BLACKSITE


	: 216.73.217.89
	: 82.112.239.90 / courierservice.me
	: Linux in-mum-web1675.main-hosting.eu 5.14.0-611.55.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 19 15:19:29 EDT 2026 x86_64
: /home/u239162628/domains/courierservice.me/public_html/admin/
files >> /home/u239162628/domains/courierservice.me/public_html/admin/add_blog.php
 <?php

// session_start();
/*
include("includes/config.php");

if(isset($_POST['add_blog'])){
    $title = $_POST['title'];
    $s_dec = $_POST['s_dec'];
    $lo_dec = $_POST['lo_dec'];
    $b_date = $_POST['b_date'];

    $photo = $_FILES['photo']['name']; // Move this line here

    // Prepare and bind the SQL statement
    $query = "INSERT INTO `blogs` (`title`, `s_dec`, `lo_dec`, `b_date`, `photo`) VALUES ($title,$s_dec,$lo_dec, $b_date, $photo)";

    // $query = "INSERT INTO `blogs` (title, s_dec, lo_dec, b_date, photo) VALUES (`$title`,`$s_dec`,`$lo_dec`, `$b_date`, `$photo`)";
    $query_run = mysqli_query($conn, $query);

    if($query_run){
        move_uploaded_file($_FILES["photo"]["tmp_name"], "blogs/".$_FILES["photo"]["name"]);
    
        $_SESSION['status'] = "Data Uploaded Successfully";
        header('Location: view-blog.php');
        exit;
    } else {
        $_SESSION['status'] = "Data Not Uploaded Successfully";
        header('Location: blog.php');
        exit;
    }
}
*/

include("includes/config.php");

if(isset($_POST['add_blog'])){
    $title = $_POST['title'];
    $s_dec = $_POST['s_dec'];
    $lo_dec = $_POST['lo_dec'];
    $b_date = $_POST['b_date'];

    $photo = $_FILES['photo']['name'];

    // Sanitize input data (for example, you can use mysqli_real_escape_string)
    $title = mysqli_real_escape_string($conn, $title);
    $s_dec = mysqli_real_escape_string($conn, $s_dec);
    $lo_dec = mysqli_real_escape_string($conn, $lo_dec);
    $b_date = mysqli_real_escape_string($conn, $b_date);
    $photo = mysqli_real_escape_string($conn, $photo);

    // Construct the SQL query with sanitized input data
    $query = "INSERT INTO `blogs` (`title`, `s_dec`, `lo_dec`, `b_date`, `photo`) VALUES ('$title', '$s_dec', '$lo_dec', '$b_date', '$photo')";
    $query_run = mysqli_query($conn, $query);

    if($query_run){
        move_uploaded_file($_FILES["photo"]["tmp_name"], "blogs/".$_FILES["photo"]["name"]);
    
        $_SESSION['status'] = "Data Uploaded Successfully";
        header('Location: view-blog.php');
        exit;
    } else {
        $_SESSION['status'] = "Data Not Uploaded Successfully";
        header('Location: blog.php');
        exit;
    }
}



// update 
if(isset($_POST['update_blog'])){
    $id = $_POST['id'];
    $title = $_POST['title'];
    $s_dec = $_POST['s_dec'];
    $lo_dec = $_POST['lo_dec'];
    $b_date = $_POST['b_date'];
   
    $old_photo = $_POST['image_old'];

    $title = mysqli_real_escape_string($conn, $title);
    $s_dec = mysqli_real_escape_string($conn, $s_dec);
    $lo_dec = mysqli_real_escape_string($conn, $lo_dec);
    $b_date = mysqli_real_escape_string($conn, $b_date);
    $old_photo = mysqli_real_escape_string($conn, $old_photo);

    $update_photo_filename = $_FILES["photo"]["name"] ? $_FILES["photo"]["name"] : $old_photo;

    $allowed_image_extensions = array('gif','png','jpg','jpeg','webp','WEBP');

    $photo_file_extension = pathinfo($update_photo_filename, PATHINFO_EXTENSION);

    if(!in_array($photo_file_extension, $allowed_image_extensions)){
        $_SESSION['status'] = "The image file is not allowed. Please upload an image.";
        header("Location: edit-blog.php?id=$id");
        exit;
    }

    // Update the department information in the database
    $query = "UPDATE blogs SET title='$title', s_dec='$s_dec', lo_dec='$lo_dec', b_date='$b_date', photo='$update_photo_filename' WHERE id ='$id' ";

    $query_run = mysqli_query($conn, $query);

    if($query_run){
       
        if($_FILES["photo"]["name"] !='' && $_FILES["photo"]["name"] != $old_photo){
            move_uploaded_file($_FILES["photo"]["tmp_name"], "blogs/".$_FILES["photo"]["name"]);
            unlink("blogs/". $old_photo);    
        }

        $_SESSION['status'] = "Image and PDF Updated Successfully";
        header('Location: view-blog.php');
    } else {
        $_SESSION['status'] = "Image and PDF Not Updated Successfully";
        header('Location: view-blog.php');
    }
}

// delete

if(isset($_POST['delete_blog'])){
    $id = $_POST['delete_id'];
    $photo = $_POST['del_blog'];
    // $pdf = $_POST['del_pdf'];

    $query = "DELETE FROM blogs WHERE id = '$id'";
    $query_run = mysqli_query($conn, $query);

    if($query_run){
        if(unlink("blogs/".$photo)) {
            $_SESSION['status'] = "Deleted Successfully";
            header('Location: view-blog.php');
        } else {
            $_SESSION['status'] = "Error deleting files";
            header('Location: view-blog.php');
        }
    } else {
        $_SESSION['status'] = "Not Deleted Successfully";
        header('Location: view-blog.php');
    }
}
?>