Revonzy Mini Shell

<?php
	require_once("lib/functions.php");
	$db = new login_function();

    $flag=0;
	if(isset($_SESSION['page_id']))
	{
		$page_id_code = $_SESSION['page_id'];
		$received_page_name = $_SESSION['page_name'];
	}
    
	$var_page_id = $page_id_code;
	$var_page_name= $received_page_name;
	$var_title="";
	$var_contents="";

	$flag = 0;
	$actual_image_name="";
	$success_msg= 0;
	$image_error="";
	$succ_flag = 0;
	$title = "";
	if(!isset($_SESSION['current_login_admin']))
	{
		header("Location:/admin/index.php");
	}
	if(isset($_SESSION['current_login_admin']))
	{
		$email	=	$_SESSION['current_login_admin'];
	}
	if(isset($_POST['add_btn']))
	{	
		$title = $_POST['title'];
		$valid_formats = array("jpg","png","gif","bmp","jpeg","pdf","JPEG","JPG","BMP","PNG","GIF","PDF");
	
		if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
		{	
			$name 				= 	$_FILES['picture']['name'];
			$size 				= 	$_FILES['picture']['size'];

			if(strlen($name))
				{				
					list($txt, $ext) = explode(".", $name);
					
					if(in_array($ext,$valid_formats))
					{
						$files	=	array();

						function generateRandomString($length = 10) {
							$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
							$charactersLength = strlen($characters);
							$randomString = '';
							for ($i = 0; $i < $length; $i++) 
							{
								$randomString .= $characters[rand(0, $charactersLength - 1)];
							}
							return $randomString;
						}
						
						$current_random_string = generateRandomString();
						
						$actual_image_name = $current_random_string.".".strtolower($ext);						

						$tmp = $_FILES['picture']['tmp_name'];
						
						$img_Dir = "../crmdocs/";
						
						if(!file_exists($img_Dir))
						{
							mkdir($img_Dir);
						}
						
						if(move_uploaded_file($tmp,$img_Dir.$actual_image_name))
						{
							
						}
						else
						{
							$image_error	=	"failed" ;
							$flag				=	1;
						}	
					}
					else
					{
						$image_error	= "Invalid file format";
						$flag				=	1;	
					}	
				}	
		}
		
		if($flag==0)
		{
			$db->new_new_docs($title,$actual_image_name,$page_id_code);
			$succ_flag = 1 ;
			$title = "";
		}
	}
	if(isset($_GET['delete_id']) AND ($_GET['image']))
	{
		$del_id	= $_GET['delete_id'];
		$name 	 	= $_GET['image'];
		$db->delete_docs_images($del_id);
		unlink('../crmdocs/'.$name);
		 $success_msg	=	2;
	}
?>
<?php
	require_once('header.php');
?>

        <div id="page-wrapper">
            <div class="row">
                <div class="col-lg-12">
                    <h1 class="page-header"><?php echo $received_page_name; ?> </h1>
					<?php
					if($succ_flag == 1)
					{
					?>
					<div class="alert alert-success">
						Saved Successfully.
					</div>
					<?php
					}
					?>
					<?php
					if($success_msg == 2)
					{
					?>
					<div class="alert alert-danger">
						Deleted Successfully.
					</div>
					<?php
					}
					?>
					
                </div>
                
            </div>
            
            <div class="row">
                <div class="col-lg-12">
                    <div class="panel panel-default">
                        <div class="panel-heading">
                        <?php echo $received_page_name; ?>
                        </div>
                        <div class="panel-body">
                            <div class="row">
                                <div class="col-lg-6">
                                    <form role="form" method="post" enctype="multipart/form-data">
										<div class="form-group">
                                            <label> Title </label>
                                            <input class="form-control" placeholder="Enter Title" name="title" type="text" value="<?php echo $title; ?>" required>
										</div>
                                        <div class="form-group">
                                            <label>Attachment</label>
                                            <input class="form-control" placeholder="Enter Name" name="picture" type="file" required>
											<span style="color:red;"><?php echo $image_error; ?></span>  
										</div>
                                       
                                        <button type="submit" class="btn btn-success" name="add_btn">Submit </button><br /><br />
                                    </form>
                                </div>
                               
                                
                <div class="row">
                 <div class="col-lg-12">
                    <div class="panel panel-default">
                        <div class="panel-heading">
                           Docs Report
                        </div>
                        <!-- /.panel-heading -->
                        <div class="panel-body">
                            <div class="table-responsive">
                                <table class="table table-striped table-bordered table-hover">
                                    <thead>
                                        <tr>
                                            <th width="20">Serial No</th>
                                            <th>Title</th>
                                            <th>Docs</th>
                                            <th width="50">Action</th>
                                        </tr>
                                    </thead>
                                    <tbody>
									<?php
										$report_details = $db->get_all_docs_data($page_id_code);
										if(!empty($report_details))
										{
											$counter =0;
											foreach($report_details as $record)
											{
												$id				=	$report_details[$counter][0];
												$images			=	$report_details[$counter][1];
												$title			=	$report_details[$counter][2];
									?>
                                        <tr>
                                            <td><?php echo $counter+1; ?></td>
											 <td><?php echo $title; ?></td>
                                            <td><a href="../crmdocs/<?php echo $images; ?>" target="_blank">
                                            View Document</a></td>
                                            <td><a href="<?php echo $_SERVER['PHP_SELF']; ?>?delete_id=<?php echo $id;?>&image=<?php echo $images; ?>" onclick="return confirm('Are you sure?');">Delete</a></td>
										</tr>
                                       <?php
										$counter ++;
											}
										}else
										{
										?>
										<td colspan="4">No Data Found...</td>
										<?php
										}
									   ?>
                                    </tbody>
                                </table>
                            </div>
                            <!-- /.table-responsive -->
                        </div>
                        <!-- /.panel-body -->
                    </div>
                    <!-- /.panel -->
                </div>
             
                <!-- /.col-lg-6 -->
            </div>
                                
                               
                                
                            </div>
                           
                        </div>
                        
                    </div>
                    
                </div>
              
            </div>
            
        </div>
       

    </div>
    

</body>

</html>