/home/wespack/public_html/tritex.com.my/admin/program
Edit: /home/wespack/public_html/tritex.com.my/admin/program/upload.php (11459B)
WESPACK
Product image must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.
Optional Image number 2 must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.
Optional Image number 3 must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.
Optional Image number 4 must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.
1 )
{
//record exist - cancel
if(isset($_POST['update'])) // if request from update
{}
else
{header("Location:upload-products.php?save_stat=1");}
}
else if($p_name=='' || $p_category=='' || $p_color==''|| $p_mfi==''|| $p_filter==''|| $p_packing==''|| $p_description=='')
{ header("Location:upload-products.php?save_stat=3");}
else
{
$file_created=time();
$file_names=$file_name;
$file_names = preg_replace('/\s+/', '_', $file_names);
$file_types=$_FILES["file"]["type"];
$new_file_name_full="1".time().$file_names;
move_uploaded_file($_FILES["file"]["tmp_name"],
"../../products/" .$new_file_name_full);
$p_image_path=$new_file_name_full;
//insert into database
$sql="INSERT INTO products (p_category,p_name,p_color,p_mfi,p_filter,p_packing,p_price,p_description,p_image_path,p_display_status,p_created,uploader,publish,updated) VALUES ('$p_category','$p_name','$p_color','$p_mfi','$p_filter','$p_packing','$p_price0','$p_description','$p_image_path','1','$cat_time','$uploader','Wespack','$file_created')";
$result = mysqli_query($con, $sql);
//move to Facebook ip picked
if($publish=="Facebook" & ($file_name2=='' && $file_name3=='' && $file_name4=='')){
//fb post text description
$feed_contents="
Product : $p_name
Color : $p_color
MFI : $p_mfi
Filter : $p_filter
Packing : $p_packing
Description : $p_description
";
require "upload-to-fb.php";
}else{}
//query last id
$query_last_product=mysqli_query($con,"SELECT p_id FROM products ORDER BY p_id DESC limit 1");
$fetch_last_product=mysqli_fetch_array($query_last_product);
$p_id_last=$fetch_last_product['p_id'];
// echo "Product id last:".$p_id_last;
//insert core price
$sql_price="INSERT INTO core_price (rm_price,p_id) VALUES ('$p_price0','$p_id_last')";
$result_price = mysqli_query($con, $sql_price);
if($file_name2!=='' && $file_name3!=='' && $file_name4!=='' )//if all optional image uploaded, do it all
{
$file_type2=$_FILES["file2"]["type"];
$file_names2= preg_replace('/\s+/', '_', $file_name2);
$new_file_name_full2="2".time().$file_names2;
move_uploaded_file($_FILES["file2"]["tmp_name"],
"../../products/" .$new_file_name_full2);
$p_image_path2=$new_file_name_full2;
$file_type3=$_FILES["file3"]["type"];
$file_names3= preg_replace('/\s+/', '_', $file_name3);
$new_file_name_full3="3".time().$file_names3;
move_uploaded_file($_FILES["file3"]["tmp_name"],
"../../products/" .$new_file_name_full3);
$p_image_path3=$new_file_name_full3;
$file_type4=$_FILES["file4"]["type"];
$file_names4= preg_replace('/\s+/', '_', $file_name4);
$new_file_name_full4="4".time().$file_names4;
move_uploaded_file($_FILES["file4"]["tmp_name"],
"../../products/" .$new_file_name_full4);
$p_image_path4=$new_file_name_full4;
$sqlALL="INSERT INTO product_image_description(p_id,image_path2,image_path3,image_path4) VALUES ('$p_id_last','$p_image_path2','$p_image_path3','$p_image_path4')";
// echo $sqlALL."
";
$resultALL = mysqli_query($con, $sqlALL);
//if facebook option picked, post all optional image to facebook
if($publish=="Facebook"){
//fb post text description
$feed_contents="
Product : $p_name
Color : $p_color
MFI : $p_mfi
Filter : $p_filter
Packing : $p_packing
Description : $p_description
";
require "upload-to-fb-batch.php";
}else{}
}
else
{
//if not all optional image file uploaded, upload one by one
$file_name2=$_FILES["file2"]["name"];
if($file_name2!='')
{
$file_type2=$_FILES["file2"]["type"];
$file_names2= preg_replace('/\s+/', '_', $file_name2);
$new_file_name_full2="2".time().$file_names2;
move_uploaded_file($_FILES["file2"]["tmp_name"],
"../../products/" .$new_file_name_full2);
$p_image_path2=$new_file_name_full2;
//check image data first
$check_pd="SELECT * FROM product_image_description WHERE p_id='$p_id_last'";
echo $check_pd."
";
$run_check_pd=mysqli_query($con,$check_pd);
$count_check_pd=mysqli_num_rows($run_check_pd);
if($count_check_pd>0)// if got record, just update
{
$update_imgs_pd_2 = mysqli_query($con,"UPDATE product_image_description SET image_path2='$p_image_path2' WHERE p_id='$p_id_last'");
}
else
{
$sql2="INSERT INTO product_image_description(p_id,image_path2,image_path3,image_path4) VALUES ('$p_id_last','$p_image_path2','','')";
// echo $sql2."
";
$result2 = mysqli_query($con, $sql2);
}
}
$file_name3=$_FILES["file3"]["name"];
if($file_name3!='')
{
$file_type3=$_FILES["file3"]["type"];
$file_names3= preg_replace('/\s+/', '_', $file_name3);
$new_file_name_full3="3".time().$file_names3;
move_uploaded_file($_FILES["file3"]["tmp_name"],
"../../products/" .$new_file_name_full3);
$p_image_path3=$new_file_name_full3;
//check image data first
$check_pd3="SELECT * FROM product_image_description WHERE p_id='$p_id_last'";
echo $check_pd3."
";
$run_check_pd3=mysqli_query($con,$check_pd3);
$count_check_pd3=mysqli_num_rows($run_check_pd3);
if($count_check_pd3>0)// if got record, just update
{
$update_imgs_pd_3 = mysqli_query($con,"UPDATE product_image_description SET image_path3='$p_image_path3' WHERE p_id='$p_id_last'");
}
else
{
$sql3="INSERT INTO product_image_description(p_id,image_path2,image_path3,image_path4) VALUES ('$p_id_last','','$p_image_path3','')";
// echo $sql3."
";
$result3 = mysqli_query($con, $sql3);
}
}
$file_name4=$_FILES["file4"]["name"];
if($file_name4!='')
{
$file_type4=$_FILES["file4"]["type"];
$file_names4= preg_replace('/\s+/', '_', $file_name4);
$new_file_name_full4="4".time().$file_names4;
move_uploaded_file($_FILES["file4"]["tmp_name"],
"../../products/" .$new_file_name_full4);
$p_image_path4=$new_file_name_full4;
//check image data first
$check_pd4="SELECT * FROM product_image_description WHERE p_id='$p_id_last'";
echo $check_pd4."
";
$run_check_pd4=mysqli_query($con,$check_pd4);
$count_check_pd4=mysqli_num_rows($run_check_pd4);
if($count_check_pd4>0)// if got record, just update
{
$update_imgs_pd_4 = mysqli_query($con,"UPDATE product_image_description SET image_path4='$p_image_path4' WHERE p_id='$p_id_last'");
}
else
{
$sql4="INSERT INTO product_image_description(p_id,image_path2,image_path3,image_path4) VALUES ('$p_id_last','','','$p_image_path4')";
// echo $sql4."
";
$result4 = mysqli_query($con, $sql4);
}
}
else
{}
//if facebook option picked, post all optional image to facebook
if($publish=="Facebook"){
//fb post text description
$feed_contents="
Product : $p_name
Color : $p_color
MFI : $p_mfi
Filter : $p_filter
Packing : $p_packing
Description : $p_description
";
require "upload-to-fb-batch.php";
}else{}
}
header("Location:upload-products.php?save_stat=2");
}
}
ob_end_flush();
?>