stmt_init();
if ($stmt_category->prepare($sql_query)) {
// Bind your variables to replace the ?s
$stmt_category->bind_param('s', $ID);
// Execute query
$stmt_category->execute();
// store result
$stmt_category->store_result();
$stmt_category->bind_result($previous_category_image);
$stmt_category->fetch();
$stmt_category->close();
}
if (isset($_POST['btnEdit'])) {
$category_name = $_POST['category_name'];
// get image info
$menu_image = $_FILES['category_image']['name'];
$image_error = $_FILES['category_image']['error'];
$image_type = $_FILES['category_image']['type'];
// create array variable to handle error
$error = array();
if (empty($category_name)) {
$error['category_name'] = " Must Insert!";
}
// common image file extensions
$allowedExts = array("gif", "jpeg", "jpg", "png");
// get image file extension
error_reporting(E_ERROR | E_PARSE);
$extension = end(explode(".", $_FILES["category_image"]["name"]));
if (!empty($menu_image)) {
if (!(($image_type == "image/gif") ||
($image_type == "image/jpeg") ||
($image_type == "image/jpg") ||
($image_type == "image/x-png") ||
($image_type == "image/png") ||
($image_type == "image/pjpeg")) &&
!(in_array($extension, $allowedExts))
) {
$error['category_image'] = " Image type must jpg, jpeg, gif, or png!";
}
}
if (!empty($category_name) && empty($error['category_image'])) {
if (!empty($menu_image)) {
// create random image file name
$string = '0123456789';
$file = preg_replace("/\s+/", "_", $_FILES['category_image']['name']);
$function = new functions;
$category_image = $function->get_random_string($string, 4) . "-" . date("Y-m-d") . "." . $extension;
// delete previous image
$delete = unlink('upload/category/' . "$previous_category_image");
// upload new image
$upload = move_uploaded_file($_FILES['category_image']['tmp_name'], 'upload/category/' . $category_image);
$sql_query = "UPDATE tbl_category
SET category_name = ?, category_image = ?
WHERE cid = ?";
$upload_image = $category_image;
$stmt = $connect->stmt_init();
if ($stmt->prepare($sql_query)) {
// Bind your variables to replace the ?s
$stmt->bind_param('sss',
$category_name,
$upload_image,
$ID);
// Execute query
$stmt->execute();
// store result
$update_result = $stmt->store_result();
$stmt->close();
}
} else {
$sql_query = "UPDATE tbl_category
SET category_name = ?
WHERE cid = ?";
$stmt = $connect->stmt_init();
if ($stmt->prepare($sql_query)) {
// Bind your variables to replace the ?s
$stmt->bind_param('ss',
$category_name,
$ID);
// Execute query
$stmt->execute();
// store result
$update_result = $stmt->store_result();
$stmt->close();
}
}
// check update result
if ($update_result) {
$error['update_category'] = "