1#@!#!123s

��JFIF�� 1#@!#!123s
: / proc / self / root / home / etteodyr / public_html / admin / actions /
Filename : blog_exec.php
back
<?php
ob_start();
include 'dbconnection.php';
$title = mysqli_real_escape_string($conn, $_POST['title']);
$url = mysqli_real_escape_string($conn, $_POST['url']);
$author = mysqli_real_escape_string($conn, $_POST['author']);
$category = mysqli_real_escape_string($conn, $_POST['category']);
$description = mysqli_real_escape_string($conn, $_POST['description']);
$image = $_FILES["image"];

// Check if the file was properly uploaded
if ($image['error'] !== UPLOAD_ERR_OK) {
    echo "Error uploading file.";
    exit;
}

$newfilename = round(microtime(true)) . '.' . pathinfo($image["name"], PATHINFO_EXTENSION);
$targetDirectory = "../uploads_blog/";
$targetPath = $targetDirectory . $newfilename;

// Move the uploaded file to the target directory
if (move_uploaded_file($image["tmp_name"], $targetPath)) {
    // File upload successful
    echo "The file " . basename($image["name"]) . " has been uploaded, and your information has been added to the directory";
} else {
    // File upload failed
    echo "Sorry, there was a problem uploading your file.";
    exit;
}

$sql = "INSERT INTO blog (title,url, author,category, image, description,time) 
        VALUES ('{$title}', '{$url}', '{$author}', '{$category}', '{$newfilename}', '{$description}', NOW())";

if (!mysqli_query($conn, $sql)) {
    die('Error: ' . mysqli_error($conn));
} else {
    header("location: ../blog.php?status=1");
    exit;
}

mysqli_close($conn);
?>