myweb/product_test.php at master · SalmanDev4/myweb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
<?php
//session_start();
//include '../dbc.php';

function setProducts($conn){

$productname = $_POST['product'];
$price = $_POST['price'];
$qty = $_POST['qty'];
$details = $_POST['details'];

$target_dir = "../upload/";
$target_file = $target_dir . basename($_FILES["fileToUpload"]["name"]);
$u_dir = "upload/";
$u_file = $u_dir . basename($_FILES["fileToUpload"]["name"]);
$uploadOk = 1;
$imageFileType = pathinfo($target_file,PATHINFO_EXTENSION);
// Check if image file is a actual image or fake image
if(isset($_POST["submit"])) {
    $check = getimagesize($_FILES["fileToUpload"]["tmp_name"]);
    if($check !== false) {
        echo "File is an image - " . $check["mime"] . ".";
        $uploadOk = 1;
    } else {
        echo "File is not an image.";
        $uploadOk = 0;
    }
}
// Check if file already exists
if (file_exists($target_file)) {
    echo "Sorry, file already exists.";
    $uploadOk = 0;
}
// Check file size
if ($_FILES["fileToUpload"]["size"] > 500000) {
    echo "Sorry, your file is too large.";
    $uploadOk = 0;
}
// Allow certain file formats
if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg"
&& $imageFileType != "gif" ) {
    echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";
    $uploadOk = 0;
}
// Check if $uploadOk is set to 0 by an error
if ($uploadOk == 0) {
    echo "Sorry, your file was not uploaded.";
// if everything is ok, try to upload file
} else {
    if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file)) {
        echo "The file ". basename( $_FILES["fileToUpload"]["name"]). " has been uploaded.";
    } else {
        echo "Sorry, there was an error uploading your file.";
    }
}

$sql = "INSERT INTO products (productname, price, details, img, qty)
VALUES ('$productname', '$price', '$details','$u_file','$qty')";


$result = mysqli_query($conn, $sql);

echo "The product has been added to system.";
header("Location: ../index.php");
}

function getProducts($conn)
{
//$id = $_GET['id'];
if (isset($_GET["selectProduct"]))
    {
    $id = $_GET['id'];
    $sql= "SELECT * FROM products WHERE id = '$id'";
    $result = mysqli_query($conn, $sql);
    $row = mysqli_fetch_array($result, MYSQLI_ASSOC);
/*        echo "<div>";
        echo $row['id'].'<br>';
        echo $row['productname'].'<br>';
        echo $row['price'].'<br>';
        echo $row['qty'].'<br>';
        echo $row['details'].'<br>';
        echo $row['img'];
        echo "</div>";*/
        echo '
        <div>
        <img id="imgp" src="'.$row['img'].'"><br>
    <input type="hidden" name="id" value="'.$row['id'].'">
    <h5>Name:</h5><input type="text" name="productname" value="'.$row['productname'].'"readOnly>
    <h5>Price:</h5><input type="text" name="price" value="'.$row['price'].' SR"readOnly>
    <h5>QTY:</h5><input type="text" name="qty" value="'.$row['qty'].'"readOnly>
    <h5>Details:</h5><input type="text" name="details" value="'.$row['details'].'"readOnly>
    </div>';
    }else
        {
            echo "error.";
        }
}