Server IP : 103.53.40.154 / Your IP : 18.191.93.18 Web Server : Apache System : Linux md-in-35.webhostbox.net 4.19.286-203.ELK.el7.x86_64 #1 SMP Wed Jun 14 04:33:55 CDT 2023 x86_64 User : ppcad7no ( 715) PHP Version : 8.2.25 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0755) : /home2/ppcad7no/relianttourism.com/admin/ |
[ Home ] | [ C0mmand ] | [ Upload File ] |
---|
<?php include_once('config.php'); if (!isLoggedIn()) { $_SESSION['msg'] = "You must log in first"; header('location: login.php'); } if (isset($_POST['update'])) { $id=$_POST['id']; $names = htmlspecialchars($_POST['name'], ENT_QUOTES); $tour_status=$_POST['tour_status']; $display_name=$_POST['display_name']; // $url_link=$_POST['slug_url']; $mrp=$_POST['mrp']; $price=$_POST['price']; $swift_price=$_POST['swift_price']; $tempo_10seater_price=$_POST['tempo_10seater_price']; $tempo_12seater_price=$_POST['tempo_12seater_price']; $tempo_14seater_price=$_POST['tempo_14seater_price']; $bus_price=$_POST['bus_price']; $m_id=$_POST['tour_cat']; $short_desc=$_POST['short_desc']; $notification=$_POST['notification']; $spots_id = isset($_POST['spots_id']) ? implode(',', $_POST['spots_id']) : ''; $names = preg_replace('/[#&,\[\]\(\)\{\};:"\'<>\*\^\$%@!?\/\\\|]/', '', $names); $names = preg_replace('/\s+/', ' ', $names); $nameWords = explode(' ', $names); $names = implode(' ', $nameWords); $url_links = strtolower($names); $url_link = '/' . str_replace(' ', '-', $url_links); $duration=$_POST['duration']; $desc=$_POST['desc']; $meta_title = $_POST['meta_title']; $meta_desc = htmlspecialchars($_POST['meta_desc'], ENT_QUOTES); $sql = "UPDATE `tbl_services` SET `name`='$names', `spots_tour`='$spots_id', `tour_notification`='$notification', `mrp`='$mrp', `display_name`='$display_name', `tour_status`='$tour_status', `short_desc`='$short_desc', `desc`='$desc', `m_id`='$m_id', `meta_title`='$meta_title', `meta_desc`='$meta_desc', `slug_url`='$url_link', `duration`='$duration', `price`='$price', `swift_price`='$swift_price', `tempo_10seater_price`='$tempo_10seater_price', `tempo_12seater_price`='$tempo_12seater_price', `tempo_14seater_price`='$tempo_14seater_price',`bus_price`='$bus_price' "; // $result=mysqli_query($db, $sql) or die("Query unsuccessful"); $images = ["image"]; $uploaded_files = []; foreach ($images as $image) { if (!empty($_FILES[$image]['name'])) { $image_extension = pathinfo($_FILES['image']['name'], PATHINFO_EXTENSION); $current_datetime = date('YmdHis'); $new_image_name = 'image_' . $current_datetime . '.' . $image_extension; move_uploaded_file($_FILES['image']['tmp_name'], 'images/property-image/' . $new_image_name); $upload_image = $new_image_name; if ($upload_image) { $uploaded_files[$image] = $new_image_name; $sql .= ", $image='$new_image_name'"; } else { echo "Error: Failed to upload $image"; exit; } } } $sql .= " WHERE id=$id"; if ($db->query($sql) === TRUE) { echo ("<script> window.alert('Successfully Updated'); window.location.href='manage_service.php'; </script>"); } else { echo "Error: " . $sql . "<br>" . $db->error; } mysqli_close($db); } ?> <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>Admin</title> <!-- Custom fonts for this template--> <link href="vendor/fontawesome-free/css/all.min.css" rel="stylesheet" type="text/css"> <link href="https://fonts.googleapis.com/css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i" rel="stylesheet"> <!-- Custom styles for this template--> <link href="css/sb-admin-2.min.css" rel="stylesheet"> <style> div.dataTables_wrapper div.dataTables_filter input { box-shadow: 0px 0 0 !important; transform: translate(-123px,1px); } p{ padding-right:15px; } </style> <link href="vendor/datatables/dataTables.bootstrap4.min.css" rel="stylesheet"> </head> <body id="page-top"> <!-- Page Wrapper --> <div id="wrapper"> <?php include_once('sidebar.php')?> <!-- Content Wrapper --> <div id="content-wrapper" class="d-flex flex-column"> <!-- Main Content --> <div id="content"> <!-- Topbar --> <?php include_once('topbar.php')?> <!-- End of Topbar --> <!-- Begin Page Content --> <div class="container-fluid"> <!-- Page Heading --> <div class="d-sm-flex align-items-center justify-content-between mb-4"> <h1 class="h3 mb-0 text-gray-800">Edit Tour</h1> <button class="btn btn-info" onclick="goBack()"><i class="fas fa-caret-left fa-sm text-white-50 pr-2" style="color: white !important;"></i> Back</button> </div> <!-- DataTales Example --> <div class="card shadow mb-4"> <div class="card-body"> <div class="container-fluid"> <?php $id=$_GET['id']; $sql = "SELECT * FROM `tbl_services` WHERE id=$id"; $run = mysqli_query($db,$sql) or die("Query Not run"); $data = mysqli_fetch_assoc($run); $site_pages_status=$data['tour_status']; $site=$data['m_id']; $sqlc = "SELECT * FROM `tbl_main_cat` WHERE c_id='$site'"; $runc = mysqli_query($db, $sqlc) or die("Query Not run"); $datac = mysqli_fetch_assoc($runc); ?> <form action="<?php $_PHP_SELF?>" method="POST" enctype="multipart/form-data"> <div class="row"> <div class="col"> <div class="form-group"> <label>Tour Display Name</label> <input type="text" class="form-control" name="display_name" value="<?php echo $data['display_name'];?>"> </div> </div> </div> <div class="row"> <div class="col-xl-6"> <input type="hidden" value="<?php echo $data['id'];?>" name="id"> <div class="form-group"> <label>Tour Name</label> <input type="text" class="form-control" name="name" value="<?php echo $data['name'];?>"> </div> </div> <div class="col-xl-6"> <div class="form-group"> <label>Image</label> <input type="file" class="form-control" name="image"> <img width="100px;" src="images/property-image/<?php echo $data['image'];?>"> </div> </div> </div> <div class="row"> <div class="col-6"> <div class="form-group"> <label>Innova Price</label> <input type="text" class="form-control" name="bus_price" value="<?php echo $data['bus_price'];?>"> </div> </div> </div> <div class="row"> <div class="col-xl-4"> <div class="form-group"> <label>Innova Price</label> <input type="text" class="form-control" name="mrp" value="<?php echo $data['mrp'];?>"> </div> </div> <div class="col-xl-4"> <div class="form-group"> <label>Ertiga Price</label> <input type="text" class="form-control" name="price" value="<?php echo $data['price'];?>"> </div> </div> <div class="col-xl-4"> <div class="form-group"> <label>Swift Price</label> <input type="text" class="form-control" name="swift_price" value="<?php echo $data['swift_price'];?>"> </div> </div> </div> <div class="row"> <div class="col-xl-4"> <div class="form-group"> <label>Tempo 10 Seater Price</label> <input type="text" class="form-control" name="tempo_10seater_price" value="<?php echo $data['tempo_10seater_price'];?>"> </div> </div> <div class="col-xl-4"> <div class="form-group"> <label>Tempo 12 Seater</label> <input type="text" class="form-control" name="tempo_12seater_price" value="<?php echo $data['tempo_12seater_price'];?>"> </div> </div> <div class="col-xl-4"> <div class="form-group"> <label>Tempo 14 Seater</label> <input type="text" class="form-control" name="tempo_14seater_price" value="<?php echo $data['tempo_14seater_price'];?>"> </div> </div> </div> <div class="row"> <div class="col"> <div class="form-group"> <label for="category">Select Tour Category</label> <select style ="width:100%; height:2.3rem; padding:3px; border-radius:5px;" name="tour_cat"> <option value="<?php echo $datac['c_id'];?>"><?php echo $datac['cat_name'];?></option> <?php $sqlcat = "SELECT * FROM `tbl_main_cat` WHERE cat_status='Active'"; $runcat = mysqli_query($db, $sqlcat) or die("Query Not run"); while ($datacat = mysqli_fetch_assoc($runcat)) { $site_pages_status=$site; ?> <option value="<?php echo $datacat['c_id'];?>"><?php echo $datacat['cat_name'];?></option> <?php } ?> </select> </div> </div> <div class="col"> <div class="form-group"> <label for="category">Tour Status</label> <select style ="width:100%; height:2.3rem; padding:3px; border-radius:5px;" name="tour_status"> <option value="Active" <?php if($site_pages_status=='Active'){ ?> selected="selected" <? } ?>>Active</option> <option value="Inactive" <?php if($site_pages_status=='Inactive'){ ?> selected="selected" <? } ?>>Inactive</option> <option value="Full" <?php if($site_pages_status=='Full'){ ?> selected="selected" <? } ?>>Full</option> </select> </div> </div> </div> <div class="row"> <div class="col"> <div class="form-group"> <label><b>Notification Message</b></label> <textarea style="resize:none;" name="notification" class="form-control" rows="4" col="2" ><?php echo $data['tour_notification'];?></textarea> </div> </div> </div> <div class="row pt-2 pb-2"> <div class="col"> <label>Choose Tour Spots Palace</label> <div style="display:flex;flex-wrap:wrap;"> <?php $sqlsp = "SELECT * FROM `tbl_tourspots`"; $runsp = mysqli_query($db, $sqlsp) or die("Query Not run"); $submitted_spots_ids = array(); $service_id = $_GET['id']; $sql_check_submission = "SELECT spots_tour FROM `tbl_services` WHERE id = $service_id"; $run_check_submission = mysqli_query($db, $sql_check_submission) or die("Query Not run"); while ($row_check_submission = mysqli_fetch_assoc($run_check_submission)) { $submitted_spots_ids = explode(',', $row_check_submission['spots_tour']); } while ($datasp = mysqli_fetch_assoc($runsp)) { $spot_id = $datasp['spots_id']; $checked = (!empty($submitted_spots_ids) && in_array($spot_id, $submitted_spots_ids)) ? 'checked' : ''; ?> <p><input type="checkbox" name="spots_id[]" value='<?php echo $spot_id; ?>' <?php echo $checked; ?>> <?php echo $datasp['spots_name']; ?></p> <?php } ?> </div> </div> </div> <div class="row"> <div class="col"> <div class="form-group"> <label><b>Short Description</b></label> <textarea name="short_desc" class="ckeditor"><?php echo $data['short_desc'];?></textarea> </div> </div> </div> <div class="row"> <div class="col"> <div class="form-group"> <label><b>Long Description</b></label> <textarea name="desc" class="ckeditor"><?php echo $data['desc'];?></textarea> </div> </div> </div> <div class="col-lg-12" style="padding:0;background-color:#e8f1f3;margin:20px 0 50px 0"> <div class="btn-group" id="buttonexport"> <h4 style="color:#000;font-weight:600;padding:5px">SEO Related Information</h4> </div> </div> <?php if (isset($_SESSION['user']) && $_SESSION['user']['user_type'] == 'supadmin' ) { echo '<div class="row"> <div class="col-12"> <div class="form-group"> <label>Meta Title</label> <textarea style="resize:none;" name="meta_title" class="form-control" rows="4" col="2" placeholder="Enter Meta Title Here">'.$data['meta_title'].'</textarea> </div> </div> <div class="col-12"> <div class="form-group"> <label>Meta Description</label> <textarea style="resize:none;" name="meta_desc" class="form-control" rows="4" col="2" placeholder="Enter Meta Description Here">'.$data['meta_desc'].'</textarea> </div> </div> </div>'; } ?> <div class="row"> <div class="col-12"> <button type="update" name="update" class="btn btn-success" >Update</button> </div> </div> </form> </div> </div> </div> </div> <!-- /.container-fluid --> </div> <!-- End of Main Content --> <!-- Footer --> <?php include_once('footer.php')?> <script src="ckeditor/ckeditor.js"></script> </body> </html>