Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.40.1.lve.el8.x86_64

PHP Version:

7.4.33

User:

u727167137

Directory:

/home/u727167137/public_html/admin

Free Space:

1.38 TB

🔧 Quick Actions

✏️ Editing: product-edit.php

<?php
include "config.php";
session_start();
$slmdeal='';
$custid=$_SESSION['adminname'];
$type=$_SESSION["admintype"];
$aid=$_SESSION['adminid'];
if($custid==""||$custid==NULL){
session_unset();
session_destroy();
header('Location:index.php');}
$branch=$_REQUEST['branch'];
if(isset($_SESSION['usertype'])){
$ty=$_SESSION["usertype"];
if($ty=='Supervisor')
{header('Location: admin-user-home.php');}}
$weburl="https://bulbird.com/admin/";
if(isset($_REQUEST['prid'])){
$prid=$_REQUEST['prid'];
$squer=$con->prepare("DELETE from productattr WHERE attr_id='$prid'");
$squer->execute();}
if(isset($_REQUEST['edit'])){
  $proid=htmlentities($_REQUEST['proid']);
  $procode=htmlentities($_REQUEST['procode']);
  $query1=$con->prepare("SELECT pro_code FROM products WHERE pro_code ='$procode' AND pro_id='$proid'");
  $query1->bindColumn(1,$num);
  $query1->execute();
  $rowcount=$query1->fetch();
	if($rowcount >0){
  $proname=htmlentities($_REQUEST['proname']);
  $proarray=htmlentities($_REQUEST['proarray']);
  $cat=$_REQUEST['cat'];
  $subcat=$_REQUEST['subcat'];
  $shin=$_REQUEST['shin'];
  $slmdeal=$_REQUEST['slmdeal'];
  $mater=htmlentities($_REQUEST['mater']);
  $tex=htmlentities($_REQUEST['tex']);
  $des=htmlentities($_REQUEST['des']);
  $crip=htmlentities($_REQUEST['crip']);
  $brand=htmlentities($_REQUEST['brand']);
  $high=htmlentities($_REQUEST['high']);
  $path1="productimages/".$aid.'-';
	$fime = htmlentities($_FILES['imag']['name']);
	$filename1=str_replace(' ','-',strtolower($fime));
  $path2=$path1.$filename1;
if($filename1==""||$filename1=='NULL'){
$sql=$con->prepare("UPDATE products SET pro_code=:procode,pro_name=:proname,pro_array=:proarray,pro_catid=:cat,pro_subcatid=:subcat,pro_showin=:shin,pro_sinlmdeal=:slmdeal,pro_material=:mater,goo_pro_cat=:tex,pro_des=:des,pro_crip=:crip,pro_high=:high,pro_brand=:brand WHERE pro_id='$proid'");
$sql->execute(array(':procode'=>$procode,':proname'=>$proname,':proarray'=>$proarray,':cat'=>$cat,':subcat'=>$subcat,':shin'=>$shin,':slmdeal'=>$slmdeal,':mater'=>$mater,':tex'=>$tex,':des'=>$des,':crip'=>$crip,':high'=>$high,':brand'=>$brand));
}else{
$sql=$con->prepare("UPDATE products SET pro_code=:procode,pro_name=:proname,pro_array=:proarray,pro_catid=:cat,pro_subcatid=:subcat,pro_image=:path2,pro_showin=:shin,pro_sinlmdeal=:slmdeal,pro_material=:mater,goo_pro_cat=:tex,pro_des=:des,pro_crip=:crip,pro_high=:high,pro_brand=:brand WHERE pro_id='$proid'");
$sql->execute(array(':procode'=>$procode,':proname'=>$proname,':proarray'=>$proarray,':cat'=>$cat,':subcat'=>$subcat,':path2'=>$path2,':shin'=>$shin,':slmdeal'=>$slmdeal,':mater'=>$mater,':tex'=>$tex,':des'=>$des,':crip'=>$crip,':high'=>$high,':brand'=>$brand));
move_uploaded_file($_FILES['imag']['tmp_name'],$path2);}
if(isset($_REQUEST['oprice'])){
foreach($_REQUEST['oprice'] as $key=>$val){
$att=$_REQUEST['prid1'][$key];
$mrp=htmlentities($_REQUEST['oprice'][$key]);
$price=htmlentities($_REQUEST['nprice'][$key]);
$wsqty=htmlentities($_REQUEST['wsqty'][$key]);
$wsprice=htmlentities($_REQUEST['wsprice'][$key]);
$qty=htmlentities($_REQUEST['qty'][$key]);
$size=htmlentities($_REQUEST['size'][$key]);
$fil=htmlentities($_REQUEST['pcolor'][$key]);
$ima=str_replace(' ','-',strtolower($fil));
$patt="attrimages/".$aid.'-';
$file =htmlentities($_FILES['pro_image']['name'][$key]);
$filenam=str_replace(' ','-',strtolower($file));
$fach=$patt.$filenam;
$file1 =htmlentities($_FILES['pro_image1']['name'][$key]);
$filenam1=str_replace(' ','-',strtolower($file1));
$fach1=$patt.$filenam1;
$file2 =htmlentities($_FILES['pro_image2']['name'][$key]);
$filenam2=str_replace(' ','-',strtolower($file2));
$fach2=$patt.$filenam2;
$file3 =htmlentities($_FILES['pro_image3']['name'][$key]);
$filenam3=str_replace(' ','-',strtolower($file3));
$fach3=$patt.$filenam3;
if($att >0){
if($filenam ==''||$filenam=='NULL'){
$sq=$con->prepare("UPDATE productattr SET attr_name=:name,attr_wsqty=:wsqty,attr_wsprice=:wsprice,attr_mrp=:mrp,attr_price=:price,attr_size=:size,attr_color=:img,attr_qty=:qty WHERE attr_id='$att'");
$sq->execute(array(':name'=>$proname,':wsqty'=>$wsqty,':wsprice'=>$wsprice,':mrp'=>$mrp,':price'=>$price,':size'=>$size,':img'=>$ima,':qty'=>$qty));
}else{
	$sq=$con->prepare("UPDATE productattr SET attr_name=:name,attr_wsqty=:wsqty,attr_wsprice=:wsprice,attr_mrp=:mrp,attr_price=:price,attr_size=:size,attr_color=:img,attr_qty=:qty,image=:fach WHERE attr_id='$att'");
	$sq->execute(array(':name'=>$proname,':wsqty'=>$wsqty,':wsprice'=>$wsprice,':mrp'=>$mrp,':price'=>$price,':size'=>$size,':img'=>$ima,':qty'=>$qty,':fach'=>$fach));
	move_uploaded_file($_FILES['pro_image']['tmp_name'][$key], $fach);}
	if($filenam1 ==''|| $filenam1 =='NULL'){}else{
		$sq1=$con->prepare("UPDATE productattr SET image1=:fach1 WHERE attr_id='$att'");
		$sq1->execute(array(':fach1'=>$fach1));
		move_uploaded_file($_FILES['pro_image1']['tmp_name'][$key], $fach1);}
	if($filenam2 ==''|| $filenam2 =='NULL'){}else{
		$sq2=$con->prepare("UPDATE productattr SET image2=:fach2 WHERE attr_id='$att'");
		$sq2->execute(array(':fach2'=>$fach2));
		move_uploaded_file($_FILES['pro_image2']['tmp_name'][$key], $fach2);}
	if($filenam3 ==''|| $filenam3 =='NULL'){}else{
		$sq3=$con->prepare("UPDATE productattr SET image3=:fach3 WHERE attr_id='$att'");
		$sq3->execute(array(':fach3'=>$fach3));
		move_uploaded_file($_FILES['pro_image3']['tmp_name'][$key], $fach3);
	}}else{
if($filenam ==''||$filenam =='NULL'){
$sq=$con->prepare("INSERT INTO productattr(attr_name,attr_code,attr_wsqty,attr_wsprice,attr_mrp,attr_price,attr_size,attr_color,attr_qty,added_by)VALUES(:name,:procode,:wsqty,:wsprice,:mrp,:price,:size,:img,:qty,:added)");
$sq->execute(array(':name'=>$proname,':procode'=>$proid,':wsqty'=>$wsqty,':wsprice'=>$wsprice,':mrp'=>$mrp,':price'=>$price,':size'=>$size,':img'=>$ima,':qty'=>$qty,':added'=>$custid));
}else{
$sq=$con->prepare("INSERT INTO productattr(attr_name,attr_code,attr_wsqty,attr_wsprice,attr_mrp,attr_price,attr_size,attr_color,attr_qty,image,added_by)VALUES(:name,:procode,:wsqty,:wsprice,:mrp,:price,:size,:img,:qty,:fach,:added)");
$sq->execute(array(':name'=>$proname,':procode'=>$proid,':wsqty'=>$wsqty,':wsprice'=>$wsprice,':mrp'=>$mrp,':price'=>$price,':size'=>$size,':img'=>$ima,':qty'=>$qty,':fach'=>$fach,':added'=>$custid));
move_uploaded_file($_FILES['pro_image']['tmp_name'][$key], $fach);}
$atid=$con->lastinsertid();
	if($filenam1 ==''|| $filenam1 =='NULL'){}else{
		$sq4=$con->prepare("UPDATE productattr SET image1=:fach1 WHERE attr_id='$atid'");
		$sq4->execute(array(':fach1'=>$fach1));
		move_uploaded_file($_FILES['pro_image1']['tmp_name'][$key], $fach1);}
	if($filenam2 ==''|| $filenam2 =='NULL'){}else{
		$sq5=$con->prepare("UPDATE productattr SET image2=:fach2 WHERE attr_id='$atid'");
		$sq5->execute(array(':fach2'=>$fach2));
		move_uploaded_file($_FILES['pro_image2']['tmp_name'][$key], $fach2);}
	if($filenam3 ==''|| $filenam3 =='NULL'){}else{
		$sq6=$con->prepare("UPDATE productattr SET image3=:fach3 WHERE attr_id='$atid'");
		$sq6->execute(array(':fach3'=>$fach3));
		move_uploaded_file($_FILES['pro_image3']['tmp_name'][$key], $fach3);}
}}}
$con=null;
header("'Location:product-edit.php?pid='.$proid'&branch='.$branch");}else{ echo "<script>alert('You can not Change Product code !')</script>";}}?>
<!DOCTYPE html>
<html>
<head>
<meta charset=utf-8>
<meta http-equiv=X-UA-Compatible content="IE=edge">
<title>Add Product</title>
<meta name=viewport content="width=device-width,initial-scale=1">
<link href='https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css' rel=stylesheet>
<link rel=stylesheet href=css/adminlte.min.css>
<link rel=stylesheet href=css/OverlayScrollbars.min.css>
<link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700" rel=stylesheet>
<link href="https://fonts.googleapis.com/css2?family=Dancing+Script&family=Sacramento&display=swap" rel=stylesheet>
<link rel=preconnect href='https://fonts.googleapis.com'>
<link rel=preconnect href='https://fonts.gstatic.com'>
<link href="https://fonts.googleapis.com/css2?family=Pacifico&family=Shalimar&display=swap" rel=stylesheet>
</head>
<body class="hold-transition sidebar-mini layout-fixed">
<div class=wrapper>
	<?php include('nav-bar.php');
	if(isset($_SESSION['usertype'])){
	include('admin-left-side.php');
	}else{include('left-side.php');}?>
<div class=content-wrapper>
<section class=content>
<div class=container-fluid>
<div class=row>
<?php
    $pid = $_REQUEST['pid'];
    $query=$con->prepare("SELECT pro_id,pro_code,pro_name,pro_array,pro_catid,pro_subcatid,pro_image,pro_material,goo_pro_cat,pro_brand,pro_showin,pro_sinlmdeal,pro_des,pro_crip,pro_high FROM products WHERE pro_id='$pid'");
    $query->bindColumn(1,$id4);
    $query->bindColumn(2,$code);
    $query->bindColumn(3,$name);
    $query->bindColumn(4,$array);
    $query->bindColumn(5,$catid);
    $query->bindColumn(6,$subcatid);
    $query->bindColumn(7,$image);
    $query->bindColumn(8,$material);
    $query->bindColumn(9,$texclass);
    $query->bindColumn(10,$brands);
    $query->bindColumn(11,$showin);
    $query->bindColumn(12,$showinlmdeal2);
    $query->bindColumn(13,$destion);
    $query->bindColumn(14,$cription);
    $query->bindColumn(15,$highlights);
    $query->execute();
    while($result=$query->fetch()){
      if($showinlmdeal2=='on'){
        $checked="checked";}else{$checked="";}?>
<form role="form" method="post" action enctype="multipart/form-data">
<label><h3>Edit Product Details</h3></label><div class=form-group><label>Product Name</label>
<input type="text" name="proname" class="form-control" value='<?php echo $name; ?>'></div>
<div class=form-group><label>Relative Product array</label>
<input type="text" name="proarray" class="form-control" value='<?php echo $array; ?>'></div>
<div class=form-group><label>Description for Retail</label>
<textarea name=des class=form-control rows=3 cols=160><?php echo $destion; ?></textarea></div>
<div class=form-group><label>Description for Wholesale</label>
<textarea name=crip class=form-control rows=3 cols=160><?php echo $cription; ?></textarea></div>
<h5>Edit Product Data</h5>
<div class=row><div class=col-sm-3>
<div class=form-group><label>Product Code</label>
<input type=text name=procode class=form-control value=<?php echo $code; ?>>
<input type=hidden name=proid class=form-control value=<?php echo $id4; ?>></div>
<div class=form-group><label>google_product_category</label>
<input type=text name=tex class=form-control value=<?php echo $texclass; ?>></div>
</div>
<div class=col-sm-3><div class=form-group><label>Brand</label>
<input type=text name=brand class=form-control value=<?php echo $brands; ?>></div>
<div class=form-group><label>Product Material</label><input type=text name=mater class=form-control value="<?php echo $material; ?>">
</div></div>
<div class=col-sm-3>
<div class=form-group><label>Category</label><select id=category name=cat class=form-control>
	<?php
	    $query2=$con->prepare("SELECT cat_id,cat_name FROM category WHERE cat_id='$catid'");
	    $query2->bindColumn(1,$id9);
	    $query2->bindColumn(2,$name9);
	    $query2->execute();
	  while($result=$query2->fetch()){ ?>
<option value=<?php echo $id9; ?>><?php echo $name9; ?></option>
<?php }
    $query2=$con->prepare("SELECT cat_id,cat_name FROM category WHERE cat_type='$branch'");
    $query2->bindColumn(1,$id1);
    $query2->bindColumn(2,$name1);
    $query2->execute();
  while($result=$query2->fetch()){ ?>
<option value=<?php echo $id1; ?>><?php echo $name1; ?></option><?php } ?>
</select></div>
<div class=form-group><label>Sub-Category</label>
<select id=subcategory name=subcat class=form-control>
<?php
    $query1=$con->prepare("SELECT subcat_id,subcat_name FROM subcategory WHERE subcat_id='$subcatid'");
    $query1->bindColumn(1,$id2);
    $query1->bindColumn(2,$name2);
    $query1->execute();
  while($result=$query1->fetch()){ ?>
<option value=<?php echo $id2; ?>><?php echo $name2; ?></option><?php }?> </select></div>
<script src='https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js'></script>
<script type=text/javascript>
$(document).ready(function(){
$("#category").change(function(){
var category_id=$(this).val();
$('#subcategory').find('option').not(':first').remove();
$.ajax({
url:'subcate.php',
type:'post',
data:{request:'category',
category_id:category_id},
dataType:'json',
success:function(response){
var len=response.length;
for(var i=0;i<len;i++){
var category_id=response[i]['id'];
var category_name=response[i]['name'];
$("#subcategory").append("<option value='"+category_id+"' >"+category_name+"</option>");}}});});});</script>
</div>
<div class=col-sm-3>
<div class=form-group><label>Show in</label><select name=shin class=form-control><option value=<?php echo $showin; ?>><?php echo $showin; ?></option>
<option value="Featured Product">Featured Product</option><option value>Blank</option></select></div>
<div class=form-group><label>listed in Last Minute Deal</label>
<div class="row">
<div class="col-sm-1" style="padding:10px;"><input type=checkbox name=slmdeal <?php echo $checked; ?>></div>
<div class="col-sm-11"><input type="text" class="form-control"></div></div></div>
</div></div>
<div class=form-group id="product_attr_box"><label><h5>Product Attributes</h5></label><div class=row id="attr">
<?php $attri='1';
	$res=$con->prepare("SELECT attr_id,attr_wsqty,attr_wsprice,attr_mrp,attr_price,attr_size,attr_color,attr_qty,image,image1,image2,image3 FROM productattr WHERE attr_code='$id4'");
	$res->bindColumn(1,$paid);
  $res->bindColumn(2,$prowsqty);
	$res->bindColumn(3,$prowspr);
	$res->bindColumn(4,$promrp);
	$res->bindColumn(5,$propr);
	$res->bindColumn(6,$prosize);
	$res->bindColumn(7,$procolor);
	$res->bindColumn(8,$proqty);
	$res->bindColumn(9,$imag);
	$res->bindColumn(10,$image1);
	$res->bindColumn(11,$image2);
	$res->bindColumn(12,$image3);
	$res->execute();
	while($result=$res->fetch()){?>
<div class="col-sm-2"><div class="form-group">
	<b>Present Product Image : </b><img src=<?php echo $weburl.$imag; ?> style=height:100px;>
	<input type=file name=pro_image[] accept=image/* class=form-control placeholder="Select image"></div>
<div class="form-group">
	<b>Present Product Image : </b><img src=<?php echo $weburl.$image1;  ?> style=height:100px;>
	<input type=file name=pro_image1[] accept=image/* class=form-control placeholder="Select image"></div></div>
<div class="col-sm-2"><div class="form-group">
	<b>Present Product Image : </b><img src=<?php echo $weburl.$image2; ?> style=height:100px;>
	<input type=file name=pro_image2[] accept=image/* class=form-control placeholder="Select image"></div>
<div class="form-group">
	<b>Present Product Image : </b><img src=<?php echo $weburl.$image3; ?> style=height:100px;>
	<input type=file name=pro_image3[] accept=image/* class=form-control placeholder="Select image"></div></div>
<div class=col-sm-2><div class=form-group><label style="margin-top:68px;">wholesale Qty</label>
<input type=text name=wsqty[] class=form-control value=<?php echo $prowsqty; ?>></div>
<div class=form-group><label style="margin-top:68px;">wholesale Price</label>
<input type=text name=wsprice[] class=form-control value=<?php echo $prowspr; ?>></div></div>
<div class=col-sm-2><div class=form-group><label style="margin-top:68px;">Product MRP</label>
<input type=hidden name=prid1[] class=form-control value=<?php echo $paid; ?>>
<input type=text name=oprice[] class=form-control value=<?php echo $promrp; ?>></div>
<div class=form-group><label style="margin-top:68px;">Sale Price</label>
<input type=text name=nprice[] class=form-control value=<?php echo $propr; ?>></div></div>
<div class=col-sm-2><div class=form-group><label style="margin-top:68px;">Product Color</label><select id=color name=pcolor[] class=form-control>
<?php	if($procolor >0){ ?>
<option value=<?php echo $procolor ?>><?php echo  $procolor; ?></option>
<?php }else{ ?> <option value>Color</option> <?php }
	$quer6=$con->prepare("SELECT color FROM productcolor");
	$quer6->bindColumn(1,$color);
	$quer6->execute();
	while($result=$quer6->fetch()){	?>
<option value=<?php echo $color; ?>><?php echo $color; ?></option> <?php } ?></select></div>
<div class=form-group><label style="margin-top:68px;">Product Size</label><select id=size name=size[] class=form-control>
<?php	if($prosize >0){ ?>
<option value=<?php echo $prosize; ?>><?php echo  $prosize; ?></option>
<?php }else{ ?> <option value>Size</option> <?php }
	$quer5=$con->prepare("SELECT size FROM productsize WHERE branch='$branch'");
	$quer5->bindColumn(1,$size);
	$quer5->execute();
	while($result=$quer5->fetch()){	?>
<option value=<?php echo $size; ?>><?php echo $size; ?></option> <?php } ?></select></div></div>
<div class=col-sm-2><div class=form-group><label style="margin-top:68px;">Product Qty in Store</label>
<input type=text name=qty[] class=form-control value=<?php echo $proqty; ?>></div>
<?php if($attri=='1'){ ?>
<button type=button class='btn btn-info btn-block' onclick='add_more_attr()' style='float:right;padding-top:4px;margin-top:100px;'>Add More</button></div>
<?php	}else{ ?>
<button type=submit name="remove" class='btn btn-danger btn-block' style='float:right;padding-top:4px;margin-top:100px;'><a href="product-edit.php?pid=<?php echo $pid;?>&prid=<?php echo $paid;?>&branch=<?php echo $branch;?>"style=color:white>Remove</a></button></div>
<?php } $attri++; } ?></div></div>
<div class=form-group><label>Highlights & Specifications</label>
<textarea name=high class=form-control rows=3 cols=163><?php echo $highlights; ?></textarea></div>
<div class=form-group>
<b>Present Product Image : </b><img src=<?php echo $weburl.$image; ?> style=height:100px;>
<input type=file name=imag accept=image/* class=form-control placeholder="Select image"></div>
</div><hr>
<button type=submit name=edit class="btn btn-primary btn-block" value="edit";>Update</button>
</div></form><?php }?></div></section>
<?php include('footer.php'); ?>
</div></div>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: product-edit.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation