FM / admin

/var/www/vhosts/m-auto.co/httpdocs/admin/

/var/www/vhosts/m-auto.co/httpdocs/admin

Name	Size	Mode	Actions
assets/	-	0755	rm
includes/	-	0755	rm
7-6-2026.zip	10206	0644	edit dl rm
about_edit.php	3899	0644	edit dl rm
about_process.php	1367	0644	edit dl rm
auth.php	684	0644	edit dl rm
bookings.php	5367	0644	edit dl rm
booking_delete.php	924	0644	edit dl rm
branches.php	2470	0644	edit dl rm
branch_delete.php	1290	0644	edit dl rm
branch_form.php	4694	0644	edit dl rm
branch_process.php	1233	0644	edit dl rm
brands.php	2578	0644	edit dl rm
brand_delete.php	1327	0644	edit dl rm
brand_form.php	2369	0644	edit dl rm
brand_process.php	1660	0644	edit dl rm
cars.php	6946	0644	edit dl rm
car_delete.php	2886	0644	edit dl rm
car_form.php	40348	0644	edit dl rm
car_image_actions.php	5142	0644	edit dl rm
car_process.php	10426	0644	edit dl rm
categories.php	2167	0644	edit dl rm
category_delete.php	746	0644	edit dl rm
category_form.php	1607	0644	edit dl rm
category_process.php	943	0644	edit dl rm
dashboard.php	4965	0644	edit dl rm
index.php	2713	0644	edit dl rm
login_process.php	1532	0644	edit dl rm
logout.php	100	0644	edit dl rm
news.php	3448	0644	edit dl rm
news_delete.php	771	0644	edit dl rm
news_form.php	6769	0644	edit dl rm
news_process.php	2527	0644	edit dl rm
offers.php	2810	0644	edit dl rm
offer_delete.php	1327	0644	edit dl rm
offer_form.php	4573	0644	edit dl rm
offer_process.php	2115	0644	edit dl rm
settings.php	5217	0644	edit dl rm
settings_process.php	692	0644	edit dl rm
slider.php	3529	0644	edit dl rm
slider_delete.php	1345	0644	edit dl rm
slider_form.php	4529	0644	edit dl rm
slider_process.php	1983	0644	edit dl rm
themes.php	4703	0644	edit dl rm
theme_delete.php	1332	0644	edit dl rm
theme_form.php	1522	0644	edit dl rm
theme_process.php	1785	0644	edit dl rm
users.php	4480	0644	edit dl rm
user_delete.php	1055	0644	edit dl rm
user_form.php	5463	0644	edit dl rm
user_process.php	3193	0644	edit dl rm
videos.php	4942	0644	edit dl rm
video_delete.php	1717	0644	edit dl rm
video_form.php	7181	0644	edit dl rm
video_process.php	3336	0644	edit dl rm

Edit: /var/www/vhosts/m-auto.co/httpdocs/admin/user_form.php (5463B)

<?php
include 'includes/header.php'; // auth.php is included in here

$user_id = $_GET['id'] ?? null;
$is_editing = isset($user_id);

// Check appropriate permission based on action
if ($is_editing) {
    require_permission('users_edit');
} else {
    require_permission('users_add');
}
$user = null;
$user_permissions = [];

// Fetch all possible permissions and group them
$all_permissions_result = $conn->query("SELECT * FROM permissions ORDER BY name");
$grouped_permissions = [];
while ($p = $all_permissions_result->fetch_assoc()) {
    $group = explode('_', $p['name'])[0];
    $grouped_permissions[$group][] = $p;
}

if ($is_editing) {
    // Fetch user's basic data
    $stmt = $conn->prepare("SELECT id, username, email FROM users WHERE id = ?");
    $stmt->bind_param("i", $user_id);
    $stmt->execute();
    $user = $stmt->get_result()->fetch_assoc();
    $stmt->close();

// Fetch user's current permissions
    $p_stmt = $conn->prepare("SELECT permission_id FROM user_permissions WHERE user_id = ?");
    $p_stmt->bind_param("i", $user_id);
    $p_stmt->execute();
    $p_result = $p_stmt->get_result();
    while ($row = $p_result->fetch_assoc()) {
        $user_permissions[] = $row['permission_id'];
    }
    $p_stmt->close();
}
?>

<?php if (isset($_GET['error'])): ?>
        <div class="alert alert-danger alert-dismissible fade show" role="alert">
            <?php echo htmlspecialchars($_GET['error']); ?>
            <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
        </div>
    <?php endif; ?>

<?php if (isset($_GET['success'])): ?>
        <div class="alert alert-success alert-dismissible fade show" role="alert">
            تم حفظ البيانات بنجاح!
            <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
        </div>
    <?php endif; ?>

<div class="mb-3">
                    <label for="username" class="form-label">اسم المستخدم</label>
                    <input type="text" class="form-control" id="username" name="username" value="<?php echo htmlspecialchars($user['username'] ?? ''); ?>" required>
                </div>

<div class="mb-3">
                    <label for="email" class="form-label">البريد الإلكتروني</label>
                    <input type="email" class="form-control" id="email" name="email" value="<?php echo htmlspecialchars($user['email'] ?? ''); ?>">
                    <small class="form-text text-muted">اختياري - يمكن استخدامه لاستعادة كلمة المرور</small>
                </div>

<div class="mb-3">
                    <label for="password" class="form-label">كلمة المرور</label>
                    <input type="password" class="form-control" id="password" name="password" <?php echo $is_editing ? '' : 'required'; ?>>
                    <?php if ($is_editing): ?>
                        <small class="form-text text-muted">اترك هذا الحقل فارغًا إذا كنت لا ترغب في تغيير كلمة المرور.</small>
                    <?php endif; ?>
                </div>

<hr>

<h5 class="mb-3">الصلاحيات</h5>
                
                <?php foreach ($grouped_permissions as $group => $permissions): ?>
                    <div class="mb-4">
                        <h6 class="text-primary text-capitalize"><?php echo str_replace('_', ' ', $group); ?></h6>
                        <div class="row">
                            <?php foreach ($permissions as $permission): ?>
                                <div class="col-md-3 col-sm-6">
                                    <div class="form-check">
                                        <input class="form-check-input" type="checkbox" name="permissions[]" value="<?php echo $permission['id']; ?>" id="perm_<?php echo $permission['id']; ?>"
                                            <?php if (in_array($permission['id'], $user_permissions)) echo 'checked'; ?>>
                                        <label class="form-check-label" for="perm_<?php echo $permission['id']; ?>">
                                            <?php echo htmlspecialchars($permission['description']); ?>
                                        </label>
                                    </div>
                                </div>
                            <?php endforeach; ?>
                        </div>
                    </div>
                <?php endforeach; ?>

<hr>

<button type="submit" class="btn btn-primary">
                    <?php echo $is_editing ? '<i class="fas fa-save"></i> حفظ التغييرات' : '<i class="fas fa-plus"></i> إضافة مستخدم'; ?>
                </button>
                <a href="users.php" class="btn btn-secondary">إلغاء</a>
            </form>
        </div>
    </div>
</div>

<?php
include 'includes/footer.php'; 
?>

query("SELECT * FROM permissions ORDER BY name"); $grouped_permissions = []; while ($p = $all_permissions_result->fetch_assoc()) { $group = explode('_', $p['name'])[0]; $grouped_permissions[$group][] = $p; } if ($is_editing) { // Fetch user's basic data $stmt = $conn->prepare("SELECT id, username, email FROM users WHERE id = ?"); $stmt->bind_param("i", $user_id); $stmt->execute(); $user = $stmt->get_result()->fetch_assoc(); $stmt->close(); // Fetch user's current permissions $p_stmt = $conn->prepare("SELECT permission_id FROM user_permissions WHERE user_id = ?"); $p_stmt->bind_param("i", $user_id); $p_stmt->execute(); $p_result = $p_stmt->get_result(); while ($row = $p_result->fetch_assoc()) { $user_permissions[] = $row['permission_id']; } $p_stmt->close(); } ?>

تم حفظ البيانات بنجاح!

اسم المستخدم

البريد الإلكتروني اختياري - يمكن استخدامه لاستعادة كلمة المرور

كلمة المرور > اترك هذا الحقل فارغًا إذا كنت لا ترغب في تغيير كلمة المرور.

الصلاحيات

$permissions): ?>

إلغاء