Viewing file:  insert_banner.php (2.39 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
include('../include/conn.php');
ini_set('display_errors', 1);
error_reporting(E_ALL);
if (isset($_POST['banner_submit'])) {
$banner_title = mysqli_real_escape_string($conn, $_POST['banner_title']);
$ban_id = isset($_POST['ban_id']) ? intval($_POST['ban_id']) : 0;
$banner_image = $_FILES['banner_image'];
$image_paths = '';
$new_image_uploaded = ($banner_image['error'] === UPLOAD_ERR_OK);
if ($new_image_uploaded) {
$unique_identifier = uniqid();
$file_extension = pathinfo($banner_image['name'], PATHINFO_EXTENSION);
$unique_filename = 'art_pic' . $unique_identifier . '.' . $file_extension;
$destination_folder = '../upload/banners/';
if (!file_exists($destination_folder)) {
mkdir($destination_folder, 0777, true);
}
$image_path = $destination_folder . $unique_filename;
$image_paths = str_replace('../', '', $image_path);
if (!move_uploaded_file($banner_image['tmp_name'], $image_path)) {
echo "Error moving uploaded file.";
exit();
}
}
if ($ban_id > 0) {
// Update existing banner
if ($new_image_uploaded) {
$update_sql = "UPDATE `banners` SET `ban_title`='$banner_title', `ban_image`='$image_paths' WHERE `ban_id`=$ban_id";
} else {
$update_sql = "UPDATE `banners` SET `ban_title`='$banner_title' WHERE `ban_id`=$ban_id";
}
$qry_result = mysqli_query($conn, $update_sql);
if ($qry_result) {
echo "<script>alert('Banner updated successfully!');</script>";
} else {
echo "Error: " . $update_sql . "<br>" . mysqli_error($conn);
}
} else {
// Insert new banner
if (!$new_image_uploaded) {
echo "<script>alert('Please upload an image for new banner');</script>";
exit();
}
$insert_sql = "INSERT INTO `banners` (`ban_title`, `ban_image`, `created_at`) VALUES ('$banner_title', '$image_paths', NOW())";
$qry_result = mysqli_query($conn, $insert_sql);
if ($qry_result) {
echo "<script>alert('Banner inserted successfully!');</script>";
} else {
echo "Error: " . $insert_sql . "<br>" . mysqli_error($conn);
}
}
echo "<script>window.location.href ='../banners.php';</script>";
}
?>
|