<?php include "conn.php"; $target_dir = "uploads/"; $target_file = $target_dir . basename($_FILES["image"]["name"]); $uploadOk = 1; $imageFileType = strtolower(pathinfo($target_file,PATHINFO_EXTENSION)); // Check if image file is a actual image or fake image if(isset($_POST["submit"])) { $check = getimagesize($_FILES["image"]["tmp_name"]); if($check !== false) { echo "File is an image - " . $check["mime"] . "."; $uploadOk = 1; } else { echo "File is not an image."; $uploadOk = 0; } } //if no image file then update other details if($target_file == "uploads/"){ $uid = $_POST['uid']; $itemdesc = $_POST['itemdesc']; $itemcat = $_POST['itemcat']; $itemstock = $_POST['itemstock']; $itemprice = $_POST['itemprice']; $sql="Update item SET Item_Desc = '$itemdesc', Item_Category = '$itemcat', Item_Stock = '$itemstock', Item_Price = '$itemprice' Where Item_Name = '$uid'"; mysqli_query($conn,$sql); if(mysqli_affected_rows($conn)<=0) { die("<script>alert('Unable to update data!');</script>"); echo "<script>window.location.href='edit.php?id=$uid';</script>"; } mysqli_close($conn); echo "<script>alert('Data updated successfully!');</script>"; echo "<script>window.location.href='view.php';</script>"; } // Check if file already exists if (file_exists($target_file)) { echo "Sorry, file already exists."; $uploadOk = 0; } // Check file size if ($_FILES["image"]["size"] > 500000) { echo "Sorry, your file is too large."; $uploadOk = 0; } // Allow certain file formats if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg" && $imageFileType != "gif" ) { echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed."; $uploadOk = 0; } // Check if $uploadOk is set to 0 by an error if ($uploadOk == 0) { echo "Sorry, your file was not uploaded."; // if everything is ok, try to upload file } else { if (move_uploaded_file($_FILES["image"]["tmp_name"], $target_file)) { echo "The file ". basename( $_FILES["image"]["name"]). " has been uploaded."; } else { echo "Sorry, there was an error uploading your file."; } } $uid = $_POST['uid']; $itemdesc = $_POST['itemdesc']; $itemcat = $_POST['itemcat']; $itemstock = $_POST['itemstock']; $itemprice = $_POST['itemprice']; $sql="Update item SET Item_Desc = '$itemdesc', Item_Category = '$itemcat', Item_Image = '$target_file', Item_Stock = '$itemstock', Item_Price = '$itemprice' Where Item_Name = '$uid'"; mysqli_query($conn,$sql); if(mysqli_affected_rows($conn)<=0) { die("<script>alert('Unable to update data!');</script>"); echo "<script>window.location.href='edit.php?id=$uid';</script>"; } mysqli_close($conn); echo "<script>alert('Data updated successfully!');</script>"; echo "<script>window.location.href='view.php';</script>"; ?>