File manager

File manager - Edit - /home/custbahd/tourismfraternity.com/admin/listings/edit/index.php

Back
<?php session_start(); include_once('../../db/saucerer.php'); if(isset($_POST['submit'])){ $id = mysqli_real_escape_string($mysqli, $_POST['id']); $code = mysqli_real_escape_string($mysqli, $_POST['code']); $title = mysqli_real_escape_string($mysqli, $_POST['title']); $cat = mysqli_real_escape_string($mysqli, $_POST['cat']); $sub = mysqli_real_escape_string($mysqli, $_POST['sub']); $email = mysqli_real_escape_string($mysqli, $_POST['email']); $phone = mysqli_real_escape_string($mysqli, $_POST['phone']); $gender = mysqli_real_escape_string($mysqli, $_POST['gender']); $address = mysqli_real_escape_string($mysqli, $_POST['address']); $district = mysqli_real_escape_string($mysqli, $_POST['district']); $country = mysqli_real_escape_string($mysqli, $_POST['country']); $reg_no = mysqli_real_escape_string($mysqli, $_POST['reg_no']); $hr_open = mysqli_real_escape_string($mysqli, $_POST['hr_open']); $hr_close = mysqli_real_escape_string($mysqli, $_POST['hr_close']); $services = mysqli_real_escape_string($mysqli, $_POST['services']); $paragraph1 = mysqli_real_escape_string($mysqli, $_POST['paragraph1']); $phone1 = mysqli_real_escape_string($mysqli, $_POST['phone1']); $phone2 = mysqli_real_escape_string($mysqli, $_POST['phone2']); $g_maps = mysqli_real_escape_string($mysqli, $_POST['g_maps']); $facebook = mysqli_real_escape_string($mysqli, $_POST['facebook']); $instagram = mysqli_real_escape_string($mysqli, $_POST['instagram']); $twitter = mysqli_real_escape_string($mysqli, $_POST['twitter']); $youtube = mysqli_real_escape_string($mysqli, $_POST['youtube']); $website = mysqli_real_escape_string($mysqli, $_POST['website']); $summ1 = mysqli_real_escape_string($mysqli, $_POST['summ1']); $summ2 = mysqli_real_escape_string($mysqli, $_POST['summ2']); $summ3 = mysqli_real_escape_string($mysqli, $_POST['summ3']); $summ4 = mysqli_real_escape_string($mysqli, $_POST['summ4']); $summ5 = mysqli_real_escape_string($mysqli, $_POST['summ5']); $summ6 = mysqli_real_escape_string($mysqli, $_POST['summ6']); if ($_FILES['image']['name']=='') { $image = $_POST['image']; } else { $ext = substr($_FILES['image']['name'], strrpos($_FILES['image']['name'], '.')+1); $image = $code.'.'.$ext; if(is_file('../images/'. $image)) unlink('../images/'. $image); move_uploaded_file($_FILES['image']['tmp_name'],'../images/'. $image); } if ($_FILES['image1']['name']=='') { $image1 = $_POST['image1']; } else { $ext1 = substr($_FILES['image1']['name'], strrpos($_FILES['image1']['name'], '.')+1); $image1 = $code.'_1.'.$ext1; if(is_file('../images/'. $image1)) unlink('../images/'. $image1); move_uploaded_file($_FILES['image1']['tmp_name'],'../images/'. $image1); } if ($_FILES['image2']['name']=='') { $image2 = $_POST['image2']; } else { $ext2 = substr($_FILES['image2']['name'], strrpos($_FILES['image2']['name'], '.')+1); $image2 = $code.'_2.'.$ext2; if(is_file('../images/'. $image2)) unlink('../images/'. $image2); move_uploaded_file($_FILES['image2']['tmp_name'],'../images/'. $image2); } if ($_FILES['image3']['name']=='') { $image3 = $_POST['image3']; } else { $ext3 = substr($_FILES['image3']['name'], strrpos($_FILES['image3']['name'], '.')+1); $image3 = $code.'_3.'.$ext3; if(is_file('../images/'. $image3)) unlink('../images/'. $image3); move_uploaded_file($_FILES['image3']['tmp_name'],'../images/'. $image3); } if ($_FILES['image4']['name']=='') { $image4 = $_POST['image4']; } else { $ext4 = substr($_FILES['image4']['name'], strrpos($_FILES['image4']['name'], '.')+1); $image4 = $code.'_4.'.$ext4; if(is_file('../images/'. $image4)) unlink('../images/'. $image4); move_uploaded_file($_FILES['image4']['tmp_name'],'../images/'. $image4); } if ($_FILES['image5']['name']=='') { $image5 = $_POST['image5']; } else { $ext5 = substr($_FILES['image5']['name'], strrpos($_FILES['image5']['name'], '.')+1); $image5 = $code.'_5.'.$ext5; if(is_file('../images/'. $image5)) unlink('../images/'. $image5); move_uploaded_file($_FILES['image5']['tmp_name'],'../images/'. $image5); } if ($_FILES['image6']['name']=='') { $image6 = $_POST['image6']; } else { $ext6 = substr($_FILES['image6']['name'], strrpos($_FILES['image6']['name'], '.')+1); $image6 = $code.'_6.'.$ext6; if(is_file('../images/'. $image6)) unlink('../images/'. $image6); move_uploaded_file($_FILES['image6']['tmp_name'],'../images/'. $image6); } $sql = "UPDATE listings SET title = '$title', cat = '$cat', sub = '$sub', email = '$email', phone = '$phone', gender = '$gender', address = '$address', district = '$district', country = '$country', reg_no = '$reg_no', hr_open = '$hr_open', hr_close = '$hr_close', services = '$services', paragraph1 = '$paragraph1', phone1 = '$phone1', phone2 = '$phone2', g_maps = '$g_maps', facebook = '$facebook', instagram = '$instagram', twitter = '$twitter', youtube = '$youtube', website = '$website', image = '$image', image1 = '$image1', image2 = '$image2', image3 = '$image3', image4 = '$image4', image5 = '$image5', image6 = '$image6', summ1 = '$summ1', summ2 = '$summ2', summ3 = '$summ3', summ4 = '$summ4', summ5 = '$summ5', summ6 = '$summ6' WHERE id = '$id'"; //use for MySQLi OOP if(mysqli_query($mysqli, $sql)){ $_SESSION['success'] = ''.$title.' updated successfully'; } else{ $_SESSION['error'] = 'Something went wrong while updating '.$title.'!'; } } header('location: ../#nav_'.$id.''); ?>

| ver. 1.4 | Github | . | PHP 8.1.33 | Generation time: 1.5 | proxy | phpinfo | Settings