관리-도구

편집 파일: submit-reviews.php

<?php
ob_start(); // VERY IMPORTANT – prevents header errors
error_reporting(E_ALL);
ini_set('display_errors', 1);

session_start();
include("config.php");

/* ===============================
   GET & CLEAN INPUT
================================ */
$cname   = mysqli_real_escape_string($conn, $_POST['cname'] ?? '');
$content = mysqli_real_escape_string($conn, $_POST['content'] ?? '');
$flag    = $_REQUEST['flag'] ?? '';
$id      = $_POST['id'] ?? '';

/* ===============================
   DELETE REVIEW
================================ */
if ($flag === "del") {

$id = $_GET['id'] ?? 0;
    $id = (int)$id;

$conn->query("DELETE FROM umreview WHERE id=$id");

header("Location:add-reviews.php?flag=del");
    exit;
}

/* ===============================
   INSERT NEW REVIEW
================================ */
if ($id == "") {

$sql = "INSERT INTO umreview (cname, review) VALUES ('$cname', '$content')";
    $conn->query($sql);

$id = mysqli_insert_id($conn);

/* FILE UPLOAD */
    if (!empty($_FILES["cphoto"]["name"])) {

$ext = pathinfo($_FILES["cphoto"]["name"], PATHINFO_EXTENSION);
        $filename = "umreviewimg_" . $id . "." . $ext;
        $destination = $uploadpath . $filename;

move_uploaded_file($_FILES["cphoto"]["tmp_name"], $destination);

$conn->query("UPDATE umreview SET cphoto='$filename' WHERE id=$id");
    }

header("Location:add-reviews.php?flag=dn");
    exit;
}

/* ===============================
   UPDATE REVIEW
================================ */
$id = (int)$id;

$sql_up = "UPDATE umreview 
           SET cname='$cname', review='$content' 
           WHERE id=$id";
$conn->query($sql_up);

/* FILE UPLOAD */
if (!empty($_FILES["cphoto"]["name"])) {

$ext = pathinfo($_FILES["cphoto"]["name"], PATHINFO_EXTENSION);
    $filename = "umreviewimg_" . $id . "." . $ext;
    $destination = $uploadpath . $filename;

move_uploaded_file($_FILES["cphoto"]["tmp_name"], $destination);

$conn->query("UPDATE umreview SET cphoto='$filename' WHERE id=$id");
}

header("Location:add-reviews.php?flag=up");
exit;