Gecko [ midwest-tb.com ]

Name	Size	Permission
assets	[ DIR ]	drwxr-xr-x
functions	[ DIR ]	drwxr-xr-x
img	[ DIR ]	drwxr-xr-x
includes	[ DIR ]	drwxr-xr-x
.htaccess	4.65 KB	-rw-r--r--
01admin.zip	112.24 KB	-rw-r--r--
add_user.php	11.21 KB	-rw-r--r--
banner.php	1.41 KB	-rw-r--r--
db.php	30 B	-rw-r--r--
delete.php	357 B	-rw-r--r--
delete_banner.php	736 B	-rw-r--r--
delete_post.php	960 B	-rw-r--r--
delete_user.php	991 B	-rw-r--r--
edit_banner.php	3.38 KB	-rw-r--r--
edit_post.php	11.55 KB	-rw-r--r--
edit_post2.php	5.62 KB	-rw-r--r--
edit_user.php	13.09 KB	-rw-r--r--
editsettings.php	2.61 KB	-rw-r--r--
error_log	54.03 KB	-rw-r--r--
function_users.php	6.8 KB	-rw-r--r--
functions.php	10.92 KB	-rw-r--r--
home.php	6.62 KB	-rw-r--r--
index.php	56 B	-rw-r--r--
insert_banners.php	3.07 KB	-rw-r--r--
insert_post.php	9.63 KB	-rw-r--r--
login.php	1.57 KB	-rw-r--r--
login_admin.php	3.11 KB	-rw-r--r--
logout.php	164 B	-rw-r--r--
member.php	17.64 KB	-rw-r--r--
payment_setting.php	2.97 KB	-rw-r--r--
picupload.php	2.12 KB	-rw-r--r--
post.php	2.02 KB	-rw-r--r--
posts.php	2.94 KB	-rw-r--r--
print_shipment.php	1.91 KB	-rw-r--r--
register_admin.php	8.45 KB	-rw-r--r--
remove_amount.php	1.01 KB	-rw-r--r--
searchmembers.php	2.94 KB	-rw-r--r--
send_email.php	5.02 KB	-rw-r--r--
testimony.php	3.15 KB	-rw-r--r--
upload_files.php	2.59 KB	-rw-r--r--
user_error.php	188 B	-rw-r--r--
user_withdrawal.php	4.99 KB	-rw-r--r--
view_admin.php	2.84 KB	-rw-r--r--
view_banners.php	2.4 KB	-rw-r--r--
view_posts.php	2.85 KB	-rw-r--r--
view_referrals_bonus.php	2.83 KB	-rw-r--r--
view_users.php	4.78 KB	-rw-r--r--
viewconversation.php	5.37 KB	-rw-r--r--
viewmessage.php	2.4 KB	-rw-r--r--
viewmessages.php	4.24 KB	-rw-r--r--
website_setting.php	3.09 KB	-rw-r--r--

Code Editor : insert_banners.php

<?php include("includes/header.php");
 include("includes/navbar.php");
?>
<html>
<head> 
<title>New banner</title>
</head>

<div class="row">
        <div class="col-12">
            <div class="card">
                <div class="card-header">
                    <h4 class="card-title">Post Notification or Banner </h4>
                  </div>

<label>
	<span>Post Image:</span>
	  
	  <input type="file" class="form-control" name="image" />

<br/>

<label>
                    <span>status:</span><br/>
	  	<select name ="status" class="form-control"  >
	  	<option value=""> Select</option>
	  	<option value="on"> on</option>
	<option value="off"> off</option>
</select>  
  </label>
<br/>
 
	    <label>
	<span></span>
	<input  type="submit" name="submit"  class="btn btn-primary"  value="publish" > 	 
		</label>

</form>
</div>
</div>
<?php

if(isset($_POST['submit'])){

$banner_position = $_POST['position'];
        $banner_status = $_POST['status'];
        $banner_type = $_POST['type'];
        $banner_text = mysql_escape_string($_POST['text']);
        $banner_image = mysql_escape_string($_FILES['image']['name']);
        
      //  $image_tmp = mysql_escape_string($_FILES['image']['tmp_name']);
        $errors= array();
		$file_name = $_FILES['image']['name'];
		$file_size =$_FILES['image']['size'];
		$file_tmp =$_FILES['image']['tmp_name'];
		$file_type=$_FILES['image']['type'];   
		$file_ext=strtolower(end(explode('.',$_FILES['image']['name'])));
		
		$expensions= array("jpeg","jpg","png",""); 		
		if(in_array($file_ext,$expensions)=== false){
			$errors[]="extension not allowed, please choose a JPEG or PNG file.";
		}
		if($file_size > 2097152){
		$errors[]='File size must be excately 2 MB';
		}				
		if(empty($errors)==true){
			move_uploaded_file($file_tmp,"../banners/".$file_name);
		
		}else{
			print_r($errors);
		}

$banner_position="footer";
$banner_type="mobile";

if( $banner_text=="" || $banner_position==""|| $banner_type=="" ){
	echo " The fields are empty!<br/>";
	echo "<script> alert ('Some fields are empty')	</script>";

}

else{

//move_uploaded_file($image_tmp, "../images/$post_image");

$insert_query ="INSERT INTO banners ( banner_text,  banner_image, banner_position, banner_status, banner_type ) 
	VALUES ( '$banner_text', '$file_name', '$banner_position', '$banner_status', '$banner_type')";
	$result = mysqli_query($con,$insert_query);

if($result){
		
					?>
<script type="text/javascript">
           window.location.href = "view_banners.php?pageno=1"
        </script>
	<?php

}
	else{
		echo"we couldnt publish post</br>";
echo "<script> alert ('we couldnt publish post')	</script>";
}
}

}
?>
<?php

include("includes/footer.php");
?>

${this.title}

Code Editor : insert_banners.php