|
Server IP : 103.53.40.154 / Your IP : 3.145.109.144 Web Server : Apache System : Linux md-in-35.webhostbox.net 4.19.286-203.ELK.el7.x86_64 #1 SMP Wed Jun 14 04:33:55 CDT 2023 x86_64 User : ppcad7no ( 715) PHP Version : 8.2.25 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0755) : /home2/ppcad7no/cyclopsecycles.com/cgi-bin/../../snackpoint.co.nz/admin/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
<?php
include_once('config.php');
if (!isLoggedIn()) {
$_SESSION['msg'] = "You must log in first";
header('location: login.php');
}
if (isset($_POST['update'])) {
$id = $_POST['id'];
$name = htmlspecialchars($_POST['pck_name'], ENT_QUOTES);
$names = preg_replace('/[#&,\[\]\(\)\{\};:"\'<>\*\^\$%@!?\/\\\|]/', '', $name);
$names = preg_replace('/\s+/', ' ', $names);
$nameWords = explode(' ', $names);
$names = implode(' ', $nameWords);
$url_links = strtolower($names);
$url_link = '/' . str_replace(' ', '-', $url_links);
$price = $_POST['pck_price'];
$description = $_POST['description'];
$itinerary = $_POST['itinerary'];
$accommodation = $_POST['accommodation'];
$incnexc = $_POST['incnexc'];
$pck_duration = $_POST['pck_duration'];
$spots_id = isset($_POST['spots_id']) ? implode(',', $_POST['spots_id']) : '';
$sql = "UPDATE `tbl_package` SET `pck_name`='$name', `rating`='$spots_id', `pck_desc`='$description', `itinerary`='$itinerary', `accommodation`='$accommodation', `incnexc`='$incnexc', `pck_url`='$url_link', `pck_duration`='$pck_duration', `pck_price`='$price'";
$images = ["pck_image"];
$uploaded_files = [];
foreach ($images as $image) {
if (!empty($_FILES[$image]['name'])) {
$image_extension = pathinfo($_FILES[$image]['name'], PATHINFO_EXTENSION);
$current_datetime = date('YmdHis');
$new_image_name = 'pck_' . $current_datetime . '.' . $image_extension;
move_uploaded_file($_FILES[$image]['tmp_name'], 'images/property-image/' . $new_image_name);
$uploaded_files[$image] = $new_image_name;
$sql .= ", $image='$new_image_name'";
}
}
$sql .= " WHERE pck_id=$id";
if ($db->query($sql) === TRUE) {
echo ("<script>
window.alert('Successfully Updated');
history.back();
</script>");
} else {
echo "Error: " . $sql . "<br>" . $db->error;
}
mysqli_close($db);
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<meta name="description" content="">
<meta name="author" content="">
<title>Admin</title>
<!-- Custom fonts for this template-->
<link href="vendor/fontawesome-free/css/all.min.css" rel="stylesheet" type="text/css">
<link
href="https://fonts.googleapis.com/css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i"
rel="stylesheet">
<!-- Custom styles for this template-->
<link href="css/sb-admin-2.min.css" rel="stylesheet">
<style>
div.dataTables_wrapper div.dataTables_filter input {
box-shadow: 0px 0 0 !important;
transform: translate(-123px,1px);
}
</style>
<link href="vendor/datatables/dataTables.bootstrap4.min.css" rel="stylesheet">
</head>
<body id="page-top">
<!-- Page Wrapper -->
<div id="wrapper">
<?php include_once('sidebar.php')?>
<!-- Content Wrapper -->
<div id="content-wrapper" class="d-flex flex-column">
<!-- Main Content -->
<div id="content">
<!-- Topbar -->
<?php include_once('topbar.php')?>
<!-- End of Topbar -->
<!-- Begin Page Content -->
<div class="container-fluid">
<!-- Page Heading -->
<div class="d-sm-flex align-items-center justify-content-between mb-4">
<h1 class="h3 mb-0 text-gray-800">Edit Package</h1>
</div>
<!-- DataTales Example -->
<div class="card shadow mb-4">
<div class="card-body">
<div class="container-fluid">
<?php
$id=$_GET['id'];
$sql = "SELECT * FROM tbl_package WHERE pck_id='$id'";
$run = mysqli_query($db,$sql) or die("Query Not run");
$data = mysqli_fetch_assoc($run);
?>
<form action="<?php $_PHP_SELF?>" method="POST" enctype="multipart/form-data">
<div class="row">
<div class="col">
<input type="hidden" value="<?php echo $data['pck_id'];?>" name="id">
<div class="form-group">
<label>Package Name</label>
<input type="text" class="form-control" name="pck_name" value="<?php echo $data['pck_name'];?>">
</div>
</div>
</div>
<div class="row">
<div class="col">
<div class="form-group">
<label>Package Image</label>
<input type="file" class="form-control" name="pck_image">
<img width="100px;" src="images/property-image/<?php echo $data['pck_image'];?>">
</div>
</div>
<div class="col">
<div class="form-group">
<label>Package Duration</label>
<input type="text" class="form-control" name="pck_duration" value="<?php echo $data['pck_duration'];?>">
</div>
</div>
<div class="col">
<div class="form-group">
<label>Package Price</label>
<input type="text" class="form-control" name="pck_price" value="<?php echo $data['pck_price'];?>">
</div>
</div>
<!--<div class="col">-->
<!-- <div class="form-group">-->
<!-- <label for="category">Package is Hot?</label>-->
<!-- <select name="pck_hot" class="form-control">-->
<!-- <option value="No">No</option>-->
<!-- <option value="Yes">Yes</option>-->
<!-- </select>-->
<!-- </div>-->
<!--</div>-->
</div>
<div class="row pt-2 pb-2" >
<div class="col">
<label>Choose Hotel Rating</label>
<div style="display:flex;flex-wrap:wrap;">
<?php
$star_ratings = ['1', '2', '3', '4', '5'];
$service_id = $data['pck_id'];
$sql_check_submission = "SELECT rating FROM `tbl_package` WHERE pck_id = $service_id";
$run_check_submission = mysqli_query($db, $sql_check_submission) or die("Query Not run");
$submitted_spots_ids = [];
if(mysqli_num_rows($run_check_submission) > 0) {
$row_check_submission = mysqli_fetch_assoc($run_check_submission);
$submitted_spots_ids = explode(',', $row_check_submission['rating']);
}
foreach ($star_ratings as $rating) {
$checked = (in_array($rating, $submitted_spots_ids)) ? 'checked' : '';
?>
<p class="pr-2"><input type="checkbox" name="spots_id[]" value='<?php echo $rating; ?>' <?php echo $checked; ?>> <?php echo $rating; ?> Star</p>
<?php
}
?>
</div>
</div>
</div>
<div class="row">
<div class="col">
<div class="form-group">
<label>Overview</label>
<textarea name="description" class="ckeditor"><?php echo $data['pck_desc'];?></textarea>
</div>
</div>
</div>
<div class="row">
<div class="col">
<div class="form-group">
<label>Itinerary</label>
<textarea name="itinerary" class="ckeditor"><?php echo $data['itinerary'];?></textarea>
</div>
</div>
</div>
<div class="row">
<div class="col">
<div class="form-group">
<label>Accommodation</label>
<textarea name="accommodation" class="ckeditor"><?php echo $data['accommodation'];?></textarea>
</div>
</div>
</div>
<div class="row">
<div class="col">
<div class="form-group">
<label>Inclusive & Exclusive</label>
<textarea name="incnexc" class="ckeditor"><?php echo $data['incnexc'];?></textarea>
</div>
</div>
</div>
<div class="row">
<div class="col-12">
<button type="update" name="update" class="btn btn-success" >Update</button>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
<!-- /.container-fluid -->
</div>
<!-- End of Main Content -->
<!-- Footer -->
<?php include_once('footer.php')?>
<script src="ckeditor/ckeditor.js"></script>
</body>
</html>