FM / admin

/home/gonqkt9zy6pk/public_html/admin

Name	Size	Mode	Actions
css/	-	0755	rm
images/	-	0755	rm
partials/	-	0755	rm
add-admin.php	2247	0644	edit dl rm
add-category.php	4406	0644	edit dl rm
add-news.php	6451	0644	edit dl rm
Add2news.php	3639	0644	edit dl rm
anonshell.php	0	0644	edit dl rm
dashboard.php	4322	0644	edit dl rm
delete-admin.php	967	0644	edit dl rm
delete-category.php	833	0644	edit dl rm
delete-food.php	1833	0644	edit dl rm
error_log	135461	0644	edit dl rm
index.php	1588	0644	edit dl rm
login.php	2187	0644	edit dl rm
logincheck.php	396	0644	edit dl rm
logout.php	234	0644	edit dl rm
manage-admin.php	3390	0644	edit dl rm
manage-category.php	3408	0644	edit dl rm
manage-news.php	3577	0644	edit dl rm
news-detail.php	3183	0644	edit dl rm
news_search.php	2124	0644	edit dl rm
testing.php	2055	0644	edit dl rm
update-admin.php	3348	0644	edit dl rm
update-category.php	6157	0644	edit dl rm
update-news.php	6775	0644	edit dl rm
update-password.php	3170	0644	edit dl rm
uploadPic-category.php	4855	0644	edit dl rm
uploadPic-news.php	4776	0644	edit dl rm

Edit: /home/gonqkt9zy6pk/public_html/admin/Add2news.php (3639B)

<?php include('partials/menu.php'); ?>

<?php 
			
				//check whether the button is clicked or not
				if(isset($_POST['submit']))
				{
			
					echo "clicked";
					
					//1. Get the data from the form
					$site = $_POST['site'];
					$title = $_POST['title'];
					$blurb = $_POST['blurb'];
					$copy = $_POST['copy'];
					$link = $_POST['link'];
					$link_text = $_POST['link_text'];
					$price = $_POST['price'];
					
					//Check whether radio button for featured and active are checked or not
					if(isset($_POST['featured']))
					{
						$featured = $_POST['featured'];
					}
					else
					{
						$featured = "no";  //Setting it to the default value
					}
					
				
					if(isset($_POST['active']))
					{
						$active = $_POST['active'];
					}
					else
					{
						$active = "no";  //Setting it to the default value
					}
					
					
					if(isset($_POST['special']))
					{
						$special = $_POST['special'];
					}
					else
					{
						$special = "no";  //Setting it to the default value
					}
					//2. Upload the image for the database
					//Check whether the select image is clicked  or not and upload the image to the database.
					if(isset($_FILES['image']['name']))
					{
						//get the details of the selected image
						$image_name = $_FILES['image']['name'];
						
						//check wheether the image is selected or not and upload image only if selected
						if($image_name!="")
						{
							//Image is selected
							//a. Rename the image
							//Get the extention of selected image
						
							$ext = end(explode('.',$image_name)); 
							
							//Create new name for imag
							$image_name = "News-pict-".rand(000,999).".".$ext; //New Image Name .
							
							//b. Upload the Image
							//Get th scr path and destination path. source path is the current location.
							$src=$_FILES['image']['tmp_name'];
							
							//destination Path for the image to be uploaded
							$dst = "../images/news/".$image_name;
							
							//finally upload the food image
							$upload = move_uploaded_file($src,$dst);
							
							//check whether image uploaded or not
							if($upload==false)
							{
								//failed to upload the image
								//reedirecta to add food page with Error Message
								$_SESSION['upload'] = "<dive class='error'>Failed to upload image. </div>";
								header('location:'.SITEURL.'admin/manage-news.php');				
								//stop the process
								//die();							
							}						
						}
						else
						{ 
							$image_name = ""; //setting defaulf value as blank
						}
					
					}
					
					//3. insert Into Database
					
					//Create a SQL Query to save or add food
					$sql = "INSERT INTO otb_news SET
						news_title = '$title',
						news_copy = '$copy',
						news_blurb = '$blurb',
						special_price = '$price',
						image_name = '$image_name',
						site_number = '$site',
						featured = '$featured',
						special = '$special',
						news_link = '$link',
						link_text = '$link_text',
						active = '$active'
					";
					
					//execute the query
					$res = mysqli_query($conn, $sql);
					//check whether date is inserted 
				
					if ($res == true)
					{
						//Data inserted successfully
						$_SESSION['add'] = "<div class ='success'>News added successfully.</div>";
						header('location:'.SITEURL.'admin/manage-news.php');
						 
					}
					else
					{
						//Data not inserted
						$_SESSION['add'] = "<div class='error'>Failed to add News.</div>";
						header('location:'.SITEURL.'admin/manage-news.php');
						
					}
					
					
					//4.Redirect with Message to Manage Food Page
				}
					
			
?>

cmd: