PHP WebShell

• .. (вверх)
• [DIR] ..
• [FILE] site_settings.php

Просмотр файла: site_settings.php

<?php
include '../common/header.php';
if (!isset($conn)) { include_once '../../config/db_config.php'; }
require_once '../../models/settings/site_settings.php';
$rows = ss_all($conn);
function h($s){ return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
?>
<style>
  .ss-card{border-radius:12px;}
  .ss-k{min-width:200px;}
</style>

<div class="nk-content nk-content-fluid mt-5">
  <div class="container-xl wide-lg">
    <div class="nk-content-body">

      <div class="nk-block-head">
        <div class="nk-block-between-md g-4">
          <div class="nk-block-head-content">
            <h4 class="nk-block-title fw-normal mb-1">Site Settings</h4>
            <p class="text-soft mb-0">Key/Value configuration editor.</p>
          </div>
          <div class="nk-block-head-content">
            <a href="../dashboard/index.php" class="btn btn-outline-secondary btn-sm">Back</a>
          </div>
        </div>
      </div>

      <div class="nk-block">
        <div class="card card-bordered ss-card">
          <div class="card-inner">
            <form class="row g-2 align-items-end" id="ssForm">
              <input type="hidden" name="id" value="">
              <div class="col-12 col-md-4">
                <label class="form-label small">Key</label>
                <input type="text" name="setting_key" class="form-control ss-k" placeholder="e.g., default_currency" required>
              </div>
              <div class="col-12 col-md-5">
                <label class="form-label small">Value</label>
                <input type="text" name="setting_value" class="form-control" placeholder="e.g., NGN" required>
              </div>
              <div class="col-12 col-md-3 d-grid d-md-block">
                <button class="btn btn-primary mt-1 mt-md-0">Save</button>
                <button type="button" class="btn btn-light mt-1 mt-md-0" id="ssReset">Reset</button>
              </div>
            </form>
            <hr>

            <div class="table-responsive">
              <table class="table table-striped align-middle">
                <thead class="small text-soft">
                  <tr>
                    <th>#</th><th>Key</th><th>Value</th><th>Updated</th><th>Actions</th>
                  </tr>
                </thead>
                <tbody>
                  <?php if(empty($rows)): ?>
                  <tr><td colspan="5" class="text-center text-muted py-4">No settings yet.</td></tr>
                  <?php else: $i=1; foreach($rows as $r): ?>
                  <tr data-id="<?= (int)$r['id']; ?>"
                      data-key="<?= h($r['setting_key']); ?>"
                      data-val="<?= h($r['setting_value']); ?>">
                    <td><?= $i++; ?></td>
                    <td class="fw-semibold"><?= h($r['setting_key']); ?></td>
                    <td class="text-break"><?= h($r['setting_value']); ?></td>
                    <td class="small"><?= h($r['updated_at']); ?></td>
                    <td>
                      <div class="btn-group btn-group-sm">
                        <button class="btn btn-outline-secondary btnEdit">Edit</button>
                        <button class="btn btn-outline-danger btnDelete">Delete</button>
                      </div>
                    </td>
                  </tr>
                  <?php endforeach; endif; ?>
                </tbody>
              </table>
            </div>

          </div>
        </div>
      </div>

    </div>
  </div>
</div>

<script>
(function(){
  const f = document.getElementById('ssForm');
  const resetBtn = document.getElementById('ssReset');

  f.addEventListener('submit', async (e)=>{
    e.preventDefault();
    const fd = new FormData(f);
    fd.append('action','save');
    const r = await fetch('../../models/settings/site_settings_post.php', { method:'POST', body: fd });
    const j = await r.json();
    if(!j.success){ alert(j.message || 'Save failed'); return; }
    location.reload();
  });

  resetBtn.addEventListener('click', ()=>{
    f.reset();
    f.querySelector('input[name="id"]').value = '';
  });

  document.addEventListener('click', async (e)=>{
    if(e.target.closest('.btnEdit')){
      const tr = e.target.closest('tr');
      f.querySelector('input[name="id"]').value = tr.getAttribute('data-id');
      f.querySelector('input[name="setting_key"]').value = tr.getAttribute('data-key');
      f.querySelector('input[name="setting_value"]').value = tr.getAttribute('data-val');
    }
    if(e.target.closest('.btnDelete')){
      if(!confirm('Delete this setting?')) return;
      const tr = e.target.closest('tr');
      const id = tr.getAttribute('data-id');
      const fd = new FormData(); fd.append('action','delete'); fd.append('id',id);
      const r = await fetch('../../models/settings/site_settings_post.php', { method:'POST', body: fd });
      const j = await r.json();
      if(!j.success){ alert('Delete failed'); return; }
      location.reload();
    }
  });
})();
</script>

<?php include '../common/footer.php'; ?>

Выполнить команду