Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

nginx/1.28.0

System:

Linux 6.8.0-90-generic

PHP Version:

8.4.15

User:

alqudsvolunteers

Directory:

/home/alqudsvolunteers/htdocs/www.alqudsvolunteers.id/fliptesting

Free Space:

81.8 GB

🔧 Quick Actions

✏️ Editing: create-payment.php

<?php
require_once __DIR__ . '/config/database.php';
require_once __DIR__ . '/libs/FlipAPI.php';

session_start();

// Simple CSRF protection
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

// Handle form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Validate CSRF token
    if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
        die('Invalid CSRF token');
    }
    
    // Validate input
    $required = ['title', 'amount', 'customer_name', 'customer_email'];
    foreach ($required as $field) {
        if (empty($_POST[$field])) {
            die("Field $field is required");
        }
    }
    
    // Validate amount
    $amount = (int) $_POST['amount'];
    if ($amount < 10000) { // Minimum amount Flip
        die("Minimum amount is Rp 10,000");
    }
    
    try {
        // Initialize Flip API
        $flip = new FlipAPI();
        
        // Generate unique external ID
        $externalId = 'INV-' . date('Ymd') . '-' . uniqid();
        
        // Prepare data for Flip
        $billData = [
            'title' => $_POST['title'],
            'amount' => $amount,
            'description' => $_POST['description'] ?? '',
            'sender_name' => $_POST['customer_name'],
            'sender_email' => $_POST['customer_email'],
            'sender_phone' => $_POST['customer_phone'] ?? '',
            'external_id' => $externalId,
            'redirect_url' => $_POST['redirect_url'] ?? CALLBACK_URL
        ];
        
        // Create bill in Flip
        $response = $flip->createBill($billData);
        
        // Save to database
        $db = getDB();
        $stmt = $db->prepare("
            INSERT INTO payments 
            (bill_id, bill_title, bill_description, amount, payer_name, payer_email, payer_phone, status, payment_url) 
            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
        ");
        
        $stmt->execute([
            $response['id'],
            $billData['title'],
            $billData['description'],
            $billData['amount'],
            $billData['sender_name'],
            $billData['sender_email'],
            $billData['sender_phone'],
            'pending',
            $response['payment_url']
        ]);
        
        $paymentId = $db->lastInsertId();
        
        // Log the creation
        $logStmt = $db->prepare("INSERT INTO payment_logs (payment_id, event_type, payload) VALUES (?, ?, ?)");
        $logStmt->execute([$paymentId, 'created', json_encode($response)]);
        
        // Redirect to Flip payment page
        header('Location: ' . $response['payment_url']);
        exit;
        
    } catch (Exception $e) {
        $error = "Error creating payment: " . $e->getMessage();
    }
}
?>

<!DOCTYPE html>
<html lang="id">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Create Payment</title>
    <style>
        body { font-family: Arial, sans-serif; max-width: 500px; margin: 50px auto; padding: 20px; }
        .form-group { margin-bottom: 15px; }
        label { display: block; margin-bottom: 5px; }
        input, textarea { width: 100%; padding: 8px; border: 1px solid #ddd; border-radius: 4px; }
        button { background: #007bff; color: white; padding: 10px 20px; border: none; border-radius: 4px; cursor: pointer; }
        .error { color: red; margin-bottom: 15px; }
    </style>
</head>
<body>
    <h1>Create Payment</h1>
    
    <?php if (isset($error)): ?>
        <div class="error"><?php echo htmlspecialchars($error); ?></div>
    <?php endif; ?>
    
    <form method="POST">
        <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">
        
        <div class="form-group">
            <label for="title">Payment Title *</label>
            <input type="text" id="title" name="title" required>
        </div>
        
        <div class="form-group">
            <label for="description">Description</label>
            <textarea id="description" name="description" rows="3"></textarea>
        </div>
        
        <div class="form-group">
            <label for="amount">Amount (IDR) *</label>
            <input type="number" id="amount" name="amount" min="10000" required>
        </div>
        
        <div class="form-group">
            <label for="customer_name">Customer Name *</label>
            <input type="text" id="customer_name" name="customer_name" required>
        </div>
        
        <div class="form-group">
            <label for="customer_email">Customer Email *</label>
            <input type="email" id="customer_email" name="customer_email" required>
        </div>
        
        <div class="form-group">
            <label for="customer_phone">Customer Phone</label>
            <input type="tel" id="customer_phone" name="customer_phone">
        </div>
        
        <button type="submit">Create Payment</button>
    </form>
    
    <p style="margin-top: 20px; color: #666;">
        <small>Payment will be processed via Flip. Minimum amount: Rp 10,000</small>
    </p>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: create-payment.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation