requireRole(['super_admin', 'admin']); $db = DB(); $flash = getFlashMessage(); // Handle Add / Edit if ($_SERVER['REQUEST_METHOD'] === 'POST') { // CSRF Protection if (!Auth()->verifyCSRFToken($_POST['csrf_token'] ?? '')) { redirectWithMessage('sliders.php', 'Security session expired. Please try again.', 'danger'); } $action = $_POST['action'] ?? ''; // Handle Delete (now via POST) if ($action === 'delete' && isset($_POST['id'])) { $db->delete('sliders', ['id' => intval($_POST['id'])]); redirectWithMessage('sliders.php', 'Slider deleted successfully', 'success'); } if ($action === 'save') { $id = intval($_POST['id'] ?? 0); $title = cleanInput($_POST['title']); $description = cleanInput($_POST['description']); $button_text = cleanInput($_POST['button_text'] ?? ''); $button_link = cleanInput($_POST['button_link'] ?? ''); $status = $_POST['status'] ?? 'active'; $display_order = intval($_POST['display_order'] ?? 0); $data = [ 'title' => $title, 'description' => $description, 'button_text' => $button_text, 'button_link' => $button_link, 'status' => $status, 'display_order' => $display_order ]; // Handle File Uploads (Image) $uploadDir = '../uploads/sliders/'; if (!is_dir($uploadDir)) mkdir($uploadDir, 0777, true); if (isset($_FILES['image']) && $_FILES['image']['error'] === 0) { $allowed = ['jpg', 'jpeg', 'png', 'webp']; $ext = strtolower(pathinfo($_FILES['image']['name'], PATHINFO_EXTENSION)); if (in_array($ext, $allowed)) { $imageName = time() . '_slider_' . bin2hex(random_bytes(8)) . '.' . $ext; if (move_uploaded_file($_FILES['image']['tmp_name'], $uploadDir . $imageName)) { $data['image_path'] = 'uploads/sliders/' . $imageName; } } } if ($id > 0) { $db->update('sliders', $data, ['id' => $id]); redirectWithMessage('sliders.php', 'Slider updated successfully', 'success'); } else { // Check image is required for new if (empty($data['image_path'])) { redirectWithMessage('sliders.php', 'Image is required for new slider.', 'danger'); } $db->insert('sliders', $data); redirectWithMessage('sliders.php', 'Slider added successfully', 'success'); } } } $sliders = $db->fetchAll("SELECT * FROM sliders ORDER BY display_order ASC, created_at DESC"); ?> Manage Sliders - <?= APP_SHORT_NAME ?>

Manage Homepage Sliders

Preview Slider Content Button Order Status Actions
No sliders found. Default fallback images will show on homepage.
Slider
No Button