芝麻web文件管理V1.00

编辑当前文件:/home/krishnamexports/public_html/panel/pages/slider/slider.php

<?php

if(isset($_POST['add']))

{

$type	   		= $_POST['type'];

$title	   		= mysqli_real_escape_string($cn,$_POST['title']);

$slider	        = $_FILES['slider']['name'];

$link	   		= $_POST['link'];

$slider_order	= $_POST['slider_order'];

$description	= mysqli_real_escape_string($cn,$_POST['description']);	
    $imgValidation  = 1;
	// get the image extension
	$extension = substr($slider,strlen($slider)-4,strlen($slider));
	// allowed extensions
	$allowed_extensions = array(".jpg","jpeg",".png",".JPG","JPEG",".PNG");
	// Validation for allowed extensions .in_array() function searches an array for a specific value.
	if(!in_array($extension,$allowed_extensions))
	{
		$imgValidation = 0;
		$_SESSION['errorMsg'] =  '<div class="alert alert-danger"><strong>Danger!</strong> Upload Invalid Img Format.</div>';
	}
	else
	{
		move_uploaded_file($_FILES['slider']['tmp_name'],'../slider/'.$slider);
	}
	
    if($imgValidation==1)
	{
    	$sqlSubject 	= mysqli_query ($cn, "insert into `tbl_slider` set `type`='".$type."', `title`='".$title."', `slider`='".$slider."', `link`='".$link."', `slider_order`='".$slider_order."', `description`='".$description."'"); 															    
    	if ($sqlSubject)    
    	{
    		echo '<div class="alert alert-success"><strong>Success!</strong> Slider Added Successfully.</div>';
    	}
    	else
    	{
    		echo '<div class="alert alert-danger"><strong>Danger!</strong> Slider Not Added. Try Again.</div>';
    	}
	}
	else
	{
	    echo $_SESSION['errorMsg'];
	}

}

if(isset($_POST['edit']))

{

$id   	        = $_POST['id'];

$type	   		= $_POST['type'];

$title	   		= mysqli_real_escape_string($cn,$_POST['title']);

$slider	        = $_FILES['slider']['name'];

$link	   		= $_POST['link'];

$slider_order	= $_POST['slider_order'];

$description	= mysqli_real_escape_string($cn,$_POST['description']);

$sql            = mysqli_query($cn, "select * from tbl_slider where id='$id'");

$sqlData        = mysqli_fetch_array($sql);

if(!empty($slider))

{

move_uploaded_file($_FILES['slider']['tmp_name'],'../slider/'.$slider);

}

else

{

$slider     = $sqlData['slider'];

}

$sqlSubject     = mysqli_query ($cn,"update tbl_slider SET `type`='".$type."', `title`='".$title."', `slider`='".$slider."', `link`='".$link."', `slider_order`='".$slider_order."', `description`='".$description."' where `id`='".$id."'");

if($sqlSubject)

{

echo '<div class="alert alert-success"><strong>Success!</strong> Slider Update Successfully.</div>';

}

else

{

echo '<div class="alert alert-success"><strong>Warning!</strong> Not Updated try again.</div>';

}

if(isset($_GET['edit_id']))

{

$id      = $_GET['edit_id'];

$sql     = mysqli_query($cn, "select * from tbl_slider where id='$id'");

$sqlData = mysqli_fetch_array ($sql);

}

if(isset($_GET['delete_id']))

{

$id      = $_GET['delete_id'];

$sql     = mysqli_query($cn, "delete from tbl_slider where id='$id'");

if($sql)

{

echo '<div class="alert alert-success"><strong>Success!</strong> Slider Deleted Successfully.</div>';

}

else

{

echo "error: " . $sql . "<br>" . mysqli_error($conn);

}

<h4 class="card-title">Slider</h4>

<label for="exampleInputCity1">Slider Effect Type <span style="color:#F00;">*</span></label>

<option>Select Type</option>

<option value="1" <?php if(isset($_GET['edit_id'])){ if($sqlData['type']==1){ echo "selected";}}?>>Left Align Content With Bounce</option>

<option value="2" <?php if(isset($_GET['edit_id'])){ if($sqlData['type']==2){ echo "selected";}}?>>Right Align Content With Bounce</option>

<option value="3" <?php if(isset($_GET['edit_id'])){ if($sqlData['type']==3){ echo "selected";}}?>>Left Align Content With Slideup</option>

<option value="4" <?php if(isset($_GET['edit_id'])){ if($sqlData['type']==4){ echo "selected";}}?>>Right Align Content With Slideup</option>

</select>

</div>

<label for="exampleInputCity1">Slider Title</label>

<input type="text" class="form-control" name="title" value="<?php if(isset($_GET['edit_id'])) {echo $sqlData['title'];}?>" id="exampleInputCity1"placeholder="Slider Title">

</div>

<label for="exampleInputCity1">Upload Slider Image <span style="color:#F00;">*</span></label>

<input type="file" name="slider" id="fileToUpload" <?php if(isset($_GET['edit_id'])){}else{?> required <?php }?>>

<?php if(isset($_GET['edit_id'])) {?><br />

<img src="../slider/<?php echo $sqlData['slider'];?>" width="100%">

<?php }?>

</div>

<label for="exampleInputCity1">Slider Link</label>

<input type="text" class="form-control" name="link" value="<?php if(isset($_GET['edit_id'])) {echo $sqlData['link'];}?>" id="exampleInputCity1"placeholder="Slider Link">

</div>

<label for="exampleInputCity1">Slider Order <span style="color:#F00;">*</span></label>

<input type="text" class="form-control" name="slider_order" id="exampleInputCity1" placeholder="Slider Order" value="<?php if(isset($_GET['edit_id'])) {echo $sqlData['slider_order'];}?>" required/>

</div>

<label for="exampleInputCity1">Slider Description (150 Words)</label>

</div>

<button type="submit" class="btn btn-success mr-2" name="<?php if(isset($_GET['edit_id'])) {echo "edit";}else{ echo "add";}?>">Submit</button>

</form>

</div>

<br/>

<style>

.table td img, .table th img {

border-radius:0;

}

.table td img, .table th img {

width:150px;

height:75px;

}

</style>

<h4 class="card-title">Slider List</h4>

<thead>

<tr>

<th>Image</th>

<th>Title</th>

<th>Order</th>

<th>Action</th>

</tr>

</thead>

<tbody>

<?php

$i = 1;

$sqlEmployee = mysqli_query($cn, "select * from `tbl_slider`");

while($sqlEmployeeData = mysqli_fetch_array($sqlEmployee)){

<tr>

<td><img src="../slider/<?php echo $sqlEmployeeData['slider'];?>" height="150" width="200"></td>

<td><a href="home.php?pages=slider&edit_id=<?php echo $sqlEmployeeData['id'];?>">Edit</a> | <a href="home.php?pages=slider&delete_id=<?php echo $sqlEmployeeData['id'];?>" onclick="return deleteConfirm();">Delete</a></td>

</tr>

<?php } ?>

</tbody>

</table>

</div>