Question

PHP coding (please use mysqli instead of mysql)

Create an Admin Control Panel page for your shop. Your admin page can perform the following tasks:

1. Add product to the database. (Only text information)
2. Delete product from the database
3. View products from the database
4. Edit/update product to the database

Challenge:

1. Can upload the image of each product to the database
2. Read and display the products from database in home page

Answer 1

Databasse.php

<?php

class database{
private $_host = 'localhost';
private $_username = 'root';
private $_password = '';
private $_database = 'tableproduct';
  
public $conn;
function __construct()
{
if (!isset($this->conn)) {
  
$this->conn = new mysqli($this->_host, $this->_username, $this->_password, $this->_database);
  
if (!$this->conn) {
echo 'Cannot connect to database server';
exit;
}
}
  
return $this->conn;
}

function insert($table_name, $data)
{
$string = "INSERT INTO ".$table_name." (";$string .= implode(",", array_keys($data)) . ') VALUES (';
$string .= "'" . implode("','", array_values($data)) . "')";
  
print_r($string);
  
if(mysqli_query($this->conn, $string))
{
return true;
}
else
{
echo mysqli_error($this->conn);
}

}

function select($f,$table_name,$wh ='',$ob='')
{
  
$array = array();
$ValueToSearch = '';

$query = "SELECT * FROM ".$table_name." WHERE 1 " .$wh .($ob ? ' ORDER BY ' .$ob :' ' );

$result = mysqli_query($this->conn, $query);
while($row = mysqli_fetch_assoc($result))
{
$array[] = $row;
}
return $array;
}

function select_where($table_name, $where_condition)
{
$condition = '';
$array = array();
foreach($where_condition as $key => $value)
{
$condition .= $key . " = '".$value."' AND ";
}
$condition = substr($condition, 0, -5);
$query = "SELECT * FROM ".$table_name." WHERE " . $condition;
$result = mysqli_query($this->conn, $query);
while($row = mysqli_fetch_array($result))
{
$array[] = $row;
}
return $array;
}

function update($table_name, $fields, $where_condition)
{
$query = '';
$condition = '';
foreach($fields as $key => $value)
{
$query .= $key . "='".$value."', ";
}
$query = substr($query, 0, -2);
/*This code will convert array to string like this-
input - array(
'key1' => 'value1',
'key2' => 'value2'
)
output = key1 = 'value1', key2 = 'value2'*/
foreach($where_condition as $key => $value)
{
$condition .= $key . "='".$value."' AND ";
}
$condition = substr($condition, 0, -5);
$query = "UPDATE ".$table_name." SET ".$query." WHERE ".$condition."";
if(mysqli_query($this->conn, $query))
{
return true;
}
}

function delete($table_name, $where_condition)
{
$condition = '';

foreach($where_condition as $key => $value)
{
$condition .= $key . " = '".$value."' AND ";
$condition = substr($condition, 0, -5);

$query = "DELETE FROM ".$table_name." WHERE ".$condition."";
if(mysqli_query($this->conn, $query))
{
return true;
}
}

}   

}

?>

################

product.php

<?php
          
       include("database.php");

       $db=new database();

       if(isset($_POST['submit'])){
            
          $imagetype=$_FILES["image"]['type'];              
               $imagesize=$_FILES["image"]['size'];              
               $image_Arr = $_FILES['image'];   
               $temp = $_FILES["image"]["name"];      
           // allowed extensions
               $extension = explode(".", $temp);
               $allowed_extensions = array("jpg","jpeg","png","gif");
          
               if(!in_array($extension[1],$allowed_extensions))
               {
               echo "<script>alert('Invalid format. Only jpg / jpeg/ png /gif format allowed');</script>";
               }
               else{
               move_uploaded_file($_FILES["image"]["tmp_name"], "./uploads/" . $temp);                  
                  

           $insert_data=array(
                   'image' => mysqli_real_escape_string($db->conn, $_FILES['image']['name']),
                   'pro_name' => mysqli_real_escape_string($db->conn, $_POST['pro_name']),
                   'pro_code' => mysqli_real_escape_string($db->conn, $_POST['pro_code']),
                   'price' => mysqli_real_escape_string($db->conn, $_POST['price']),
                   'quantity' => mysqli_real_escape_string($db->conn, $_POST['quantity']),      
                   'contact' => mysqli_real_escape_string($db->conn, $_POST['contact']),

           );
        $pro_code = $_POST['pro_code'];
       $query= "SELECT * FROM product WHERE pro_code='$pro_code'";
       $result= mysqli_query($db->conn,$query);
       $sql = mysqli_num_rows($result);
      
       if($sql>0)
       {
       echo "Sorry, Productcode must be unique.";
       return false; }

       else {
         
       $db->insert('product', $insert_data);
       header("location:dis_product.php");
       }  
}  

}

?>
<html>
<body>

   <form enctype="multipart/form-data" action="product.php" method="POST" name="myForm" onsubmit="return validateForm()">

       <h2>Product</h2>
       Image:
       <input type="file" class="upload_file" name="image" id="image" multiple="multiple"></input><br /><br/>

       Product_Name:
       <input type="text" name="pro_name" id="pro_name"><br><br>

       Product_Code:
   <input type="text" name="pro_code" id="pro_code"><br><br>

   Price:
   <input type="text" name="price" id="price"><br><br>

        Quantity:
        <input type="text" name="quantity" id="quantity" maxlength="10"><br><br>

   <input type="submit" name="submit" value="submit form"><br><br>
  
   <a href="dis_product.php">Display</a>
   </form>

</body>
</html>

######################

edit_product.php

<?php
          
       include("database.php");

           $edit=new database();

       if(isset($_POST['edit'])){
               $image=$_FILES['image']['name'];
               $imgfile=$_FILES["image"]["name"];
               // get the image extension
               $extension = explode(".", $imgfile);
               // allowed extensions
               $allowed_extensions = array("jpg","jpeg","png","gif");
               if(!in_array($extension[1],$allowed_extensions))
               {
               echo "<script>alert('Invalid format. Only jpg / jpeg/ png /gif format allowed');</script>";
               }
               else
               {
          
               move_uploaded_file($_FILES["image"]["tmp_name"],"./uploads/".$imgfile);

       $update_data = array(

                   'image' => mysqli_real_escape_string($edit->conn, $image),
                   'pro_name' => mysqli_real_escape_string($edit->conn, $_POST['pro_name']),
                   'price' => mysqli_real_escape_string($edit->conn, $_POST['price']),
                   'quantity' => mysqli_real_escape_string($edit->conn, $_POST['quantity']),      

               );

       $where_condition = array(

       'pro_id' => $_POST["pro_id"]
       );

       if($edit->update("product", $update_data, $where_condition))
       {
       header("location:dis_product.php?updated=1");
                  
           }   
  
   }
       }
?>
<html>
<body>

   <form enctype="multipart/form-data" action="edit_product.php" method="POST">

<?php
         
  
if(isset($_GET["edit"]))
{
if(isset($_GET["pro_id"]))
{
$where = array(
'pro_id' => $_GET["pro_id"]
);
$single_data = $edit->select_where("product", $where);
foreach($single_data as $row)
{
?>
  
       <h2>Product</h2>

       <input type="hidden" name="pro_id" value="<?php echo $row["pro_id"];?>">
       Image:
       <input type="file" class="upload_file" name="image" value="<?php echo $row["image"]; ?>"></input><br /><br/>
      
       Product_Name:
       <input type="text" name="pro_name" id="pro_name" value="<?php echo $row["pro_name"]; ?>"><br><br>

       Price:
   <input type="text" name="price" id="price" value="<?php echo $row["price"]; ?>"><br><br>

       Quantity:
       <input type="text" name="quantity" id="quantity" value="<?php echo $row["quantity"]; ?>"><br><br>

   <input type="submit" name="edit" value="update"><br><br>
  
   <a href="dis_product.php">Display</a>
   </form>
   <?php
}
}
}
?>
</body>
</html>

################################

Delete Or Display

dis_product.php

<?php

include("database.php");

$fetchdata = new database();

if(isset($_GET['action']) and $_GET['action']=="delete")
{
$where = array(

'pro_id' => $_GET["pro_id"]
);

if($fetchdata->delete("product", $where))
{
header("location:dis_product.php?deleted=1");

}

}

?>

<html>
<body>

<table border='1'>

<tr>

<th>Image</th>
<th>Product_name</th>
<th>Product_code</th>
<th>Price</th>
<th>quantity</th>
<th>EDIT</th>
<th>DELETE</th>

</tr>

<?php //code for read data from Database

$i=1;
$wh = '';

$fetch_data =$fetchdata->select('$f','product',$wh,'');

foreach($fetch_data as $post)
{
?>   
<tr>
  

<td><img height="50" width="50" src="./uploads/<?php echo $post['image']?> "></td>
<td> <?php echo $post["pro_name"];?></td>
<td> <?php echo $post["pro_code"];?></td>
<td> <?php echo $post["price"];?></td>
<td> <?php echo $post["quantity"];?></td>

<td><a href="edit_product.php?edit=1&pro_id=<?php echo $post["pro_id"]; ?>">Edit</a></td>

<td><a href="dis_product.php?pro_id=<?php echo $post['pro_id']; ?>&action=delete" onclick="return confirm('Confirm to delete ??');">Delete</a></td>

</tr>

<?php
}
?>
</table>
<a href="product.php" >Add Product</a><br><br>
<a href="logout.php">Logout</a>
</body>
</html>

#########################3

Please find Below Attachment:: https://nimb.ws/x1AaXd