芝麻web文件管理V1.00

编辑当前文件:/home/krishnamexports/www/panel/pages/page/testimonials.php

<?php

if(isset($_POST['add']))

{

$description     	    = mysqli_real_escape_string($cn,$_POST['description']);

$date    		        = date('Y-m-d');

$name    				= $_POST['name'];

$designation	   		= $_POST['designation'];

$image	   		    = $_FILES['image']['name'];

move_uploaded_file ($_FILES['image']['tmp_name'],'../testimonial/'.$image);

$sqlSubject=mysqli_query ($cn, "insert into `tbl_testimonial` set description='$description',date='$date',name='$name',designation='$designation',image='$image'");

if ($sqlSubject){

echo '<div class="alert alert-success"><strong>Success!</strong> Testimonial Page Added Successfully.</div>';

}

else

{

echo '<div class="alert alert-danger"><strong>Danger!</strong> Testimonial Page Not Added.</div>';

}

if(isset($_POST['edit']))

{

$id  			        = $_POST['edit_id'];

$description     	    = mysqli_real_escape_string($cn,$_POST['description']);

$date    		        = date('Y-m-d');

$name    				= $_POST['name'];

$designation	   		= $_POST['designation'];

$image	   		    	= $_FILES['image']['name'];

$sql  = mysqli_query($cn, "select * from tbl_testimonial where id='$id'");

$sqlData = mysqli_fetch_array($sql);

if(!empty($image))

{

move_uploaded_file($_FILES['image']['tmp_name'],'../testimonial/'.$image);

}

else

{

$image 		     = $sqlData['image'];

}

$sqlSubject = mysqli_query ($cn,"update tbl_testimonial SET description='$description',date='$date',name='$name',designation='$designation', image='$image' where `id`='$id'");

if($sqlSubject)

{

echo '<div class="alert alert-success"><strong>Success!</strong> Testimonial Page Update Successfully.</div>';

}

else

{

echo '<div class="alert alert-success"><strong>Warrning!</strong> Not Updated try again.</div>';

}

if(isset($_GET['edit_id']))

{

$id      = $_GET['edit_id'];

$sql     = mysqli_query($cn, "select * from tbl_testimonial where id='$id'");

$sqlData = mysqli_fetch_array ($sql);

}

if(isset($_GET['delete_id']))

{

$id      = $_GET['delete_id'];

$sql     = mysqli_query($cn, "delete from tbl_testimonial where id='$id'");

if($sql)

{

echo '<div class="alert alert-success"><strong>Success!</strong> Testimonial Page Deleted Successfully.</div>';

}

else

{

echo "error: " . $sql . "<br>" . mysqli_error($conn);

}

</div>

<h4 class="card-title">Testimonials</h4>

<label for="exampleInputCity1">Testimonials Description</label>

</div>

<label for="exampleInputName1">Person Name</label>

<input type="text" class="form-control" value="<?php if(isset($_GET['edit_id'])) {echo $sqlData['name'];}?>" name="name" id="exampleInputName1" placeholder="Person Name" autocomplete="off" required>

</div>

<label for="exampleInputPassword4">Designation</label>

<input type="text" class="form-control" name="designation" value="<?php if(isset($_GET['edit_id'])) {echo $sqlData['designation'];}?>" id="exampleInputPassword4" placeholder="Designation">

</div>

Testimonial Image

<input type="file" name="image" id="fileToUpload" <?php if(isset($_GET['edit_id'])){}else{?> required <?php }?>>

<?php if(isset($_GET['edit_id'])) {?>

<img src="../testimonial/<?php echo $sqlData['image'];?>" height="150" width="200">

<?php }?>

</div>

<button type="submit" class="btn btn-success mr-2" name="<?php if(isset($_GET['edit_id'])) {echo "edit";}else{ echo "add";}?>">Submit</button>

</form>

</div>

<h4 class="card-title">Order List</h4>

<thead>

<tr>

<th>Image</th>

<th>Person Name</th>

<th>Designation</th>

<th>Description</th>

<th>Action</th>

</tr>

</thead>

<tbody>

<?php

$i = 1;

$sqlTestimonial = mysqli_query($cn, "select * from `tbl_testimonial`");

while($sqlTestimonialData = mysqli_fetch_array($sqlTestimonial)){

$sqlImage = mysqli_query($cn, "select * from `tbl_testimonial` where id='".$sqlTestimonialData['image']."'");

$sqlImageData = mysqli_fetch_array($sqlImage);

<tr>

<td><img src="../testimonial/<?php echo $sqlTestimonialData['image'];?>" height="150" width="200"/></td>

<td>Publish | <a href="home.php?pages=testimonials&edit_id=<?php echo $sqlTestimonialData['id'];?>">Edit</a> | <a href="home.php?pages=testimonials&delete_id=<?php echo $sqlTestimonialData['id'];?>" onclick="return deleteConfirm();">Delete</a></td>

</tr>

<?php } ?>

</tbody>

</table>

</div>