1#@!#!123s

: / proc / self / root / home6 / grandhou / www / admin /
Filename : add-testimonial.php
back
<?php
session_start();
if(strlen($_SESSION['alogin'])==0)
    {	
header('location:index.php');
}
error_reporting( ~E_NOTICE ); // avoid notice
include('include/constant.php');
include('include/pdo.php');
	if(isset($_POST['btn_save_updates']))
	{
	 $en_heading = htmlspecialchars($_POST['en_heading'], ENT_QUOTES, 'UTF-8');
	  $en_description = htmlspecialchars($_POST['en_description'], ENT_QUOTES, 'UTF-8');
	
		$imgFile = $_FILES['image']['name'];
  $tmp_dir = $_FILES['image']['tmp_name'];
  $imgSize = $_FILES['image']['size'];
  if($imgFile)
		{
			$upload_dir = 'upload/'; // upload directory	
			$imgExt = strtolower(pathinfo($imgFile,PATHINFO_EXTENSION)); // get image extension
			$valid_extensions = array('jpeg', 'jpg', 'png', 'gif'); // valid extensions
			$image = rand(1000,1000000).".".$imgExt;
			if(in_array($imgExt, $valid_extensions))
			{			
				if($imgSize < 5000000)
				{
					move_uploaded_file($tmp_dir,$upload_dir.$image);
				}
				else
				{
					$errMSG = "Sorry, your file is too large it should be less then 5MB";
				}
			}
			else
			{
				$errMSG = "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";		
			}	
		}
					
	if(!isset($errMSG))
		{
			$stmt = $DB_con->prepare("INSERT INTO testimonial(en_heading,en_description,image) VALUES (:en_heading,:en_description,:image)"); 
			$stmt->bindParam(':en_heading',$en_heading);
			$stmt->bindParam(':en_description',$en_description);
			$stmt->bindParam(':image',$image);
				   if($stmt->execute()){?>
                <script>
				alert('Testimonial Uploaded Succesfully');
				window.location.href='add-testimonial.php';
				</script>
                <?php
			}
			else{
				$errMSG = "Sorry Data Could Not Updated !";
			}
		}
						
	}
	
?>


<!DOCTYPE html>
<html lang="en">
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Wedding Photo Sydeny Price Details</title>
<link rel="shortcut icon" href="upload/favicon.ico">
	<link type="text/css" href="bootstrap/css/bootstrap.min.css" rel="stylesheet">
	<link type="text/css" href="bootstrap/css/bootstrap-responsive.min.css" rel="stylesheet">
	<link type="text/css" href="css/theme.css" rel="stylesheet">
	<link type="text/css" href="images/icons/css/font-awesome.css" rel="stylesheet">
	<link type="text/css" href='http://fonts.googleapis.com/css?family=Open+Sans:400italic,600italic,400,600' rel='stylesheet'>
<script src="<?php echo $tiny; ?>" referrerpolicy="origin"></script>
<script src="tiny.js" type="text/javascript"></script>
<script language="javascript" type="text/javascript">
function getXMLHTTP() { //fuction to return the xml http object
		var xmlhttp=false;	
		try{
			xmlhttp=new XMLHttpRequest();
		}
		catch(e)	{		
			try{			
				xmlhttp= new ActiveXObject("Microsoft.XMLHTTP");
			}
			catch(e){
				try{
				xmlhttp = new ActiveXObject("Msxml2.XMLHTTP");
				}
				catch(e1){
					xmlhttp=false;
				}
			}
		}
		 	
		return xmlhttp;
    }
	
</script>
</head>
<body oncontextmenu="return false;">
<script>
document.onkeydown = function(e) {
if(event.keyCode == 123) {
return false;
}
if(e.ctrlKey && e.shiftKey && e.keyCode == 'I'.charCodeAt(0)){
return false;
}
if(e.ctrlKey && e.shiftKey && e.keyCode == 'J'.charCodeAt(0)){
return false;
}
if(e.ctrlKey && e.keyCode == 'U'.charCodeAt(0)){
return false;
}
}
</script>
<?php include('include/header.php');?>

	<div class="wrapper">
		<div class="container">
			<div class="row">
<?php include('include/sidebar.php');?>				
			<div class="span9">
					<div class="content">

						<div class="module">
							<div class="module-head">
								<h3>Add Testimonial</h3>
							</div>
							<div class="module-body">

									<?php if(isset($_POST['submit']))
{?>
									<div class="alert alert-success">
										<button type="button" class="close" data-dismiss="alert">×</button>
									<strong>Well done!</strong>	<?php echo htmlentities($_SESSION['msg']);?><?php echo htmlentities($_SESSION['msg']="");?>
									</div>
<?php } ?>
									<br />
			<form class="form-horizontal row-fluid" method="post" enctype="multipart/form-data" >
<input type="hidden" name="edit_id" value="<?php echo $id;?>">
			<div class="control-group">
										<label class="control-label" for="basicinput">Heading</label>
										<div class="controls">
											<input type="text" name="en_heading" class="span8 tip">
										</div>
									</div>
									
									<div class="control-group">
										<label class="control-label" for="basicinput">Description</label>
										<div class="controls">
										<textarea name="en_description" id="" cols="30" rows="10"></textarea>
										 <input name="image" type="file" id="upload" class="hidden" onchange="">
										</div>
									</div>
								
									<div class="control-group">
<label class="control-label" for="basicinput"> Image <br> (950 x 606)</label>
<div class="controls">
<input type="file" name="image"  class="span8 tip" accept="image/*">
</div>
</div>
							
	<div class="control-group">
											<div class="controls">
												<button type="submit" name="btn_save_updates" class="btn">Add</button>
											</div>
										</div>
									</form>
							</div>
						</div>
						
						
							<div class="module">
							<div class="module-head">
								<h3>Manage Testimonial</h3>
							</div>
							<div class="module-body table">
	<?php if(isset($_GET['del']))
{?>
									<div class="alert alert-error">
										<button type="button" class="close" data-dismiss="alert">×</button>
									<strong>Oh snap!</strong> 	<?php echo htmlentities($_SESSION['delmsg']);?><?php echo htmlentities($_SESSION['delmsg']="");?>
									</div>
<?php } ?>
	<br />

								<table cellpadding="0" cellspacing="0" border="0" class="datatable-1 table table-bordered table-striped	 display" width="100%">
									<thead>
										<tr>
											<th>#</th>
											<th>Heading</th>
											<th>Description</th>
											<th>Action</th>
										</tr>
									</thead>
									<tbody>
<?php
include('include/pdo.php');
$STH = $DB_con->query('select * from testimonial order by id desc');
$STH->setFetchMode(PDO::FETCH_OBJ);
$cnt=1;
while($row = $STH->fetch()) {
	$endesc=$row->en_description;
?>                 		
										<tr>
											<td><?php echo $cnt;?></td>
											<td><?php echo $row->en_heading;?></td>
											<td><?php echo htmlspecialchars_decode(substr($endesc,0,150), ENT_QUOTES);?></td>
											<td>
																	<form method="post" action="edittestimonial.php">
    <input type="hidden" name="edit_id" value="<?php echo $row->id;?>">
    <button type="submit"><i class="icon-edit"></i></button>
	<a href="delete-testimonial.php?Id=<?php echo $row->id;?>" onClick="return confirm('Are you sure you want to delete?')"><i class="icon-remove-sign"></i></a>
</form>
											
											</td>
										</tr>
										<?php $cnt=$cnt+1; } ?>
							</table>
							</div>
						</div>	
						
						
						
		
					</div><!--/.content-->
				</div><!--/.span9-->
			</div>
		</div><!--/.container-->
	</div><!--/.wrapper-->
</div>
<?php include('include/footer.php');?>

	<script src="bootstrap/js/bootstrap.min.js" type="text/javascript"></script>
	<script>
		$(document).ready(function() {
			$('.datatable-1').dataTable();
			$('.dataTables_paginate').addClass("btn-group datatable-pagination");
			$('.dataTables_paginate > a').wrapInner('<span />');
			$('.dataTables_paginate > a:first-child').append('<i class="icon-chevron-left shaded"></i>');
			$('.dataTables_paginate > a:last-child').append('<i class="icon-chevron-right shaded"></i>');
		} );
	</script>
	
	<script src="bootstrap/js/script.js" type="text/javascript"></script>
	
</body>