Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/narumalaracademy.net/public_html

Free Space:

10.24 TB

🔧 Quick Actions

✏️ Editing: upload-screenshot.php

<?php
declare(strict_types=1);
session_start();
require_once 'includes/config.php'; // db(), esc()

// Check if user is logged in
if (!isset($_SESSION['user_id']) || $_SESSION['user_id'] <= 0) {
    header('Location: login.php?redirect=' . urlencode($_SERVER['REQUEST_URI']));
    exit;
}

$conn = db();
$user_id = (int)$_SESSION['user_id'];
$order_code = $_GET['order'] ?? '';
$merchant_upi = 'narumalar@paytm'; // Replace with actual merchant UPI ID
$merchant_name = 'Narumalar Academy';

// Validate order code and check if it belongs to the user
$order = null;
if ($order_code) {
    $stmt = $conn->prepare("
        SELECT o.*, u.full_name, u.email, u.phone 
        FROM orders o 
        JOIN users u ON o.user_id = u.id 
        WHERE o.order_code = ? AND o.user_id = ? AND o.payment_method = 'UPI'
    ");
    $stmt->bind_param('si', $order_code, $user_id);
    $stmt->execute();
    $result = $stmt->get_result();
    $order = $result->fetch_assoc();
    $stmt->close();
}

// If order not found, doesn't belong to user, or not UPI, redirect
if (!$order) {
    header('Location: orders.php');
    exit;
}

// Generate UPI deep link
$upiDeepLink = "upi://pay?pa=" . urlencode($merchant_upi) . "&pn=" . urlencode($merchant_name) . "&am=" . $order['total'] . "&cu=INR&tn=Payment%20for%20order%20" . urlencode($order_code);

// Handle file upload
$upload_success = false;
$error_message = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['screenshot']) && isset($_POST['upload_screenshot'])) {
    $upload_dir = 'uploads/payments/';
    
    // Create upload directory if it doesn't exist
    if (!file_exists($upload_dir)) {
        mkdir($upload_dir, 0755, true);
    }
    
    $file = $_FILES['screenshot'];
    $file_name = basename($file['name']);
    $file_tmp = $file['tmp_name'];
    $file_size = $file['size'];
    $file_error = $file['error'];
    
    // Get file extension
    $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
    
    // Allowed file types
    $allowed_ext = ['jpg', 'jpeg', 'png', 'gif', 'webp'];
    
    // Validate file
    if ($file_error !== UPLOAD_ERR_OK) {
        $error_message = 'File upload error: ' . $file_error . '. Please try again.';
    } elseif (!in_array($file_ext, $allowed_ext)) {
        $error_message = 'Only JPG, PNG, GIF, and WebP files are allowed.';
    } elseif ($file_size > 5 * 1024 * 1024) { // 5MB limit
        $error_message = 'File size must be less than 5MB.';
    } else {
        // Generate unique filename
        $new_filename = 'payment_' . $order_code . '_' . time() . '.' . $file_ext;
        $destination = $upload_dir . $new_filename;
        
        if (move_uploaded_file($file_tmp, $destination)) {
            // Update order with screenshot path and set status to 'processing'
            $stmt = $conn->prepare("
                UPDATE orders 
                SET screenshot = ?, status = 'processing' 
                WHERE order_code = ? AND user_id = ?
            ");
            $stmt->bind_param('ssi', $new_filename, $order_code, $user_id);
            
            if ($stmt->execute()) {
                $upload_success = true;
                // Redirect to thank-you page after successful upload
                header('Location: thank-you.php?order=' . urlencode($order_code));
                exit;
            } else {
                $error_message = 'Database error. Please try again.';
                // Delete the uploaded file if DB update failed
                unlink($destination);
            }
            $stmt->close();
        } else {
            $error_message = 'Failed to upload file. Please try again.';
        }
    }
}

/** Format INR helper */
function inr_n0($n): string {
    return '₹' . number_format((float)$n, 0, '.', ',');
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Upload Payment Screenshot - Narumalar Academy</title>
    <script src="https://cdn.tailwindcss.com"></script>
    <script>
        tailwind.config = {
            theme: {
                extend: {
                    colors: { dpigreen: '#0ea5a3', dpidark: '#0f172a' },
                    fontFamily: { display: ['Inter', 'ui-sans-serif', 'system-ui', 'sans-serif'] }
                }
            }
        }
    </script>
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700;800&display=swap" rel="stylesheet">
</head>
<body class="bg-slate-50 min-h-screen font-display">
    <?php include('includes/header.php'); ?>

<main class="max-w-2xl mx-auto px-4 py-8">
        <h1 class="text-2xl md:text-3xl font-bold text-center mb-6">Complete UPI Payment</h1>

<?php if ($error_message): ?>
            <div class="bg-red-50 border border-red-200 rounded-md p-4 mb-6 text-sm text-red-700">
                <?= esc($error_message) ?>
            </div>
        <?php endif; ?>

<?php if ($order): ?>
            <div class="bg-white rounded-xl shadow-md p-6 mb-6">
                <h2 class="text-lg font-semibold mb-4">Order #<?= esc($order_code) ?></h2>
                <div class="space-y-2 text-sm">
                    <p><strong>Total Amount:</strong> <?= inr_n0($order['total']) ?></p>
                    <p><strong>Status:</strong> <?= ucfirst($order['status']) ?> (Awaiting payment verification)</p>
                    <p><strong>Name:</strong> <?= esc($order['full_name']) ?></p>
                    <p><strong>Email:</strong> <?= esc($order['email'] ?? '—') ?></p>
                    <p><strong>Phone:</strong> <?= esc($order['phone']) ?></p>
                </div>
            </div>

<div class="bg-blue-50 border border-blue-200 rounded-md p-6 mb-6">
                <h3 class="font-semibold mb-3">Pay via UPI</h3>
                <p class="mb-2">Please send <strong><?= inr_n0($order['total']) ?></strong> to the following UPI ID:</p>
                <p class="font-mono text-lg mb-4"><?= esc($merchant_upi) ?></p>
                <p class="text-xs text-slate-600 mb-4">Transaction note: "Payment for order <?= esc($order_code) ?>"</p>
                <a href="<?= esc($upiDeepLink) ?>" class="inline-block bg-orange-600 text-white px-6 py-3 rounded-lg font-semibold hover:bg-orange-700">
                    Open UPI App to Pay
                </a>
                <p class="text-xs text-slate-600 mt-2">This will open your UPI app (Google Pay, PhonePe, etc.). Complete the payment and return here to upload the screenshot.</p>
            </div>

<?php if (!$upload_success && $order['status'] !== 'processing'): ?>
                <form method="post" enctype="multipart/form-data" class="bg-white rounded-xl shadow-md p-6">
                    <input type="hidden" name="upload_screenshot" value="1">
                    <h3 class="font-semibold mb-3">Upload Payment Screenshot</h3>
                    <p class="text-sm text-slate-600 mb-4">After completing the UPI payment, upload a screenshot of the transaction for verification. Our admin will review and approve within 24 hours.</p>
                    <input type="file" name="screenshot" accept="image/jpeg,image/png,image/gif,image/webp" required class="w-full border border-slate-200 rounded-md p-2 mb-4">
                    <button type="submit" class="w-full bg-emerald-600 text-white py-3 rounded-lg font-semibold hover:bg-emerald-700">
                        Upload & Complete Order
                    </button>
                </form>
            <?php else: ?>
                <div class="bg-emerald-50 border border-emerald-200 rounded-md p-4 text-sm text-emerald-700">
                    Payment screenshot uploaded successfully. Awaiting admin verification.
                </div>
            <?php endif; ?>
        <?php else: ?>
            <div class="text-center py-8 text-sm text-slate-600">
                Invalid order or payment method. <a href="orders.php" class="text-orange-600 font-semibold">View your orders</a>.
            </div>
        <?php endif; ?>
    </main>

<?php include('includes/footer.php'); ?>
</body>
</html>
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1" />
  <title>Upload Payment Screenshot - Narumalar Academy</title>
  <meta name="description" content="Upload your payment screenshot to complete your order." />
  <link rel="apple-touch-icon" sizes="180x180" href="assets/fav/apple-touch-icon.png">
  <link rel="icon" type="image/png" sizes="32x32" href="assets/fav/favicon-32x32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="assets/fav/favicon-16x16.png">
  <link rel="manifest" href="assets/fav/site.webmanifest">
  <meta name="theme-color" content="#0d6efd" />
  <script src="https://cdn.tailwindcss.com"></script>
  <script>
    tailwind.config = {
      theme: {
        extend: {
          colors: { dpigreen: '#0ea5a3', dpidark: '#0f172a' },
          fontFamily: { display: ['Inter','ui-sans-serif','system-ui','sans-serif'] }
        }
      }
    }
  </script>
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700;800&display=swap" rel="stylesheet">
  <style>
    .drag-area {
      border: 2px dashed #cbd5e1;
      border-radius: 0.5rem;
      padding: 2rem;
      text-align: center;
      transition: all 0.3s;
    }
    .drag-area.active {
      border-color: #3b82f6;
      background-color: #eff6ff;
    }
    .drag-area img {
      max-width: 100%;
      max-height: 200px;
      margin-top: 1rem;
      border-radius: 0.25rem;
    }
  </style>
</head>
<body class="font-display text-slate-800 bg-slate-50">
  <?php include('includes/topstrip.php')?>
  <?php include('includes/header.php')?>

<nav class="max-w-7xl mx-auto px-4 md:px-6 mt-4 text-sm" aria-label="Breadcrumb">
    <ol class="flex items-center gap-2 text-slate-500">
      <li><a href="index.php" class="hover:text-orange-600">Home</a></li>
      <li>›</li>
      <li><a href="orders.php" class="hover:text-orange-600">My Orders</a></li>
      <li>›</li>
      <li class="text-slate-700 font-semibold">Upload Payment</li>
    </ol>
  </nav>

<main class="max-w-3xl mx-auto px-4 md:px-6 mt-6 mb-16">
    <h1 class="text-2xl md:text-3xl font-extrabold">Upload Payment Screenshot</h1>
    
    <?php if ($upload_success): ?>
      <div class="mt-6 bg-emerald-50 border border-emerald-200 rounded-xl p-6 text-center">
        <svg xmlns="http://www.w3.org/2000/svg" class="h-16 w-16 text-emerald-600 mx-auto mb-4" fill="none" viewBox="0 0 24 24" stroke="currentColor">
          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" />
        </svg>
        <h2 class="text-xl font-bold text-emerald-800 mb-2">Payment Proof Uploaded Successfully!</h2>
        <p class="text-emerald-700 mb-4">Thank you for your payment. We will verify your payment and activate your order shortly.</p>
        <div class="flex flex-col sm:flex-row gap-3 justify-center">
          <a href="order-details.php?order=<?= urlencode($order_code) ?>" class="inline-flex items-center justify-center px-5 py-2 rounded-lg bg-emerald-600 hover:bg-emerald-700 text-white font-semibold">
            View Order Details
          </a>
          <a href="index.php" class="inline-flex items-center justify-center px-5 py-2 rounded-lg border border-slate-200 text-slate-700 font-semibold bg-white">
            Continue Shopping
          </a>
        </div>
      </div>
    <?php else: ?>
      <div class="mt-6 bg-white border border-slate-200 rounded-xl p-4 md:p-6">
        <div class="mb-6 p-4 bg-blue-50 border border-blue-100 rounded-lg">
          <h2 class="font-semibold text-blue-800 mb-2">Order Information</h2>
          <div class="grid grid-cols-1 md:grid-cols-2 gap-4 text-sm">
            <div>
              <span class="text-slate-600">Order Code:</span>
              <span class="font-semibold"><?= esc($order_code) ?></span>
            </div>
            <div>
              <span class="text-slate-600">Amount Paid:</span>
              <span class="font-semibold">₹<?= number_format($order['total'], 0) ?></span>
            </div>
            <div>
              <span class="text-slate-600">Payment Method:</span>
              <span class="font-semibold">UPI (<?= esc($order['upi'] ?? 'Unknown app') ?>)</span>
            </div>
            <div>
              <span class="text-slate-600">Status:</span>
              <span class="font-semibold text-orange-600">Pending Verification</span>
            </div>
          </div>
        </div>

<?php if ($error_message): ?>
          <div class="mb-6 rounded-md bg-red-50 border border-red-200 p-4">
            <div class="flex items-center">
              <svg xmlns="http://www.w3.org/2000/svg" class="h-5 w-5 text-red-600 mr-2" viewBox="0 0 20 20" fill="currentColor">
                <path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zM8.707 7.293a1 1 0 00-1.414 1.414L8.586 10l-1.293 1.293a1 1 0 101.414 1.414L10 11.414l1.293 1.293a1 1 0 001.414-1.414L11.414 10l1.293-1.293a1 1 0 00-1.414-1.414L10 8.586 8.707 7.293z" clip-rule="evenodd" />
              </svg>
              <span class="text-red-700 font-medium">Error: <?= esc($error_message) ?></span>
            </div>
          </div>
        <?php endif; ?>

<form method="post" enctype="multipart/form-data" class="space-y-6">
          <div>
            <h3 class="text-lg font-semibold mb-3">Upload Payment Screenshot</h3>
            <p class="text-slate-600 mb-4">Please upload a clear screenshot of your successful UPI payment. This helps us verify your payment quickly.</p>
            
            <div class="drag-area" id="dragArea">
              <input type="file" name="screenshot" id="screenshot" accept="image/*" class="hidden" required>
              <svg xmlns="http://www.w3.org/2000/svg" class="h-12 w-12 text-slate-400 mx-auto mb-3" fill="none" viewBox="0 0 24 24" stroke="currentColor">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 16l4.586-4.586a2 2 0 012.828 0L16 16m-2-2l1.586-1.586a2 2 0 012.828 0L20 14m-6-6h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z" />
              </svg>
              <p class="text-slate-600 mb-2">Drag & drop your screenshot here or</p>
              <label for="screenshot" class="inline-flex items-center justify-center px-4 py-2 rounded-lg bg-orange-600 hover:bg-orange-700 text-white font-semibold cursor-pointer">
                Browse Files
              </label>
              <p class="text-xs text-slate-500 mt-3">Supported formats: JPG, PNG, GIF. Max size: 5MB</p>
              <div id="previewContainer" class="mt-4 hidden">
                <img src="" id="previewImage" alt="Preview" class="mx-auto">
                <button type="button" id="removeImage" class="mt-2 text-sm text-red-600 font-semibold">Remove Image</button>
              </div>
            </div>
          </div>

<div class="flex flex-col sm:flex-row gap-3 pt-4">
            <button type="submit" class="inline-flex items-center justify-center px-5 py-3 rounded-lg bg-orange-600 hover:bg-orange-700 text-white font-semibold">
              Submit Payment Proof
            </button>
            <a href="orders.php" class="inline-flex items-center justify-center px-5 py-3 rounded-lg border border-slate-200 text-slate-700 font-semibold bg-white">
              Cancel
            </a>
          </div>
        </form>
      </div>
    <?php endif; ?>
  </main>

<?php include('includes/footer.php')?>

// Drag events
    ['dragenter', 'dragover', 'dragleave', 'drop'].forEach(eventName => {
      dragArea.addEventListener(eventName, preventDefaults, false);
    });

function preventDefaults(e) {
      e.preventDefault();
      e.stopPropagation();
    }

['dragenter', 'dragover'].forEach(eventName => {
      dragArea.addEventListener(eventName, highlight, false);
    });

['dragleave', 'drop'].forEach(eventName => {
      dragArea.addEventListener(eventName, unhighlight, false);
    });

function highlight() {
      dragArea.classList.add('active');
    }

function unhighlight() {
      dragArea.classList.remove('active');
    }

// Handle dropped files
    dragArea.addEventListener('drop', handleDrop, false);

function handleDrop(e) {
      const dt = e.dataTransfer;
      const files = dt.files;
      inputFile.files = files;
      handleFiles(files);
    }

// Handle file input change
    inputFile.addEventListener('change', function() {
      handleFiles(this.files);
    });

// Handle file preview
    function handleFiles(files) {
      if (files.length > 0) {
        const file = files[0];
        const reader = new FileReader();
        
        reader.onload = function(e) {
          previewImage.src = e.target.result;
          previewContainer.classList.remove('hidden');
        }
        
        reader.readAsDataURL(file);
      }
    }

// Remove image preview
    removeButton.addEventListener('click', function() {
      inputFile.value = '';
      previewContainer.classList.add('hidden');
    });

// Form validation
    const form = document.querySelector('form');
    form.addEventListener('submit', function(e) {
      if (!inputFile.files || inputFile.files.length === 0) {
        e.preventDefault();
        alert('Please select a payment screenshot to upload.');
      }
    });
  </script>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: upload-screenshot.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation