SWAMPy

✎ CARVE FLESH

EDITING: helpers.php

<?php
// helpers.php — Global Essentials Royale
// Shared utility functions — include after config.php

function sanitize(string $input): string {
    return htmlspecialchars(strip_tags(trim($input)), ENT_QUOTES, 'UTF-8');
}

function slugify(string $text): string {
    $text = strtolower(trim($text));
    $text = preg_replace('/[^a-z0-9\s-]/', '', $text);
    $text = preg_replace('/[\s-]+/', '-', $text);
    return trim($text, '-');
}

function generate_token(int $bytes = 5): string {
    return strtoupper(bin2hex(random_bytes($bytes)));
}

function format_naira(float $amount): string {
    return '₦' . number_format($amount, 2);
}

function upload_image(array $file, string $folder): string {
    global $env;

$allowed_types = ['image/jpeg', 'image/png', 'image/webp', 'image/jpg'];
    $max_bytes     = (int)($env['UPLOAD_MAX_MB'] ?? 5) * 1024 * 1024;

if ($file['error'] !== UPLOAD_ERR_OK) {
        json_response(['error' => 'Upload error code: ' . $file['error']], 400);
    }

$finfo = finfo_open(FILEINFO_MIME_TYPE);
    $mime  = finfo_file($finfo, $file['tmp_name']);
    finfo_close($finfo);

if (!in_array($mime, $allowed_types)) {
        json_response(['error' => 'Only JPG, PNG, and WebP images are allowed'], 400);
    }

if ($file['size'] > $max_bytes) {
        json_response(['error' => 'Image too large. Max ' . ($env['UPLOAD_MAX_MB'] ?? 5) . 'MB'], 400);
    }

$ext      = match($mime) {
        'image/jpeg', 'image/jpg' => 'jpg',
        'image/png'               => 'png',
        'image/webp'              => 'webp',
        default                   => 'jpg',
    };

$filename = time() . '_' . bin2hex(random_bytes(6)) . '.' . $ext;
    $dir      = __DIR__ . "/uploads/{$folder}/";

if (!is_dir($dir)) mkdir($dir, 0755, true);

if (!move_uploaded_file($file['tmp_name'], $dir . $filename)) {
        json_response(['error' => 'Failed to save image'], 500);
    }

// Fixed: use https:// fallback to prevent mixed-content issues
    $api_url = $env['API_URL'] ?? 'https://api.globalessentialsroyale.com.ng';
    return "{$api_url}/api/uploads/{$folder}/{$filename}";
}

function build_whatsapp_link(array $order, array $items, string $token): string {
    global $env;

$wa_phone = $env['WA_PHONE'] ?? '2349152568311';
    $site_url = $env['SITE_URL'] ?? 'https://globalessentialsroyale.com.ng';

$items_text = implode("\n", array_map(function($i) {
        $line_total = number_format((float)$i['price'] * (int)$i['quantity'], 2);
        return "• {$i['name']} x{$i['quantity']} — ₦{$line_total}";
    }, $items));

$total_fmt = number_format((float)$order['total'], 2);

$msg  = "🛍️ *NEW ORDER — Global Essentials Royale*\n\n";
    $msg .= "📋 *Order Ref:* ORD-{$token}\n";
    $msg .= "👤 *Name:* {$order['name']}\n";
    $msg .= "📞 *Phone:* {$order['phone']}\n";
    $msg .= "📍 *Address:* {$order['address']}, {$order['state']}\n\n";
    $msg .= "🛒 *Items Ordered:*\n{$items_text}\n\n";
    $msg .= "💰 *Total:* ₦{$total_fmt}\n\n";
    $msg .= "📎 *Payment Receipt:* [Customer will attach below]\n\n";
    $msg .= "✅ *Confirm Order:* {$site_url}/confirm/{$token}";

return "https://wa.me/{$wa_phone}?text=" . rawurlencode($msg);
}

function require_fields(array $body, array $fields): void {
    foreach ($fields as $field) {
        if (empty($body[$field])) {
            json_response(['error' => "Missing required field: {$field}"], 422);
        }
    }
}

function paginate(int $page, int $limit = 20): array {
    $page   = max(1, (int)$page);
    $limit  = min(100, max(1, (int)$limit));
    $offset = ($page - 1) * $limit;
    return compact('page', 'limit', 'offset');
}

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📁 .well-known/	DIR	—	2026-03-08 12:46
📁 cgi-bin/	DIR	—	2026-03-08 12:45
📁 uploads/	DIR	—	2026-03-08 21:35
📄 .env	ENV	321 B	2026-03-08 16:29	EDIT
📄 .htaccess	HTACCESS	1.1 KB	2026-03-09 13:49	EDIT
📄 .well-known.zip	ZIP	1 MB	2026-03-09 05:05	EDIT
📄 AdminImageUploader.tsx	TSX	4.5 KB	2026-03-09 13:21	EDIT
📄 AdminProductEdit.tsx	TSX	20.1 KB	2026-03-09 13:21	EDIT
📄 auth.php	PHP	1.6 KB	2026-03-08 18:11	EDIT
📄 auth_middleware.php	PHP	1.6 KB	2026-03-08 18:11	EDIT
📄 banners.php	PHP	6.2 KB	2026-03-09 00:28	EDIT
📄 categories.php	PHP	4.6 KB	2026-03-08 18:11	EDIT
📄 change_password.php	PHP	1.4 KB	2026-03-08 13:03	EDIT
📄 config.php	PHP	3.3 KB	2026-03-08 16:29	EDIT
📄 confirm.php	PHP	2.2 KB	2026-03-09 04:46	EDIT
📄 error_log	?	95.4 KB	2026-03-09 03:05	EDIT
📄 helpers.php	PHP	3.6 KB	2026-03-09 13:48	EDIT
📄 index.php	PHP	2.1 KB	2026-03-08 13:03	EDIT
📄 orders.php	PHP	5.9 KB	2026-03-08 13:04	EDIT
📄 products.php	PHP	8.6 KB	2026-03-08 18:11	EDIT
📄 receipts.php	PHP	2.3 KB	2026-03-08 13:04	EDIT
📄 register.php	PHP	4.4 KB	2026-03-08 17:09	EDIT
📄 register_debug.log	LOG	177 B	2026-03-08 17:14	EDIT
📄 settings.php	PHP	2 KB	2026-03-08 13:04	EDIT
📄 upload.php	PHP	902 B	2026-03-08 18:47	EDIT
📄 whatsapp.php	PHP	1.2 KB	2026-03-08 13:04	EDIT