관리-도구

편집 파일: add-user.php

<?php
session_start();

// User Adding, Updating And Deleteing Action

include("config.php");
require_once '../../includes/function_general.php';

echo "<pre>";
print_r($_POST);
print_r($_FILES);

if (isset($_POST['add_user']) && isset($_POST)) {

// $id = mysqli_real_escape_string($con, $_POST['id']);
    $name = mysqli_real_escape_string($con, $_POST['name']);
    $email = mysqli_real_escape_string($con, $_POST['email']);
    $username = mysqli_real_escape_string($con, $_POST['username']);
    $password = mysqli_real_escape_string($con, $_POST['password']);
    $user_status = mysqli_real_escape_string($con, $_POST['user_status']);

$_SESSION['name'] = $name;
    $_SESSION['email'] = $email;
    $_SESSION['username'] = $username;
    $_SESSION['password'] = $password;

$user_pic = "user_pic.png";

if ($_FILES['user_pic']['error'] == 0) {
        $file_name = rand(111111111, 99999999) . $_FILES['user_pic']['name'];
        $file_tmp = $_FILES['user_pic']['tmp_name'];

if (move_uploaded_file($file_tmp, "../../static/img/" . $file_name)) {
            $user_pic = $file_name;
        }
    }

if (ValidateFields('email', $email)) {
        @header("location: ../add-users?emailError=Email Already Exist");
        // $bool = true;
        $emil = false;
    } else {
        $emil = true;
    }
    if (ValidateFields('username', $username)) {
        @header("location: ../add-users?usernameError=Username Already Exist");
        $usern = false;
    } else {
        $usern = true;
    }

$query = "INSERT INTO zon_users (`name`, `email`, `username`, `password`, `user_pic`, `status`) VALUES ('$name', '$email', '$username', '$password', '$user_pic', $user_status) ";

if ($usern == true && $emil == true) {
        if (mysqli_query($con, $query)) {

unset($_SESSION['name']);
            unset($_SESSION['email']);
            unset($_SESSION['username']);
            unset($_SESSION['password']);

@header("location: ../users");
        }
    }
}

if (isset($_POST['update_user']) && isset($_POST)) {

$id = mysqli_real_escape_string($con, $_POST['user_id']);
    $name = mysqli_real_escape_string($con, $_POST['name']);
    $email = mysqli_real_escape_string($con, $_POST['email']);
    $username = mysqli_real_escape_string($con, $_POST['username']);
    $password = mysqli_real_escape_string($con, $_POST['password']);
    $user_status = mysqli_real_escape_string($con, $_POST['user_status']);

// $user_pic = "user_pic.png";

if (ValidateFields('email', $email) == 2 && ValidateFields('username', $username) == 2) {
        @header("location: ../add-users?action=update&token_id=$id&emailError=Email Already Exist&usernameError=Username Already Exist");
        $user = false;
    } else {
        $user = true;
    }

if (ValidateFields('email', $email) == 2) {
        @header("location: ../add-users?action=update&token_id=$id&emailError=Email Already Exist");
        $emil = false;
    } else {
        $emil = true;
    }

if (ValidateFields('username', $username) == 2) {
        @header("location: ../add-users?action=update&token_id=$id&usernameError=Username Already Exist");
        $usern = false;
    } else {
        $usern = true;
    }

$query = "UPDATE  zon_users SET `name`='$name', `email`='$email', `username`='$username', `password`='$password', `status`=$user_status where id=$id ";

if ($_FILES['user_pic']['error'] == 0) {
        $file_name = rand(111111111, 99999999) . $_FILES['user_pic']['name'];
        $file_tmp = $_FILES['user_pic']['tmp_name'];

if (move_uploaded_file($file_tmp, "../../static/img/" . $file_name)) {
            $user_pic = $file_name;

$query = "UPDATE  zon_users SET `name`='$name', `email`='$email', `username`='$username', `password`='$password', `user_pic`='$user_pic', `status`=$user_status where id=$id  ";
        }
    }
    if ($usern == true && $emil == true && $user == true) {
        if (mysqli_query($con, $query)) {

unset($_SESSION['name']);
            unset($_SESSION['email']);
            unset($_SESSION['username']);
            unset($_SESSION['password']);

@header("location: ../users");
        }
    }
}