Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/toolsempire.net/public_html/admin

Free Space:

8.29 TB

🔧 Quick Actions

✏️ Editing: auth_check.php

<?php
if (session_status() === PHP_SESSION_NONE) { session_start(); }

// 1. Check if logged in as Admin or Staff
if (!isset($_SESSION['user_id']) || !in_array($_SESSION['role'], ['admin', 'staff'])) {
    header("Location: ../login.php");
    exit();
}

// 2. Define Permission Groups (Which pages belong to which permission)
$page_permissions = [
    // Sales
    'orders.php' => 'orders',
    'invoice.php' => 'orders',
    'analytics.php' => 'orders',
    
    // Products
    'products.php' => 'products',
    'categories.php' => 'products',
    'bundles.php' => 'products',
    'keys.php' => 'products',
    'import_products.php' => 'products',
    
    // Users
    'users.php' => 'users',
    'user_edit.php' => 'users',
    'user_history.php' => 'users',
    'resellers.php' => 'users',
    'wallet_requests.php' => 'users',
    
    // Marketing
    'coupons.php' => 'marketing',
    'marketing.php' => 'marketing',
    'blog.php' => 'marketing',
    'blog_editor.php' => 'marketing',
    'requests.php' => 'marketing',
    
    // Support
    'support.php' => 'support',
    'ticket_view.php' => 'support',
    'reviews.php' => 'support',
    'inbox.php' => 'support',
    'reply_message.php' => 'support',
    'faqs.php' => 'support',
    
    // System
    'settings.php' => 'settings',
    'logs.php' => 'settings',
    'reports.php' => 'settings',
    'staff.php' => 'settings'
];

// 3. Check Permission for Current Page
$current_page = basename($_SERVER['PHP_SELF']);

if ($_SESSION['role'] === 'staff') {
    // Get user permissions from session
    $my_perms = isset($_SESSION['permissions']) ? json_decode($_SESSION['permissions'], true) : [];
    
    // If page requires a permission AND user doesn't have it -> Block
    if (isset($page_permissions[$current_page])) {
        $required_perm = $page_permissions[$current_page];
        
        if (!$my_perms || !in_array($required_perm, $my_perms)) {
            die("<div style='font-family:sans-serif; text-align:center; padding:50px; color:#e74c3c;'>
                    <h1>🚫 Access Denied</h1>
                    <p>You do not have permission to view this page.</p>
                    <a href='index.php'>Back to Dashboard</a>
                 </div>");
        }
    }
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: auth_check.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation