FM / admin

/var/www/vhosts/m-auto.co/httpdocs/admin/

/var/www/vhosts/m-auto.co/httpdocs/admin

Name	Size	Mode	Actions
assets/	-	0755	rm
includes/	-	0755	rm
7-6-2026.zip	10206	0644	edit dl rm
about_edit.php	3899	0644	edit dl rm
about_process.php	1367	0644	edit dl rm
auth.php	684	0644	edit dl rm
bookings.php	5367	0644	edit dl rm
booking_delete.php	924	0644	edit dl rm
branches.php	2470	0644	edit dl rm
branch_delete.php	1290	0644	edit dl rm
branch_form.php	4694	0644	edit dl rm
branch_process.php	1233	0644	edit dl rm
brands.php	2578	0644	edit dl rm
brand_delete.php	1327	0644	edit dl rm
brand_form.php	2369	0644	edit dl rm
brand_process.php	1660	0644	edit dl rm
cars.php	6946	0644	edit dl rm
car_delete.php	2886	0644	edit dl rm
car_form.php	40348	0644	edit dl rm
car_image_actions.php	5142	0644	edit dl rm
car_process.php	10426	0644	edit dl rm
categories.php	2167	0644	edit dl rm
category_delete.php	746	0644	edit dl rm
category_form.php	1607	0644	edit dl rm
category_process.php	943	0644	edit dl rm
dashboard.php	4965	0644	edit dl rm
index.php	2713	0644	edit dl rm
login_process.php	1532	0644	edit dl rm
logout.php	100	0644	edit dl rm
news.php	3448	0644	edit dl rm
news_delete.php	771	0644	edit dl rm
news_form.php	6769	0644	edit dl rm
news_process.php	2527	0644	edit dl rm
offers.php	2810	0644	edit dl rm
offer_delete.php	1327	0644	edit dl rm
offer_form.php	4573	0644	edit dl rm
offer_process.php	2115	0644	edit dl rm
settings.php	5217	0644	edit dl rm
settings_process.php	692	0644	edit dl rm
slider.php	3529	0644	edit dl rm
slider_delete.php	1345	0644	edit dl rm
slider_form.php	4529	0644	edit dl rm
slider_process.php	1983	0644	edit dl rm
themes.php	4703	0644	edit dl rm
theme_delete.php	1332	0644	edit dl rm
theme_form.php	1522	0644	edit dl rm
theme_process.php	1785	0644	edit dl rm
users.php	4480	0644	edit dl rm
user_delete.php	1055	0644	edit dl rm
user_form.php	5463	0644	edit dl rm
user_process.php	3193	0644	edit dl rm
videos.php	4942	0644	edit dl rm
video_delete.php	1717	0644	edit dl rm
video_form.php	7181	0644	edit dl rm
video_process.php	3336	0644	edit dl rm

Edit: /var/www/vhosts/m-auto.co/httpdocs/admin/user_process.php (3193B)

<?php
include '../includes/db_production.php';
include '../includes/permissions.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = $_POST['username'];
    $email = $_POST['email'] ?? null;
    $user_id = $_POST['id'] ?? null;
    $posted_permissions = $_POST['permissions'] ?? [];
    
    // Check appropriate permission based on action
    if (!empty($user_id)) {
        require_permission('users_edit');
    } else {
        require_permission('users_add');
    }

// --- Validation ---
    if (empty($username)) {
        header("Location: user_form.php?id=$user_id&error=اسم المستخدم مطلوب");
        exit;
    }

// Validate email if provided
    if (!empty($email) && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
        header("Location: user_form.php?id=$user_id&error=البريد الإلكتروني غير صحيح");
        exit;
    }

// --- Logic for EDIT ---
    if (!empty($user_id)) {
        if (!empty($_POST['password'])) {
            // Update user with new password
            $password = password_hash($_POST['password'], PASSWORD_DEFAULT);
            $stmt = $conn->prepare("UPDATE users SET username = ?, email = ?, password = ? WHERE id = ?");
            $stmt->bind_param("sssi", $username, $email, $password, $user_id);
        } else {
            // Update user without changing password
            $stmt = $conn->prepare("UPDATE users SET username = ?, email = ? WHERE id = ?");
            $stmt->bind_param("ssi", $username, $email, $user_id);
        }
        $stmt->execute();
        $stmt->close();
    // --- Logic for ADD ---
    } else {
        if (empty($_POST['password'])) {
            header("Location: user_form.php?error=كلمة المرور مطلوبة للمستخدمين الجدد");
            exit;
        }
        $password = password_hash($_POST['password'], PASSWORD_DEFAULT);
        $stmt = $conn->prepare("INSERT INTO users (username, email, password) VALUES (?, ?, ?)");
        $stmt->bind_param("sss", $username, $email, $password);
        $stmt->execute();
        $user_id = $conn->insert_id; // Get the new user's ID
        $stmt->close();
    }

// --- Update Permissions ---
    if ($user_id) {
        // 1. Delete old permissions
        $delete_stmt = $conn->prepare("DELETE FROM user_permissions WHERE user_id = ?");
        $delete_stmt->bind_param("i", $user_id);
        $delete_stmt->execute();
        $delete_stmt->close();

// 2. Insert new permissions
        if (!empty($posted_permissions)) {
            $insert_stmt = $conn->prepare("INSERT INTO user_permissions (user_id, permission_id) VALUES (?, ?)");
            foreach ($posted_permissions as $permission_id) {
                $insert_stmt->bind_param("ii", $user_id, $permission_id);
                $insert_stmt->execute();
            }
            $insert_stmt->close();
        }
    }

// Reload permissions in session if the user is editing themselves
    if ($user_id == $_SESSION['user_id']) {
        load_user_permissions($user_id, $conn);
    }

header("Location: users.php?success=1");
    exit;

} else {
    header("Location: users.php");
    exit;
}
?>

cmd: