Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-611.13.1.el9_7.x86_64

PHP Version:

8.5.3

User:

justl3847

Directory:

/home/justlisting.in/public_html/admin

Free Space:

60.73 GB

🔧 Quick Actions

✏️ Editing: prdt_add_back.php

<?php
// 1. Enable Error Reporting (Helps identify issues immediately)
error_reporting(E_ALL);
ini_set('display_errors', 1);

include("root/db.php");

// Check if the form was actually submitted
if ($_SERVER["REQUEST_METHOD"] == "POST") {

// Initialize image variable string
    $img1 = "";

// ---------------------------------------------------------
    //  IMAGE UPLOAD LOGIC
    // ---------------------------------------------------------
    // Check if files exist and the first file has a name
    if (!empty($_FILES["img1"]['name'][0])) {
        $imgNames = [];
        
        // Loop through the files
        foreach ($_FILES['img1']['tmp_name'] as $key => $tmp_name) {
            
            // Check for upload errors
            if ($_FILES['img1']['error'][$key] !== UPLOAD_ERR_OK) {
                continue; // Skip files with errors
            }

$file_name = $_FILES["img1"]["name"][$key];
            $file_tmp  = $_FILES["img1"]["tmp_name"][$key];
            
            // Get extension safely
            $ext = pathinfo($file_name, PATHINFO_EXTENSION);
            
            // Generate unique name
            $newfilename = rand() . "_" . date('m-d-Y_hia') . '.' . $ext;
            
            // Ensure "gallery" folder exists
            if (!is_dir("gallery")) {
                mkdir("gallery", 0777, true);
            }

if (move_uploaded_file($file_tmp, "gallery/" . $newfilename)) {
                $imgNames[] = $newfilename;
            }
        }

// Convert image names array to comma-separated string
        $img1 = implode(',', $imgNames);
    }

// ---------------------------------------------------------
    //  DATA SANITIZATION
    // ---------------------------------------------------------
    $pr_name        = mysqli_real_escape_string($mysqli, $_POST['pr_name'] ?? '');
    $category       = mysqli_real_escape_string($mysqli, $_POST['category'] ?? '');
    $prize          = mysqli_real_escape_string($mysqli, $_POST['prize'] ?? '');
    $pr_cnt         = mysqli_real_escape_string($mysqli, $_POST['content'] ?? '');
    $location       = mysqli_real_escape_string($mysqli, $_POST['location'] ?? '');
    $phone          = mysqli_real_escape_string($mysqli, $_POST['phone'] ?? '');
    $email          = mysqli_real_escape_string($mysqli, $_POST['email'] ?? '');
    $website        = mysqli_real_escape_string($mysqli, $_POST['website'] ?? '');
    $facebook       = mysqli_real_escape_string($mysqli, $_POST['facebook'] ?? '');
    $instagram      = mysqli_real_escape_string($mysqli, $_POST['instagram'] ?? '');
    $twitter        = mysqli_real_escape_string($mysqli, $_POST['twitter'] ?? '');
    $linkedin       = mysqli_real_escape_string($mysqli, $_POST['linkedin'] ?? '');
    $youtube        = mysqli_real_escape_string($mysqli, $_POST['youtube'] ?? '');
    $tags           = mysqli_real_escape_string($mysqli, $_POST['tags'] ?? '');
    $features       = mysqli_real_escape_string($mysqli, $_POST['features'] ?? '');
    $business_hours = mysqli_real_escape_string($mysqli, $_POST['business_hours'] ?? '');
    $map            = mysqli_real_escape_string($mysqli, $_POST['map'] ?? '');
    $pg_tlt         = mysqli_real_escape_string($mysqli, $_POST['pg_tlt'] ?? '');
    $meta_desc      = mysqli_real_escape_string($mysqli, $_POST['description'] ?? '');
    $h1_tag         = mysqli_real_escape_string($mysqli, $_POST['h1'] ?? '');

// ---------------------------------------------------------
    //  GENERATE URL SLUG
    // ---------------------------------------------------------
    $slug_raw = strtolower($h1_tag);
    $slug_raw = preg_replace('/[^a-z0-9\s-]/', '', $slug_raw);
    $slug_raw = preg_replace('/[\s-]+/', '-', $slug_raw);
    $url_slug = trim($slug_raw, '-');

// ---------------------------------------------------------
    //  DATABASE INSERT
    // ---------------------------------------------------------
    $sql = "INSERT INTO product 
    (pr_img, pr_name, category, prize, content, location, phone, 
    email, website, facebook, instagram, twitter, linkedin, youtube, 
    tags, features, business_hours, map, pg_tlt, description, h1, url_slug) 
    VALUES 
    ('$img1', '$pr_name', '$category', '$prize', '$pr_cnt', '$location', '$phone', 
    '$email', '$website', '$facebook', '$instagram', '$twitter', '$linkedin', '$youtube', 
    '$tags', '$features', '$business_hours', '$map', '$pg_tlt', '$meta_desc', '$h1_tag', '$url_slug')";

if (mysqli_query($mysqli, $sql)) {
        // Redirect after successful upload
        header("location:prdt.php");
        exit();
    } else {
        // Show actual database error
        die('Database Error: ' . mysqli_error($mysqli));
    }
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: prdt_add_back.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation