403WebShell

403Webshell
Server IP : 51.79.149.130 / Your IP : 216.73.216.210
Web Server : LiteSpeed
System : Linux linux.firevps.net 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : digit4868 ( 1088)
PHP Version : 8.2.30
Disable Function : NONE
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /home/digitallibrary.astgd.com/public_html/admin/
Upload File :
[ Back ]
Current File : /home/digitallibrary.astgd.com/public_html/admin/edit-gallery-images.php
<?php
require_once '../includes/config.php';

if (!isLoggedIn()) { redirect('../login.php'); }

if (!isset($_GET['id']) || empty($_GET['id'])) {
    $_SESSION['message'] = 'Image ID is required';
    $_SESSION['message_type'] = 'danger';
    redirect('gallery-images.php');
}
$image_id_get = (int)$_GET['id']; // Use _get suffix to avoid conflict
$filter_event_id_on_load = isset($_GET['event_id']) ? (int)$_GET['event_id'] : null; // To redirect back correctly

$stmt_select = $conn->prepare("SELECT * FROM gallery_images WHERE id = ?");
$stmt_select->bind_param('i', $image_id_get);
$stmt_select->execute();
$result = $stmt_select->get_result();
if ($result->num_rows === 0) {
    $_SESSION['message'] = 'Image not found';
    $_SESSION['message_type'] = 'danger';
    redirect('gallery-images.php');
}
$image = $result->fetch_assoc();
$stmt_select->close();

$title = $image['title'];
$description = $image['description'];
$current_file_name = $image['file_name'];
$current_db_file_path = $image['file_path']; // Path stored in DB, e.g., "uploads/gallery/events/event-slug/"
$alt_text = $image['alt_text'];
$event_id = $image['event_id']; // Current associated event
$display_order = $image['display_order'];
$is_active = $image['is_active'];
$errors = [];

// Fetch gallery events for the dropdown
$gallery_events_result = $conn->query("SELECT id, name, slug FROM gallery_events WHERE is_active = 1 ORDER BY name ASC");
$gallery_events = $gallery_events_result->fetch_all(MYSQLI_ASSOC);

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $title = sanitize($_POST['title'] ?? '');
    $description = sanitize($_POST['description'] ?? '');
    $alt_text = sanitize($_POST['alt_text'] ?? '');
    $new_event_id = isset($_POST['event_id']) && !empty($_POST['event_id']) ? (int)$_POST['event_id'] : null;
    $display_order = isset($_POST['display_order']) ? (int)$_POST['display_order'] : 0;
    $is_active = isset($_POST['is_active']) ? 1 : 0;

    $final_file_name = $current_file_name;
    $final_db_file_path = $current_db_file_path;

    if (empty($alt_text) && !empty($title)) {
        $alt_text = $title;
    }
    if (empty($alt_text)) {
        $errors[] = 'Alt text is required for accessibility.';
    }
    if ($new_event_id === null) { // Make event selection mandatory
        $errors[] = 'Please select an event for this image.';
    }

    // Determine new upload path if event changes or new file is uploaded
    $new_event_folder_name = 'unassigned';
    if ($new_event_id) {
        foreach($gallery_events as $ev) {
            if ($ev['id'] == $new_event_id) {
                $new_event_folder_name = !empty($ev['slug']) ? $ev['slug'] : 'event_' . $ev['id'];
                break;
            }
        }
    }
    $new_potential_db_file_path = 'uploads/gallery/events/' . $new_event_folder_name . '/';
    $new_base_upload_dir_server = '../' . $new_potential_db_file_path;


    // Handle new image file upload (if provided)
    if (isset($_FILES['image_file']) && $_FILES['image_file']['error'] === UPLOAD_ERR_OK) {
        $allowed_types = ['image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/jpg'];
        $file_type = $_FILES['image_file']['type'];
        $file_size = $_FILES['image_file']['size'];
        $max_size = 5 * 1024 * 1024;

        if (!in_array($file_type, $allowed_types)) {
            $errors[] = 'Invalid file type. Only JPG, PNG, GIF, WEBP images are allowed.';
        } elseif ($file_size > $max_size) {
            $errors[] = 'File size exceeds the limit of 5MB.';
        } else {
            // Create new event's directory if it doesn't exist
            if (!is_dir($new_base_upload_dir_server)) {
                if (!mkdir($new_base_upload_dir_server, 0755, true) && !is_dir($new_base_upload_dir_server)) {
                    $errors[] = 'Failed to create new upload directory: ' . $new_base_upload_dir_server;
                }
            }

            if(empty($errors)) {
                // Delete old file from its original location
                $old_file_server_path = '../' . ltrim(rtrim($current_db_file_path, '/'), './') . '/' . $current_file_name;
                if (!empty($current_file_name) && file_exists($old_file_server_path)) {
                    unlink($old_file_server_path);
                }

                $original_file_name = basename($_FILES['image_file']['name']);
                $safe_file_name = preg_replace("/[^a-zA-Z0-9._-]/", "_", $original_file_name);
                $final_file_name = time() . '_' . $safe_file_name; // New file name
                $upload_target_path = $new_base_upload_dir_server . $final_file_name; // Upload to new event's folder

                if (!move_uploaded_file($_FILES['image_file']['tmp_name'], $upload_target_path)) {
                    $errors[] = 'Failed to upload new image file.';
                    $final_file_name = $current_file_name; // Revert to old on failure, but path might be an issue
                                                          // Ideally, if move fails, you might want to stop or re-upload old file if possible.
                                                          // For now, it might leave DB with old filename but pointing to new path.
                } else {
                    $final_db_file_path = $new_potential_db_file_path; // New file uploaded to new path
                }
            }
        }
    } elseif ($new_event_id != $event_id && !empty($current_file_name)) {
        // File not changed, but event association changed. Move existing file.
        $old_file_server_path = '../' . ltrim(rtrim($current_db_file_path, '/'), './') . '/' . $current_file_name;
        $new_target_server_path_for_move = $new_base_upload_dir_server . $current_file_name;

        if (file_exists($old_file_server_path)) {
            if (!is_dir($new_base_upload_dir_server)) {
                if (!mkdir($new_base_upload_dir_server, 0755, true) && !is_dir($new_base_upload_dir_server)) {
                    $errors[] = 'Failed to create directory for moving file: ' . $new_base_upload_dir_server;
                }
            }
            if (empty($errors)) {
                 if (rename($old_file_server_path, $new_target_server_path_for_move)) {
                    $final_db_file_path = $new_potential_db_file_path; // Update path in DB
                } else {
                    $errors[] = 'Failed to move existing file to new event folder. Image may remain in old event folder.';
                    // File stays at old path, DB path will not be updated for file_path
                    $final_db_file_path = $current_db_file_path;
                }
            }
        } else {
             // Old file doesn't exist, but event changed. Just update DB path to new event's folder.
             // This assumes the filename remains the same, and we are just changing its associated event and folder structure in DB.
             $final_db_file_path = $new_potential_db_file_path;
        }
    }


    if (empty($errors)) {
        $stmt = $conn->prepare("UPDATE gallery_images SET title = ?, description = ?, file_name = ?, file_path = ?, alt_text = ?, event_id = ?, display_order = ?, is_active = ?, uploaded_at = NOW() WHERE id = ?");
        $stmt->bind_param('sssssiiii', $title, $description, $final_file_name, $final_db_file_path, $alt_text, $new_event_id, $display_order, $is_active, $image_id_get);

        if ($stmt->execute()) {
            $_SESSION['message'] = 'Image updated successfully.';
            $_SESSION['message_type'] = 'success';
             // Redirect back to the filtered event view if an event was originally filtered or newly assigned
            $redirect_url = $filter_event_id_on_load ? 'gallery-images.php?event_id=' . $filter_event_id_on_load : ($new_event_id ? 'gallery-images.php?event_id=' . $new_event_id : 'gallery-images.php');
            redirect($redirect_url);
        } else {
            $errors[] = 'Failed to update image: ' . $conn->error;
        }
        $stmt->close();
    }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Edit Gallery Image - Digital Library</title>
      <link rel="icon" href="https://digitallibrary.astgd.com/images/digital-library-favicon.png" type="image/png">
    <link rel="shortcut icon" href="https://digitallibrary.astgd.com/images/digital-library-favicon.png" type="image/png">
    <link rel="stylesheet" href="../css/bootstrap.min.css">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css">
    <link rel="stylesheet" href="css/admin.css">
</head>
<body>
    <div class="wrapper">
        <?php include 'includes/sidebar.php'; ?>
        <div id="content">
            <?php include 'includes/navbar.php'; ?>
            <div class="container-fluid">
                <div class="d-sm-flex align-items-center justify-content-between mb-4">
                    <h1 class="h3 mb-0 text-gray-800">Edit Gallery Image</h1>
                    <a href="gallery-images.php<?php if ($filter_event_id_on_load) echo '?event_id=' . $filter_event_id_on_load; ?>" class="btn btn-sm btn-secondary shadow-sm"><i class="fas fa-arrow-left fa-sm"></i> Back to Gallery Images</a>
                </div>

                <?php if (!empty($errors)): ?>
                    <div class="alert alert-danger"><ul class="mb-0"><?php foreach ($errors as $error) echo "<li>$error</li>"; ?></ul></div>
                <?php endif; ?>

                <div class="card shadow mb-4">
                    <div class="card-header py-3"><h6 class="m-0 font-weight-bold text-primary">Image Details</h6></div>
                    <div class="card-body">
                        <form action="edit-gallery-image.php?id=<?php echo $image_id_get; ?><?php if($filter_event_id_on_load) echo '&event_id=' . $filter_event_id_on_load; ?>" method="POST" enctype="multipart/form-data">
                            <div class="form-group">
                                <label>Current Image Preview:</label><br>
                                <?php
                                $image_web_path_preview = '../' . ltrim(rtrim($current_db_file_path, '/'), './') . '/' . $current_file_name;
                                 if (!file_exists($image_web_path_preview)){ // Check relative to this script
                                     $image_web_path_preview = '../images/default-placeholder.png';
                                }
                                ?>
                                <img src="<?php echo htmlspecialchars($image_web_path_preview); ?>" alt="Current Preview" class="img-thumbnail mb-2" style="max-height: 150px;">
                            </div>

                            <div class="form-group">
                                <label for="event_id">Gallery Event <span class="text-danger">*</span></label>
                                <select class="form-control" id="event_id" name="event_id" required>
                                    <option value="">Select Event</option>
                                    <?php foreach ($gallery_events as $ev): ?>
                                        <option value="<?php echo $ev['id']; ?>" <?php echo ($event_id == $ev['id']) ? 'selected' : ''; ?>>
                                            <?php echo htmlspecialchars($ev['name']); ?>
                                        </option>
                                    <?php endforeach; ?>
                                </select>
                                 <?php if(empty($gallery_events)): ?>
                                    <small class="form-text text-warning">No active gallery events found. Please <a href="add-gallery-event.php">add an event</a> first.</small>
                                <?php endif; ?>
                            </div>

                            <div class="form-group">
                                <label for="image_file">Change Image File (Optional)</label>
                                <div class="custom-file">
                                    <input type="file" class="custom-file-input" id="image_file" name="image_file" accept="image/*">
                                    <label class="custom-file-label" for="image_file">Choose new image...</label>
                                </div>
                                <small class="form-text text-muted">Max 5MB. Replaces current image.</small>
                                <img id="imagePreview" src="#" alt="New Image Preview" class="img-thumbnail mt-2 d-none" style="max-height: 150px;">
                            </div>

                            <div class="form-group">
                                <label for="title">Title (Optional)</label>
                                <input type="text" class="form-control" id="title" name="title" value="<?php echo htmlspecialchars($title); ?>">
                            </div>

                            <div class="form-group">
                                <label for="alt_text">Alt Text <span class="text-danger">*</span></label>
                                <input type="text" class="form-control" id="alt_text" name="alt_text" value="<?php echo htmlspecialchars($alt_text); ?>" required>
                            </div>

                            <div class="form-group">
                                <label for="description">Description (Optional)</label>
                                <textarea class="form-control" id="description" name="description" rows="3"><?php echo htmlspecialchars($description); ?></textarea>
                            </div>

                            <div class="form-group">
                                <label for="display_order">Display Order (within event)</label>
                                <input type="number" class="form-control" id="display_order" name="display_order" value="<?php echo (int)$display_order; ?>" min="0">
                            </div>

                            <div class="form-group form-check">
                                <input type="checkbox" class="form-check-input" id="is_active" name="is_active" value="1" <?php echo ($is_active == 1) ? 'checked' : ''; ?>>
                                <label class="form-check-label" for="is_active">Active</label>
                            </div>

                            <button type="submit" class="btn btn-primary" <?php if(empty($gallery_events)) echo 'disabled'; ?>>Update Image</button>
                            <a href="gallery-images.php<?php if ($filter_event_id_on_load) echo '?event_id=' . $filter_event_id_on_load; ?>" class="btn btn-secondary">Cancel</a>
                        </form>
                    </div>
                </div>
            </div>
        </div>
    </div>
    <script src="../js/jquery.min.js"></script>
    <script src="../js/popper.min.js"></script>
    <script src="../js/bootstrap.min.js"></script>
    <script src="js/admin.js"></script>
    <script>
        $('#image_file').on('change', function(event) {
            var inputFile = event.target;
            var preview = document.getElementById('imagePreview');
            if (inputFile.files.length > 0) {
                var fileName = inputFile.files[0].name;
                $(inputFile).next('.custom-file-label').html(fileName);
                var reader = new FileReader();
                reader.onload = function(e) {
                    preview.src = e.target.result;
                    preview.classList.remove('d-none');
                }
                reader.readAsDataURL(inputFile.files[0]);
            } else {
                $(inputFile).next('.custom-file-label').html('Choose new image...');
                preview.src = '#';
                preview.classList.add('d-none');
            }
        });
    </script>
</body>
</html>
Youez - 2016 - github.com/yon3zu
LinuXploit