Ultra File Manager

Edit: /home/u523034047/domains/gmcrudrapur.com/public_html/admin/add_tender.php

<?php
include('conn.php');
session_start();
error_reporting(E_ALL);

if (!isset($_SESSION['username'])) {
    header('location:index.php');
    exit();
}

if (isset($_POST['sub'])) {
    $a = strip_tags($_POST['t1']);
    $c = strip_tags($_POST['htmlcode']);
    $msg = '';

$allowedExts = ['jpg', 'jpeg', 'png', 'pdf', 'doc'];
    $fileName = $_FILES['file']['name'];
    $tmpName = $_FILES['file']['tmp_name'];
    $fileSize = $_FILES['file']['size'];
    $fileExt = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));
    $mimeType = mime_content_type($tmpName);

$validMimeTypes = [
        'image/jpeg', 'image/png', 'application/pdf', 'application/msword',
        'application/vnd.openxmlformats-officedocument.wordprocessingml.document'
    ];

if (in_array($fileExt, $allowedExts) && in_array($mimeType, $validMimeTypes) && $fileSize < 500000) {
        $newFileName = uniqid("tender_") . "." . $fileExt;
        $uploadPath = "tender/" . $newFileName;

if (move_uploaded_file($tmpName, $uploadPath)) {
            $stmt = $connection->prepare("INSERT INTO tender (Title, Description, file_attachment, status) VALUES (?, ?, ?, 'Active')");
            $stmt->bind_param("sss", $a, $c, $newFileName);

if ($stmt->execute()) {
                $msg = "✅ File uploaded successfully.";
            } else {
                echo "❌ DB Error: " . $stmt->error;
            }

$stmt->close();
        } else {
            echo "❌ Failed to move uploaded file.";
        }
    } else {
        echo "❌ Invalid file format or size. Only jpg, png, pdf, doc under 500KB are allowed.";
    }
}

if (isset($_POST['del'])) {
    $id = intval($_POST['id']);
    $stmt = $connection->prepare("DELETE FROM tender WHERE id = ?");
    $stmt->bind_param("i", $id);
    $stmt->execute();
    $stmt->close();

header('location:add_tender.php');
}
?>

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
      <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Admin</title>
	
    <link href="assets/css/bootstrap.css" rel="stylesheet" />
     
    <link href="assets/css/font-awesome.css" rel="stylesheet" />
        
    <link href="assets/css/custom.css" rel="stylesheet" />
     
   <link href='http://fonts.googleapis.com/css?family=Open+Sans' rel='stylesheet' type='text/css' />
    <link rel="stylesheet" href="richtexteditor/rte_theme_default.css" />
    <script type="text/javascript" src="richtexteditor/rte.js"></script>
    <script type="text/javascript" src='richtexteditor/plugins/all_plugins.js'></script>

</head>
<body>
     
           
          
    <div id="wrapper">
         <div class="navbar navbar-inverse navbar-fixed-top">
           <?php include ('header.php');?>
        </div>
        
        <nav class="navbar-default navbar-side" role="navigation">
           <?php include ('menu.php');?>

</nav>
        
        <div id="page-wrapper" >
            <div id="page-inner">
                <div class="row">
                    <div class="col-md-12">
                     <h2>Tender Details </h2>   
                    </div>
                </div>              
                 
                  <hr />
              
                  
                  <div class="panel panel-primary" data-collapsed="0">
            <div class="panel-heading">
                <div class="panel-title" >
                    <i class="entypo-plus-circled"></i>
                  Post Jobs
                </div>
            </div>
            <form method="post" action="" enctype="multipart/form-data">
            <div class="panel-body">

<label for="field-1" class="col-sm-3 control-label">  Title</label>
                        
                  <div class="col-sm-5">
              <input type="text" class="form-control" name="t1"  data-validate="required" data-message-required="Value Required" value="" autofocus>
                        </div>
                    </div></br> 
                    
                         <div class="form-group">
                 <label for="field-1" class="col-sm-3 control-label">Description</label>
                      <input name="htmlcode" id="inp_htmlcode" type="hidden" />

<script src="assets/js/jquery-1.10.2.js"></script>
      
    <script src="assets/js/bootstrap.min.js"></script>
      
    <script src="assets/js/custom.js"></script>
    
   
</body>
</html>

Ukuran: 9.2 KB