1#@!#!123s

https 1#@!#!123s
: / home2 / hershinecreation / public_html / horti-frutas.com / editcontroller /
Filename : editpro.php
back
<?php 
require '../DB/db.php';

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Process form data
    $pid = $_POST['pid'];
    // echo $pid;
    $pname = str_replace("'", "\'", $_POST['p_name']);
    $pslug = str_replace("'", "\'", $_POST['p_slug']);
    $pcat = $_POST["cat"];
    $ptype = $_POST["type"];
    $pdes = $_POST["p_des"];
    $pSEC = $_POST["p_sec"];

    // Function to get the image name from file path
    function getImageName($filePath) {
        $pathParts = pathinfo($filePath);
        return str_replace(["'", " "], ["", "-"],$pathParts['basename']); // Replacing single quotes in image name
    }

    // Check if each file input is set and uploaded
    if(isset($_FILES['p_img']) && $_FILES['p_img']['error'] === UPLOAD_ERR_OK) {
        // File upload handling for p_img
        $imgName = getImageName($_FILES['p_img']['name']);
        $pimg = $pid . '' . $imgName; // Concatenate the pid and imgName
        $p_img = '../imgupload/pUpload/' . $pimg; // Add unique ID to filename
        move_uploaded_file($_FILES['p_img']['tmp_name'], $p_img);
    }

    if(isset($_FILES['p_img1']) && $_FILES['p_img1']['error'] === UPLOAD_ERR_OK) {
        // File upload handling for p_img1
        $imgName1 = getImageName($_FILES['p_img1']['name']);
        $pimg1 = $pid . '' . $imgName1; // Concatenate the pid and imgName
        $p_img1 = '../imgupload/pUpload/' . $pimg1; // Add unique ID to filename
        move_uploaded_file($_FILES['p_img1']['tmp_name'], $p_img1);
    }

    if(isset($_FILES['p_img2']) && $_FILES['p_img2']['error'] === UPLOAD_ERR_OK) {
        // File upload handling for p_img2
        $imgName2 = getImageName($_FILES['p_img2']['name']);
        $pimg2 = $pid . '' . $imgName2; // Concatenate the pid and imgName
        $p_img2 = '../imgupload/pUpload/' . $pimg2; // Add unique ID to filename
        move_uploaded_file($_FILES['p_img2']['tmp_name'], $p_img2);
    }

    if(isset($_FILES['p_img3']) && $_FILES['p_img3']['error'] === UPLOAD_ERR_OK) {
        // File upload handling for p_img3
        $imgName3 = getImageName($_FILES['p_img3']['name']);
        $pimg3 = $pid . '' . $imgName3; // Concatenate the pid and imgName
        $p_img3 = '../imgupload/pUpload/' . $pimg3; // Add unique ID to filename
        move_uploaded_file($_FILES['p_img3']['tmp_name'], $p_img3);
    }

    // Update data in database
    $sql = "UPDATE `products` SET 
            `c_id`='$pcat', 
            `p_name`='$pname', 
            `slug`='$pslug', 
            `p_img`= IF('$pimg' <> '', '$pimg', `p_img`), 
            `p_img1`= IF('$pimg1' <> '', '$pimg1', `p_img1`), 
            `p_img2`= IF('$pimg2' <> '', '$pimg2', `p_img2`), 
            `p_img3`= IF('$pimg3' <> '', '$pimg3', `p_img3`), 
            `p_des`='$pdes', 
            `p_sec`='$psec', 
            `type`='$ptype' 
            WHERE `p_id`='$pid'";

    if ($conn->query($sql) === TRUE) {
        header("Location: ../admin.php");
    } else {
        echo "Error: " . $sql . "<br>" . $conn->error;
    }

    $conn->close();
}
?>