
            $stmt->close();
        }
        
        header('Location: admin_users.php');
        exit;
    }
    
    if ($_POST['action'] === 'delete') {
        $id = intval($_POST['id']);
        
        // Prevent deleting own account
        if ($id == $_SESSION['admin_id']) {
            setFlashMessage('You cannot delete your own account.', 'error');
        } else {
            $stmt = $conn->prepare("DELETE FROM admin_users WHERE id = ?");
            $stmt->bind_param('i', $id);
            
            if ($stmt->execute()) {
                setFlashMessage('Admin user deleted successfully.', 'success');
                logActivity('admin_deleted', 'Deleted admin user ID: ' . $id);
            } else {
                setFlashMessage('Failed to delete admin user.', 'error');
            }
            $stmt->close();
        }
        
        header('Location: admin_users.php');
        exit;
    }
}

// Get all admin users
$result = $conn->query("SELECT * FROM admin_users ORDER BY created_at DESC");
$admins = $result->fetch_all(MYSQLI_ASSOC);

$conn->close();

$roles = [ROLE_SUPER_ADMIN, ROLE_ADMIN, ROLE_OPERATOR, ROLE_VIEWER];
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Admin Users - IHM Aurangabad</title>
    <link rel="stylesheet" href="../assets/css/admin.css">
</head>
<body>
    <div class="admin-wrapper">
        
        <aside class="sidebar">
            <div class="sidebar-header">
                <h2>IHM Aurangabad</h2>
                <p>Admin Portal</p>
            </div>
            
            <nav class="sidebar-nav">
                <a href="dashboard.php"><span class="icon">&#127968;</span> Dashboard</a>
                <a href="applications.php"><span class="icon">&#128196;</span> Applications</a>
                <?php if (hasPermission('reports')): ?>
                <a href="reports.php"><span class="icon">&#128202;</span> Reports</a>
                <?php endif; ?>
                <?php if (hasPermission('admin_users')): ?>
                <a href="admin_users.php" class="active"><span class="icon">&#128100;</span> Admin Users</a>
                <?php endif; ?>
                <?php if (hasPermission('settings')): ?>
                <a href="settings.php"><span class="icon">&#9881;</span> Settings</a>
                <?php endif; ?>
                <a href="guide.php"><span class="icon">&#128214;</span> User Guide</a>
                <a href="logout.php"><span class="icon">&#128682;</span> Logout</a>
            </nav>
        </aside>
        
        
        <main class="main-content">
            <header class="header">
                <h1>Admin Users</h1>
                <div class="user-info">
                    <button class="btn btn-success" onclick="openModal('addModal')">+ Add Admin</button>
                </div>
            </header>
            
            <?php showFlashMessage(); ?>
            
            
            <div class="content-card">
                <div class="card-header">
                    <h3>All Admin Users</h3>
                </div>
                
                <div class="table-responsive">
                    <table class="data-table">
                        <thead>
                            <tr>
                                <th>ID</th>
                                <th>Name</th>
                                <th>Username</th>
                                <th>Email</th>
                                <th>Role</th>
                                <th>Status</th>
                                <th>Last Login</th>
                                <th>Actions</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php foreach ($admins as $admin): ?>
                            <tr>
                                <td><?php echo $admin['id']; ?></td>
                                <td><?php echo htmlspecialchars($admin['name']); ?></td>
                                <td><?php echo htmlspecialchars($admin['username']); ?></td>
                                <td><?php echo htmlspecialchars($admin['email']); ?></td>
                                <td><span class="role-badge role-<?php echo $admin['role']; ?>"><?php echo ucfirst(str_replace('_', ' ', $admin['role'])); ?></span></td>
                                <td><span class="status-badge status-<?php echo $admin['status']; ?>"><?php echo ucfirst($admin['status']); ?></span></td>
                                <td><?php echo $admin['last_login'] ? formatDateTime($admin['last_login']) : 'Never'; ?></td>
                                <td class="action-btns">
                                    <button class="action-btn btn-primary" onclick="editAdmin(<?php echo htmlspecialchars(json_encode($admin)); ?>)">Edit</button>
                                    <button class="action-btn btn-warning" onclick="resetPassword(<?php echo $admin['id']; ?>, '<?php echo htmlspecialchars($admin['name']); ?>')">Reset Password</button>
                                    <?php if ($admin['id'] != $_SESSION['admin_id']): ?>
                                    <button class="action-btn btn-danger" onclick="deleteAdmin(<?php echo $admin['id']; ?>, '<?php echo htmlspecialchars($admin['name']); ?>')">Delete</button>
                                    <?php endif; ?>
                                </td>
                            </tr>
                            <?php endforeach; ?>
                        </tbody>
                    </table>
                </div>
            </div>
        </main>
    </div>
    
    
    <div id="addModal" class="modal">
        <div class="modal-content">
            <div class="modal-header">
                <h3>Add New Admin</h3>
                <button class="close-modal" onclick="closeModal('addModal')">&times;</button>
            </div>
            <form method="POST" action="">
                <input type="hidden" name="action" value="add">
                <div class="modal-body">
                    <div class="form-group">
                        <label>Full Name</label>
                        <input type="text" name="name" required>
                    </div>
                    <div class="form-group">
                        <label>Username</label>
                        <input type="text" name="username" required>
                    </div>
                    <div class="form-group">
                        <label>Email</label>
                        <input type="email" name="email" required>
                    </div>
                    <div class="form-group">
                        <label>Role</label>
                        <select name="role" required>
                            <?php foreach ($roles as $role): ?>
                            <option value="<?php echo $role; ?>"><?php echo ucfirst(str_replace('_', ' ', $role)); ?></option>
                            <?php endforeach; ?>
                        </select>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn" onclick="closeModal('addModal')">Cancel</button>
                    <button type="submit" class="btn btn-success">Create Admin</button>
                </div>
            </form>
        </div>
    </div>
    
    
    <div id="editModal" class="modal">
        <div class="modal-content">
            <div class="modal-header">
                <h3>Edit Admin</h3>
                <button class="close-modal" onclick="closeModal('editModal')">&times;</button>
            </div>
            <form method="POST" action="">
                <input type="hidden" name="action" value="edit">
                <input type="hidden" name="id" id="edit_id">
                <div class="modal-body">
                    <div class="form-group">
                        <label>Full Name</label>
                        <input type="text" name="name" id="edit_name" required>
                    </div>
                    <div class="form-group">
                        <label>Email</label>
                        <input type="email" name="email" id="edit_email" required>
                    </div>
                    <div class="form-group">
                        <label>Role</label>
                        <select name="role" id="edit_role" required>
                            <?php foreach ($roles as $role): ?>
                            <option value="<?php echo $role; ?>"><?php echo ucfirst(str_replace('_', ' ', $role)); ?></option>
                            <?php endforeach; ?>
                        </select>
                    </div>
                    <div class="form-group">
                        <label>Status</label>
                        <select name="status" id="edit_status" required>
                            <option value="active">Active</option>
                            <option value="inactive">Inactive</option>
                        </select>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn" onclick="closeModal('editModal')">Cancel</button>
                    <button type="submit" class="btn btn-success">Update Admin</button>
                </div>
            </form>
        </div>
    </div>
    
    
    <form id="resetPasswordForm" method="POST" action="" style="display: none;">
        <input type="hidden" name="action" value="reset_password">
        <input type="hidden" name="id" id="reset_id">
    </form>
    
    
    <form id="deleteForm" method="POST" action="" style="display: none;">
        <input type="hidden" name="action" value="delete">
        <input type="hidden" name="id" id="delete_id">
    </form>
    
    <style>
        .role-badge {
            display: inline-block;
            padding: 4px 10px;
            border-radius: 15px;
            font-size: 11px;
            font-weight: 500;
        }
        .role-super_admin { background: #dc3545; color: #fff; }
        .role-admin { background: #007bff; color: #fff; }
        .role-operator { background: #28a745; color: #fff; }
        .role-viewer { background: #6c757d; color: #fff; }
    </style>
    
    <script>
        function openModal(modalId) {
            document.getElementById(modalId).classList.add('active');
        }
        
        function closeModal(modalId) {
            document.getElementById(modalId).classList.remove('active');
        }
        
        function editAdmin(admin) {
            document.getElementById('edit_id').value = admin.id;
            document.getElementById('edit_name').value = admin.name;
            document.getElementById('edit_email').value = admin.email;
            document.getElementById('edit_role').value = admin.role;
            document.getElementById('edit_status').value = admin.status;
            openModal('editModal');
        }
        
        function resetPassword(id, name) {
            if (confirm('Are you sure you want to reset the password for ' + name + '? A new password will be generated and sent to their email.')) {
                document.getElementById('reset_id').value = id;
                document.getElementById('resetPasswordForm').submit();
            }
        }
        
        function deleteAdmin(id, name) {
            if (confirm('Are you sure you want to delete ' + name + '? This action cannot be undone.')) {
                document.getElementById('delete_id').value = id;
                document.getElementById('deleteForm').submit();
            }
        }
        
        // Close modal when clicking outside
        window.onclick = function(event) {
            if (event.target.classList.contains('modal')) {
                event.target.classList.remove('active');
            }
        }
    </script>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: admin_users.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation