Ultra File Manager

Edit: /home/u523034047/domains/rakeshfilms.in/public_html/skw/admin/add_toppers.php

<?php
include('conn.php');
session_start();
error_reporting(E_ALL);

if (!isset($_SESSION['username'])) {
    header('location:index.php');
    exit();
}
if (isset($_POST['sub'])) {
    $session = mysqli_real_escape_string($connection, $_POST['session']);
    $class = mysqli_real_escape_string($connection, $_POST['class']);
    $student_name = mysqli_real_escape_string($connection, $_POST['student_name']);
    $percentage = mysqli_real_escape_string($connection, $_POST['percentage']);
    $photo = $_FILES['photo']['name'];

$msg = "";

if (!empty($photo)) {
        $tmp = $_FILES['photo']['tmp_name'];
        $ext = strtolower(pathinfo($photo, PATHINFO_EXTENSION));
        $allowed = ['jpg', 'jpeg', 'png'];

if (in_array($ext, $allowed)) {
            $folder = "toppers/";
            if (!is_dir($folder)) {
                mkdir($folder, 0777, true);
            }

$newname = uniqid("tpr_") . "." . $ext;
            $uploadPath = $folder . $newname;

if (move_uploaded_file($tmp, $uploadPath)) {
                $photo = $newname;
            } else {
                $msg = "❌ File upload failed!";
            }
        } else {
            $msg = "❌ Only JPG, JPEG, PNG allowed!";
        }
    } else {
        $photo = "";
    }

if ($msg == "") {
        $sql = "INSERT INTO toppers (session, class, student_name, percentage, photo) 
                VALUES ('$session', '$class', '$student_name', '$percentage', '$photo')";
        if (mysqli_query($connection, $sql)) {
            $msg = "✅ Topper added successfully!";
        } else {
            $msg = "❌ DB Error: " . mysqli_error($connection);
        }
    }

echo "<script>alert('$msg');window.location='add_toppers.php';</script>";
}

// ========== DELETE TOPPER ==========
if (isset($_POST['delete'])) {
    $id = intval($_POST['id']);
    $result = mysqli_query($connection, "SELECT photo FROM toppers WHERE id=$id");
    $row = mysqli_fetch_assoc($result);
    if ($row['photo'] && file_exists("toppers/" . $row['photo'])) {
        unlink("toppers/" . $row['photo']);
    }
    mysqli_query($connection, "DELETE FROM toppers WHERE id=$id");
    echo "<script>alert('Topper deleted successfully');window.location='add_toppers.php';</script>";
}
?>

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
      <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Admin</title>
	
    <link href="assets/css/bootstrap.css" rel="stylesheet" />
     
    <link href="assets/css/font-awesome.css" rel="stylesheet" />
        
    <link href="assets/css/custom.css" rel="stylesheet" />
     
   <link href='http://fonts.googleapis.com/css?family=Open+Sans' rel='stylesheet' type='text/css' />

</head>
<body>
     
           
          
    <div id="wrapper">
         <div class="navbar navbar-inverse navbar-fixed-top">
           <?php include ('header.php');?>
        </div>
        
        <nav class="navbar-default navbar-side" role="navigation">
           <?php include ('menu.php');?>

</nav>
        
        <div id="page-wrapper" >
             <div id="page-inner">
                 <form method="post" action="" enctype="multipart/form-data">
           <h3>Add Topper (X / XII)</h3>
    <label>Session</label>
    <input type="text" name="session" class="form-control" placeholder="2024-25" required><br>

<label>Class</label>
    <select name="class" class="form-control" required>
        <option value="">Select Class</option>
        <option value="X">Class X</option>
        <option value="XII">Class XII</option>
    </select><br>

<label>Student Name</label>
    <input type="text" name="student_name" class="form-control" required><br>

<label>Percentage</label>
    <input type="text" name="percentage" class="form-control" placeholder="e.g. 96%" required><br>

<label>Photo</label>
    <input type="file" name="photo" class="form-control"><br>

<input type="submit" name="sub" value="Add Topper" class="btn btn-primary">
                    </form>
                    </div>        <div class="panel panel-primary" data-collapsed="0">
            <div class="panel-heading">
                <div class="panel-title" >
                    <i class="entypo-plus-circled"></i>
                   Status
                </div>
            </div>
            <div class="panel-body"> 
            
                         <div style="overflow-x:auto;">
                 <div class="col-lg-12 col-md-12">
                        <div class="table-responsive">
                         <table class="table table-bordered" style="max-width:90%;margin:auto;">
    <thead>
        <tr>
            <th>#</th>
            <th>Session</th>
            <th>Class</th>
            <th>Student Name</th>
            <th>Percentage</th>
            <th>Photo</th>
            <th>Action</th>
        </tr>
    </thead>
    <tbody>
        <?php
        $sql = "SELECT * FROM toppers ORDER BY id DESC";
        $query = mysqli_query($connection, $sql);
        $count = 1;
        if (mysqli_num_rows($query) > 0) {
            while ($row = mysqli_fetch_assoc($query)) {
        ?>
                <tr>
                    <td><?php echo $count++; ?></td>
                    <td><?php echo $row['session']; ?></td>
                    <td><?php echo $row['class']; ?></td>
                    <td><?php echo $row['student_name']; ?></td>
                    <td><?php echo $row['percentage']; ?></td>
                    <td>
                        <?php if ($row['photo']) { ?>
                            <img src="toppers/<?php echo $row['photo']; ?>" width="60" height="60" style="border-radius:4px;">
                        <?php } else { echo "No Photo"; } ?>
                    </td>
                    <td>
                        <a href="edit_topper.php?id=<?php echo $row['id']; ?>" class="btn btn-warning btn-sm">Edit</a>
                        <form method="post" style="display:inline;">
                            <input type="hidden" name="id" value="<?php echo $row['id']; ?>">
                            <button type="submit" name="delete" class="btn btn-danger btn-sm" onclick="return confirm('Delete this topper?')">Delete</button>
                        </form>
                    </td>
                </tr>
        <?php } } else { ?>
            <tr><td colspan="7" class="text-center">No toppers found.</td></tr>
        <?php } ?>
    </tbody>
</table>
</div>

</div>
                    </div>
         </div>
                
                   
                    
                     
                    </div>    
    </div>
        
    </div>
            </div>
            </div> 
            </div>
         
        </div>
    <div class="footer">
    <?php include ('footer.php');?>
        </div>

<script src="assets/js/jquery-1.10.2.js"></script>
      
    <script src="assets/js/bootstrap.min.js"></script>
      
    <script src="assets/js/custom.js"></script>
    
   
</body>
</html>

Ukuran: 7.5 KB