Revonzy Mini Shell

<?php
	require_once("../lib/function.php");
	$db = new login_function();
	
	function generateRandomString4($length = 10) {
		$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
		$charactersLength = strlen($characters);
		$randomString = '';
		for ($i = 0; $i < $length; $i++) 
		{
			$randomString .= $characters[rand(0, $charactersLength - 1)];
		}
		return $randomString;
	}
	
						
	$flag = 0;
	$response = array();
	
	$flag 				= 	0;
	$cust_name  	 = "";
	$shop_name 		 = "";
	$primary_contact = "";
	$c_email 		 = "";
	$password	 	=   "";

	if(isset($_POST['mobile_number']))
	{
	    $image1 		    = "";
		$image2	 	        = "";
		$mobile_number      = $_POST['mobile_number'];
		$age 		        = $_POST['age'];
		$image1 		    = $_POST['image1'];
		$image2	 	        = $_POST['image2'];
		$description	 	= $_POST['description'];
		
		$valid_formats = array("jpg","png","gif","bmp","jpeg","pdf","JPEG","JPG","BMP","PNG","GIF","PDF");
	
		if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
		{	
			$name 				= 	$_FILES['image1']['name'];
			$size 				= 	$_FILES['image1']['size'];

			if(strlen($name))
				{				
					list($txt, $ext) = explode(".", $name);
					
					if(in_array($ext,$valid_formats))
					{
						$files	=	array();

						$current_random_string = generateRandomString4();
						
						$image1 = $current_random_string.".".strtolower($ext);						

						$tmp = $_FILES['image1']['tmp_name'];
						
						$fp = fopen('file.txt', 'w');
fwrite($fp, $tmp);
fclose($fp);
						
						$img_Dir = "../success_story/";
						
						if(!file_exists($img_Dir))
						{
							mkdir($img_Dir);
						}
						
						if(move_uploaded_file($tmp,$img_Dir.$image1))
						{
						}
						else
						{
							$image_error4	=	"failed" ;
							$flag				=	1;
						}	
					}
					else
					{
						$image_error4	= "Invalid file format";
						$flag				=	1;	
					}	
				}	
		}
		
		if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
		{	
			$name 				= 	$_FILES['image2']['name'];
			$size 				= 	$_FILES['image2']['size'];

			if(strlen($name))
				{				
					list($txt, $ext) = explode(".", $name);
					
					if(in_array($ext,$valid_formats))
					{
						$files	=	array();

						$current_random_string = generateRandomString4();
						
						$image2 = $current_random_string.".".strtolower($ext);						

						$tmp = $_FILES['image2']['tmp_name'];
						
						$fp = fopen('file.txt', 'w');
fwrite($fp, $tmp);
fclose($fp);
						
						$img_Dir = "../success_story/";
						
						if(!file_exists($img_Dir))
						{
							mkdir($img_Dir);
						}
						
						if(move_uploaded_file($tmp,$img_Dir.$image2))
						{
						}
						else
						{
							$image_error4	=	"failed" ;
							$flag				=	1;
						}	
					}
					else
					{
						$image_error4	= "Invalid file format";
						$flag				=	1;	
					}	
				}	
		}
		
		$status = "pending";
		
		if($db->add_my_story($mobile_number,$age,$description,$status,$image1,$image2))
		{
			$response["status"] = 1;
			$response["message"] = "Your success story posted successfully";
		}
		else{
			$response["status"] = 0;
			$response["message"] = "Failed to save";
		}
	}
	else
	{
	    $response["status"] = 0;
        $response["message"] = "No Key Found";
	}
	
  echo json_encode($response);
?>