Revonzy Mini Shell

<?php
	require_once("lib/functions.php");
	$db = new login_function();
	$flag = 0;
	$actual_image_name="";
	 $success_msg = 0;
	 	$image_error="";
		$title="";
	if(!isset($_SESSION['current_login_admin']))
	{
		header("Location:/admin/index.php");
	}
	if(isset($_SESSION['current_login_admin']))
	{
		$email	=	$_SESSION['current_login_admin'];
	}
	if(isset($_GET['up_id']))
	{
		$up_id	=	$_GET['up_id'];
		$_SESSION['current_update_id'] = $up_id;
	}
	 else if(isset($_SESSION['current_update_id']))
	{
		$up_id	= $_SESSION['current_update_id'];
	}
	if(isset($_GET['image']))
	{
		$image  = $_GET['image'];	
		$db->update_news_attachments($up_id);
		unlink('../gallery/'.$image);
		header("Location:/admin/edit-news-events.php");
		
	}
	if(isset($_POST['add_btn']))
	{	
		
		$valid_formats = array("jpg","png","gif","bmp","jpeg","pdf","JPEG","JPG","BMP","PNG","GIF","PDF");
	
		if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
		{	
			$name 				= 	$_FILES['picture']['name'];
			$size 				= 	$_FILES['picture']['size'];

			if(strlen($name))
				{				
					list($txt, $ext) = explode(".", $name);
					
					if(in_array($ext,$valid_formats))
					{
						$files	=	array();

						function generateRandomString($length = 10) {
							$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
							$charactersLength = strlen($characters);
							$randomString = '';
							for ($i = 0; $i < $length; $i++) 
							{
								$randomString .= $characters[rand(0, $charactersLength - 1)];
							}
							return $randomString;
						}
						
						$current_random_string = generateRandomString();
						
						$actual_image_name = $current_random_string.".".strtolower($ext);						

						$tmp = $_FILES['picture']['tmp_name'];
						
						$img_Dir = "../gallery/";
						
						if(!file_exists($img_Dir))
						{
							mkdir($img_Dir);
						}
						
						if(move_uploaded_file($tmp,$img_Dir.$actual_image_name))
						{
							
						}
						else
						{
							$image_error	=	"failed" ;
							$flag				=	1;
						}	
					}
					else
					{
						$image_error	= "Invalid file format";
						$flag				=	1;	
					}	
				}	
		}
		
		if($flag==0)
		{
			$image_name = $db->get_news_image_name_by_id($up_id);
			if($image_name!="")
			{
				$db->update_news_image_info($up_id,$actual_image_name);
				unlink('../gallery/'.$image_name);
			}else
			{
				$db->update_news_image_info($up_id,$actual_image_name);
			}
			$flag = 1 ;
		}
	}
	if(isset($_POST['add_btn1']))
	{	
		$title = $_POST['title'];
		if($flag==0)
		{
			if($db->update_news_and_events_images($up_id,$title))
			{
			
				$flag = 1 ;
			}
		}
		
	}
	$details = $db->get_all_new_and_events_images_by_id($up_id);
	$counter = 0;
	if(!empty($details))
	{
		$id  		= $details[$counter][0];
		$title  	= $details[$counter][1];
		$image  	= $details[$counter][2];
	}

?>
<?php
	require_once('header.php');
?>

        <div id="page-wrapper">
            <div class="row">
                <div class="col-lg-12">
                    <h1 class="page-header"> Update News And Events</h1>
					<?php
					if($flag == 1)
					{
					?>
					 Updated Successfully.
					<?php
					}
					?>
					
                </div>
                
            </div>
            
            <div class="row">
                <div class="col-lg-12">
                    <div class="panel panel-default">
                        <div class="panel-heading">
                            Update News And Events
                        </div>
                        <div class="panel-body">
                            <div class="row">
                                <div class="col-lg-6">
                                    <form role="form" method="post" enctype="multipart/form-data">
									 <div class="form-group">
                                            <label>Add Title</label>
                                            <input class="form-control" placeholder="Enter Title" name="title" type="text" value ="<?php echo $title; ?>" required>
											                                       
									   </div>
									       <button type="submit" class="btn btn-success" name="add_btn1">Update Button</button>	<br /><br />

									   </form>
									    <form role="form" method="post" enctype="multipart/form-data">
                                        <div class="form-group">
                                            <label>Attachments</label><br /><br />
											<?php
											if($image != "")
											{
												list($txt, $ext) = explode(".", $image);
												if($ext=="pdf")
												{
										
											?>
											<a href="/gallery/<?php echo $image; ?>" target="_blank"><img src="/images/pdfimg.jpg" height="50px" width="50px" title="view"></a><br /><br />

											<?php
											}
											else
											{
											?>
											<a href="/gallery/<?php echo $image; ?>" target="_blank"><img src="/gallery/<?php echo $image; ?>" height="50px" width="50px" title="view"></a><br /><br />

											<?php
											}
											?>											
											<?php
											}
											else
											{
											?>
											<img src="/images/no_image_available.png" style="height:90px;width:90px;" /><br /><br />

											<?php
											}
											?>
											<label><a href="edit-news-events.php?u_id=<?php echo $id; ?>&image=<?php echo $image; ?>">Remove Image</a></label>
                                            <br /><br />
                                            <input class="form-control" placeholder="Enter Name" name="picture" type="file" required>
											<span style="color:red;"><?php echo $image_error; ?></span>                                       
									   </div>
                                       
                                  
                                        <button type="submit" class="btn btn-success" name="add_btn">Update Button</button>	<br /><br />
                                    </form>
                                </div>
				            
                               
                                
                            </div>
                           
                        </div>
                        
                    </div>
                    
                </div>
              
            </div>
            
        </div>
       

    </div>
    

</body>

</html>