MMCT TEAM
Server IP : 162.214.80.37  /  Your IP : 216.73.216.83
Web Server : Apache
System : Linux sh013.webhostingservices.com 4.19.286-203.ELK.el7.x86_64 #1 SMP Wed Jun 14 04:33:55 CDT 2023 x86_64
User : imyrqtmy ( 2189)
PHP Version : 8.2.18
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON
Directory (0755) :  /home2/imyrqtmy/public_html/masterfin/admin/

[  Home  ][  C0mmand  ][  Upload File  ]

Current File : /home2/imyrqtmy/public_html/masterfin/admin/add_share.php
<?php


session_start();
include("includes/config.php");

if(isset($_POST['add_share'])){
    $share_name = $_POST['share_name'];
    $share_purchase = $_POST['share_purchase'];
    $share_price = $_POST['share_price'];
    $rate = $_POST['rate'];
    $company_name = $_POST['company_name'];
    $face_value = $_POST['face_value'];
    $eps = $_POST['eps'];
    $pe_ratio = $_POST['pe_ratio'];
    $week_high = $_POST['week_high'];
    $day_low = $_POST['day_low'];
    $sector = $_POST['sector'];
    $office_addess = $_POST['office_addess'];
    $transfer_address = $_POST['transfer_address'];
    $description = $_POST['description'];

    // Handle image file (Optional)
    $photo = $_FILES['photo']['name'] ?? ''; // Allow empty value
    $allowed_image_extensions = array('gif', 'png', 'jpg', 'jpeg', 'webp', 'WEBP');

    if (!empty($photo)) { // Validate only if an image is uploaded
        $photo_extension = pathinfo($photo, PATHINFO_EXTENSION);
        if (!in_array($photo_extension, $allowed_image_extensions)) {
            $_SESSION['status'] = "Invalid image format. Please upload a valid image.";
            header('Location: share.php');
            exit;
        }
    }

    // Handle PDFs (Mandatory)
    $allowed_pdf_extensions = array('pdf');
    $pdf_files = ['pdf1', 'pdf2', 'pdf3'];
    $pdf_values = [];

    foreach ($pdf_files as $pdf) {
        if (!empty($_FILES[$pdf]['name'])) {
            $pdf_extension = pathinfo($_FILES[$pdf]['name'], PATHINFO_EXTENSION);
            if (!in_array($pdf_extension, $allowed_pdf_extensions)) {
                $_SESSION['status'] = "Invalid PDF format. Please upload valid PDFs.";
                header('Location: share.php');
                exit;
            }
            $pdf_values[$pdf] = $_FILES[$pdf]['name'];
        } else {
            $pdf_values[$pdf] = ''; // Store blank if no PDF uploaded
        }
    }

    // Insert data into database
    $query = "INSERT INTO shares (share_name, share_purchase, share_price, rate, company_name, face_value, eps, pe_ratio, week_high, day_low, sector, office_addess, transfer_address, description, pdf1, pdf2, pdf3, photo) 
              VALUES ('$share_name', '$share_purchase', '$share_price', '$rate', '$company_name', '$face_value', '$eps', '$pe_ratio', '$week_high', '$day_low', '$sector', '$office_addess', '$transfer_address', '$description', 
              '{$pdf_values['pdf1']}', '{$pdf_values['pdf2']}', '{$pdf_values['pdf3']}', '$photo')";

    $query_run = mysqli_query($conn, $query);

    if($query_run){
        // Move files only if they exist
        if (!empty($photo)) {
            move_uploaded_file($_FILES["photo"]["tmp_name"], "shares/" . $photo);
        }
        foreach ($pdf_files as $pdf) {
            if (!empty($_FILES[$pdf]['name'])) {
                move_uploaded_file($_FILES[$pdf]["tmp_name"], "pdfs/" . $_FILES[$pdf]['name']);
            }
        }

        $_SESSION['status'] = "Uploaded Successfully";
        echo "<script>window.location.href='view-share.php';</script>";
        exit;
    } else {
        $_SESSION['status'] = "Upload Failed";
        echo "<script>window.location.href='share.php';</script>";
        exit;
    }
}


// session_start();
// include("includes/config.php");

// if(isset($_POST['add_share'])){
//     $share_name = $_POST['share_name'];
//     $share_purchase = $_POST['share_purchase'];

//     $share_price = $_POST['share_price'];
//     $rate = $_POST['rate'];
//     $company_name = $_POST['company_name'];
//     $face_value = $_POST['face_value'];
//     $eps = $_POST['eps'];
//     $pe_ratio = $_POST['pe_ratio'];
//     $week_high = $_POST['week_high'];
//     $day_low = $_POST['day_low'];
//     $sector = $_POST['sector'];
//     $office_addess = $_POST['office_addess'];
//     $transfer_address = $_POST['transfer_address'];
//     $description = $_POST['description'];
    
//     $photo = $_FILES['photo']['name'];
//     $allowed_image_extensions = array('gif','png','jpg','jpeg','webp','WEBP');
//     $photo_extension = pathinfo($photo, PATHINFO_EXTENSION);
    
//     $pdf1 = $_FILES['pdf1']['name'];
//     $pdf2 = $_FILES['pdf2']['name'];
//     $pdf3 = $_FILES['pdf3']['name'];
    
//     $allowed_pdf_extensions = array('pdf');
    
//     $pdf1_extension = pathinfo($pdf1, PATHINFO_EXTENSION);
//     $pdf2_extension = pathinfo($pdf2, PATHINFO_EXTENSION);
//     $pdf3_extension = pathinfo($pdf3, PATHINFO_EXTENSION);
    
//     if(!in_array($photo_extension, $allowed_image_extensions)){
//         $_SESSION['status'] = "Invalid image format. Please upload a valid image.";
//         header('Location: share.php');
//         exit;
//     }
    
//     if(!in_array($pdf1_extension, $allowed_pdf_extensions) || !in_array($pdf2_extension, $allowed_pdf_extensions) || !in_array($pdf3_extension, $allowed_pdf_extensions)){
//         $_SESSION['status'] = "Invalid PDF format. Please upload valid PDFs.";
//         header('Location: share.php');
//         exit;
//     }
    
//     $query = "INSERT INTO shares (share_name, share_purchase, share_price, rate, company_name, face_value, eps, pe_ratio, week_high, day_low, sector, office_addess, transfer_address, description, pdf1, pdf2, pdf3, photo) 
//               VALUES ('$share_name', '$share_purchase', '$share_price', '$rate', '$company_name', '$face_value', '$eps', '$pe_ratio', '$week_high', '$day_low', '$sector', '$office_addess', '$transfer_address', '$description', '$pdf1', '$pdf2', '$pdf3', '$photo')";
    
//     $query_run = mysqli_query($conn, $query);
    
//     if($query_run){
//         move_uploaded_file($_FILES["photo"]["tmp_name"], "shares/" . $photo);
//         move_uploaded_file($_FILES["pdf1"]["tmp_name"], "pdfs/" . $pdf1);
//         move_uploaded_file($_FILES["pdf2"]["tmp_name"], "pdfs/" . $pdf2);
//         move_uploaded_file($_FILES["pdf3"]["tmp_name"], "pdfs/" . $pdf3);
        
//         $_SESSION['status'] = "Uploaded Successfully";
//         echo "<script>window.location.href='view-share.php';</script>";
//         exit;
//     } else {
//         $_SESSION['status'] = "Upload Failed";
//         echo "<script>window.location.href='share.php';</script>";
//         exit;
//     }
// }



if (isset($_POST['update_share'])) {
    $id = $_POST['id'];
    $share_name = $_POST['share_name'];
    $share_purchase = $_POST['share_purchase'];
    $share_price = $_POST['share_price'];
    $rate = $_POST['rate'];
    $company_name = $_POST['company_name'];
    $face_value = $_POST['face_value'];
    $eps = $_POST['eps'];
    $pe_ratio = $_POST['pe_ratio'];
    $week_high = $_POST['week_high'];
    $day_low = $_POST['day_low'];
    $sector = $_POST['sector'];
    $office_address = $_POST['office_addess'];
    $transfer_address = $_POST['transfer_address'];
    $description = $_POST['description'];

    // Handle Image Upload
    $old_photo = $_POST['image_old'];
    $update_photo_filename = $_FILES["photo"]["name"] ? $_FILES["photo"]["name"] : $old_photo;

    // Handle PDF Uploads
    $pdf1_old = $_POST['pdf1_old'];
    $pdf2_old = $_POST['pdf2_old'];
    $pdf3_old = $_POST['pdf3_old'];

    $pdf1_filename = $_FILES["pdf1"]["name"] ? $_FILES["pdf1"]["name"] : $pdf1_old;
    $pdf2_filename = $_FILES["pdf2"]["name"] ? $_FILES["pdf2"]["name"] : $pdf2_old;
    $pdf3_filename = $_FILES["pdf3"]["name"] ? $_FILES["pdf3"]["name"] : $pdf3_old;

    // Update Query
    $query = "UPDATE shares SET 
        share_name='$share_name', 
         share_purchase='$share_purchase', 
        share_price='$share_price', 
        rate='$rate',
        company_name='$company_name',  
        face_value='$face_value',  
        eps='$eps',  
        pe_ratio='$pe_ratio',  
        week_high='$week_high',  
        day_low='$day_low',  
        sector='$sector',  
        office_addess='$office_address',  
        transfer_address='$transfer_address',  
        description='$description',
        photo='$update_photo_filename',
        pdf1='$pdf1_filename',
        pdf2='$pdf2_filename',
        pdf3='$pdf3_filename'
    WHERE id='$id'";

    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        // Upload new image and remove old one
        if ($_FILES["photo"]["name"] && $_FILES["photo"]["name"] != $old_photo) {
            move_uploaded_file($_FILES["photo"]["tmp_name"], "shares/" . $_FILES["photo"]["name"]);
            if (file_exists("shares/" . $old_photo)) {
                unlink("shares/" . $old_photo);
            }
        }

        // Upload new PDFs and remove old ones
        $pdf_folder = "pdfs/";
        if ($_FILES["pdf1"]["name"] && $_FILES["pdf1"]["name"] != $pdf1_old) {
            move_uploaded_file($_FILES["pdf1"]["tmp_name"], $pdf_folder . $_FILES["pdf1"]["name"]);
            if (file_exists($pdf_folder . $pdf1_old)) {
                unlink($pdf_folder . $pdf1_old);
            }
        }

        if ($_FILES["pdf2"]["name"] && $_FILES["pdf2"]["name"] != $pdf2_old) {
            move_uploaded_file($_FILES["pdf2"]["tmp_name"], $pdf_folder . $_FILES["pdf2"]["name"]);
            if (file_exists($pdf_folder . $pdf2_old)) {
                unlink($pdf_folder . $pdf2_old);
            }
        }

        if ($_FILES["pdf3"]["name"] && $_FILES["pdf3"]["name"] != $pdf3_old) {
            move_uploaded_file($_FILES["pdf3"]["tmp_name"], $pdf_folder . $_FILES["pdf3"]["name"]);
            if (file_exists($pdf_folder . $pdf3_old)) {
                unlink($pdf_folder . $pdf3_old);
            }
        }

        $_SESSION['status'] = "Updated Successfully";
        echo "<script>window.location.href='view-share.php';</script>";
    } else {
        $_SESSION['status'] = "Not Updated";
        echo "<script>window.location.href='view-share.php';</script>";
    }
}


// DELETE

if (isset($_POST['delete_share'])) {
    $id = $_POST['delete_id'];
    $photo = $_POST['del_share'];
    $pdf1 = $_POST['del_pdf1'];
    $pdf2 = $_POST['del_pdf2'];
    $pdf3 = $_POST['del_pdf3'];

    // DELETE QUERY
    $query = "DELETE FROM shares WHERE id = '$id'";
    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        // Define folders
        $image_folder = "ushare/";
        $pdf_folder = "pdfs/";

        // Delete Image
        if ($photo && file_exists($image_folder . $photo)) {
            unlink($image_folder . $photo);
        }

        // Delete PDFs
        if ($pdf1 && file_exists($pdf_folder . $pdf1)) {
            unlink($pdf_folder . $pdf1);
        }
        if ($pdf2 && file_exists($pdf_folder . $pdf2)) {
            unlink($pdf_folder . $pdf2);
        }
        if ($pdf3 && file_exists($pdf_folder . $pdf3)) {
            unlink($pdf_folder . $pdf3);
        }

        $_SESSION['status'] = "Deleted Successfully";
        echo "<script>
            alert('Deleted Successfully');
            window.location.href = 'view-share.php';
        </script>";
    } else {
        $_SESSION['status'] = "Error deleting record";
        echo "<script>
            alert('Error deleting record');
            window.location.href = 'view-share.php';
        </script>";
    }
} else {
    $_SESSION['status'] = "Invalid request";
    echo "<script>
        alert('Invalid request');
        window.location.href = 'view-share.php';
    </script>";
}


?>

MMCT - 2023