Revonzy Mini Shell

<?php
	require_once("../lib/functions.php");
	$db = new login_function();
	$flag = 0;
	$profile = "";
	$image_error = "";
	$flag = 0;
	$success_flag = 0;
	
	if(!isset($_SESSION['current_login_admin']))
	{
		header("Location:/admin/index.php");
	}
	if(isset($_SESSION['current_login_admin']))
	{
		$email	=	$_SESSION['current_login_admin'];
	}
	if(isset($_GET['insert_id']))
	{
		$insert_id	=	$_GET['insert_id'];
		$_SESSION['current_update_id'] = $insert_id;
	}
	 else if(isset($_SESSION['current_update_id']))
	{
		$insert_id	= $_SESSION['current_update_id'];
	}
		if(isset($_POST['picture_btn']))
		{
			$valid_formats = array("jpg","png","gif","bmp","jpeg","JPEG","JPG","BMP","PNG","GIF","pdf","PDF","mp3","MP3","MP4","mp4","JFIF","jfif");
	
			if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
			{	
				$name 				= 	$_FILES['product']['name'];
				$size 				= 	$_FILES['product']['size'];

				if(strlen($name))
					{				
						list($txt, $ext) = explode(".", $name);
						
						if(in_array($ext,$valid_formats))
						{
							$files	=	array();

							function generateRandomString($length = 10) {
								$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
								$charactersLength = strlen($characters);
								$randomString = '';
								for ($i = 0; $i < $length; $i++) 
								{
									$randomString .= $characters[rand(0, $charactersLength - 1)];
								}
								return $randomString;
							}
							
							$current_random_string = generateRandomString();
							
							$product = $current_random_string.".".strtolower($ext);						

							$tmp = $_FILES['product']['tmp_name'];
							
							$img_Dir = "../product/";
							
							if(!file_exists($img_Dir))
							{
								mkdir($img_Dir);
							}
							
							if(move_uploaded_file($tmp,$img_Dir.$product))
							{
								
							}
							else
							{
								$image_error	=	"failed" ;
								$flag				=	1;
							}	
						}
						else
						{
							$image_error	= "Invalid file format";
							$flag				=	1;	
						}	
					}	
					else
					{
						$flag	=	1;
					}
			}
			if($flag == 0)
			{
				if($db->add_product_image($insert_id,$product))
				{
					$success_flag = 1;
				}
			}
		}
	if(isset($_GET['image_id']))
	{
		$image_id	=	$_GET['image_id'];
		$image_name = $db->get_product_image_name($image_id);
		unlink('../product/'.$image_name);
		$db->delete_product_image_info($image_id);
		header("Location:product-image.php");
		$success_msg	=	2;
	}
?>
<?php
	require_once('header.php');
?>

        <div id="page-wrapper">
            <div class="row">
                <div class="col-lg-12">
				
                    <h1 class="page-header">Product Image</h1>
					<?php
					if($success_flag == 1)
					{
					?>
					<div class="alert alert-success">
						Product Image Successfully.
					</div>
					<?php
					}
					?>
					
					
					
                </div>
                
            </div>
            
            <div class="row">
                <div class="col-lg-12">
				<a href="add-product.php"><-- Back To Product Form</a><br /><br />
                    <div class="panel panel-default">
                        <div class="panel-heading">
                           Product Image
                        </div>
                        <div class="panel-body">
                            <div class="row">
                                <div class="col-lg-6">
                                    <form role="form" method="post" enctype="multipart/form-data">
										<div class="form-group">
                                            <label>Product Image</label>
										
                                            <input class="form-control"  name="product" type="file" required>
											<span class="error_indicator"><?php echo $image_error; ?></span>

										</div>	
                                  
                                      <button type="submit" class="btn btn-success" name="picture_btn"> Product Image </button>	<br /><br />
                                    </form>
                                </div>
								<div class="col-lg-6">
								</div>
								<div class="col-lg-12">
								<?php
									$report_details = $db->get_all_product_image_by_id($insert_id);
										if(!empty($report_details))
										{
											$counter =0;
											foreach($report_details as $record)
											{
												$id				=	$report_details[$counter][0];
												$images			=	$report_details[$counter][1];
								?>
								<div style="display:inline-table">
								<img src="../product/<?php echo $images; ?>" style="height:100px;width:100px;border:1px solid #666;margin:5px;padding:5px;"><br />
								<center><a href="product-image.php?image_id=<?php echo $id; ?>" >Remove</a></center>
								</div>
								<?php
									$counter ++;
											}
										}

                                ?>
                                   
                               
                                
                            </div>
                           
                        </div>
                        
                    </div>
                    
                </div>
              
            </div>
            
        </div>
       

    </div>
    

</body>

</html>