1#@!#!123s

: / home / diafrica / www /
Filename : add_staff.php
back
<?php
include 'includes/config.php';
session_start();
if (isset($_POST['username']) && isset($_POST['password'])) {
    $manager = $_POST['username'];
    $password = $_POST['password'];
    $cmem = "SELECT id FROM auth WHERE username='$manager' AND password='$password' LIMIT 1";
    $run_cmem = mysqli_query($con, $cmem);
    $count_mem = mysqli_num_rows($run_cmem);
    if ($count_mem == 1) {
        while ($row = mysqli_fetch_array($run_cmem)) {
            $id = $row['id'];
        }
        $_SESSION['id'] = $id;
        $_SESSION['manager'] = $manager;
        $_SESSION['password'] = $password;
        header('location: mod-auth');
        exit();
    } else {
        echo "<script>alert('Incorrect Password !!!')</script>";
        echo "<script>window.open('sacredheartdadmin','_self')</script>";
        exit();
    }
}
?>
<?php
$page_title;
$page_title = ucfirst(basename(__FILE__, '.php'));

if ($page_title === 'index') {
    $page_title = 'Home';
}

$page_title = "Add Staff page";
include 'section/header.php';
include 'section/pages-header.php';
include 'includes/functions.php';
$Functions = new Functions();
?>


<!DOCTYPE html>
<html dir="ltr" lang="en">

 <!-- Start main-content -->
  <div class="main-content">


     <!-- Section: Team -->
     <section id="team">
      <div class="container">
        <div class="row mtli-row-clearfix mb-5000">  
        <?php
            if (isset($_GET['sn'])) {
                $sn = $_GET['sn'];
                $delete = "delete from staff where id='$sn'";
                $run = mysqli_query($con, $delete);
                if ($delete) {
                    echo "<div class='alert alert-danger'> Carousel deleted successfully! </div>";
                    echo "<script>window.open('add_staff','_self')</script></script>";
                }
            }
          ?>    
          <div class="col-lg-9">           
            <p><a href="mod-auth">Go back to Admin Dashboard</a></p>
            <?php
              if (isset($_POST['addstaff'])) {
                $title = str_replace("'", "''", $_POST['title']);
                $qualification = str_replace("'", "''", $_POST['qualification']);
                $name = str_replace("'", "''", $_POST['name']);
                $category = str_replace("'", "''", $_POST['category']);
                $filename = $_FILES['file']['name'];
                $filepath = 'images/staff/' . $filename;
                move_uploaded_file($_FILES['file']['tmp_name'], $filepath);

                
                global $con;
                if ($filename == ""){
                    $query = "INSERT INTO staff (name, category, title, qualification) VALUES ('$name','$category','$title', '$qualification')";
                    $query_run = mysqli_query($con, $query);
                }else{
                    $query = "INSERT INTO staff (name, category, title, qualification,image) VALUES ('$name','$category','$title', '$qualification','$filepath')";
                    $query_run = mysqli_query($con, $query);
                }
                
                if ($query_run) {
                    echo "<div class='alert alert-success'> Added Successfully! </div>";
                } else {
                    echo "<div class='alert alert-danger'> An error occured, please try again! </div>";
                }
              }


            ?>        
            <h3 style="color: #17569E;">Add staffs!</h3>
             
            <?php
//                 $query = "SELECT * FROM content WHERE id='1' ";
//                 $query_run = mysqli_query($con, $query);
//                 while ($row_post = mysqli_fetch_array($query_run)) {
//                     $title = $row_post['title'];
//                     $link = $row_post['link'];
//                     $contenter = $row_post['content'];
//                 }
            ?>
            <form id="form1" name="form1" method="post" action="" enctype="multipart/form-data">
                <table width="100%" cellpadding="1" cellspacing="2">
                    <div class="mb-3">
                        <label>Title</label>
                        <input type="text" name="title" class="form-control" required>
                    </div>
                    <div class="mb-3">
                        <label>Qualification</label>
                        <input type="text" name="qualification" class="form-control" required>
                    </div>
                    <div class="mb-3">
                        <label>Name</label>
                        <input type="text" name="name" class="form-control" required>
                    </div>
                    <div class="mb-3">
                        <label>select category</label><br>
                        <select name="category" class="form-control" id="">
                          <option value="">select option</option>
                          <option value="principal">Principal staff</option>
                          <option value="academic">Academic staff</option>
                        </select>
                    </div>
                    <div class="mb-3">
                        <label>Image</label>
                        <input name="file" type="file" accept=".png,.jpeg,.jpg,.svg,.gif,.tiff" class="form-control">                        
                    </div>
                    
                    
                    <!-- <div class="mb-3">
                        <label>Content</label>
                        <textarea id="editor" type="text" name="content" class="form-control"></textarea>
                        <script>
                             ClassicEditor
                             .create( document.querySelector( '#editor' ) )
                             .then( editor => {
                                                 console.log( editor );
                             } )
                             .catch( error => {
                                                 console.error( error );
                             } );
                        </script>
                    </div> -->
                    
                    <div class="mb-3">
                        <input style="margin-left: 100px;" name="addstaff" type="submit" style="font-size:12px;" class="btn btn-primary" id="addnews" value="Add Staff" />
                        <!-- <a style="margin-left: 100px; font-size:23px;"  class="default-btn" href="add_hod">Add HOD</a> -->
                    </div>
                </table>
            </form>
            <hr/>
            <p style="color:#990000"><b>Existing Staffs</b></p>
            <?php
            $get_feedback = "select * from staff order by id desc";
            $run_feedback = mysqli_query($con, $get_feedback);
            while ($row_feedback = mysqli_fetch_array($run_feedback)) {
                $sn = $row_feedback['id'];
                $image = $row_feedback['image'];
                $name = $row_feedback['name'];


                echo "
                        <div class='row' style='margin-bottom: 10px;border-bottom: 1px solid #E6E6E6;padding: 10px;padding-left: 0px;'>
                   <div class='col-lg-3'>
                        <img src='$image' height='70' width='70'/>
                    </div>

                    <div class='col-lg-5'>
                        $name
                    </div>

                    <div class='col-lg-1'>
                        <a href='update_staff?sn=$sn' style='color: blue;'>Edit</a>
                    </div>
                    <div class='col-lg-3'>
                        <a href='add_staff?sn=$sn' style='color: red;'>Delete</a>
                    </div>
                    </div>
		";
            }
            ?>  
          </div>        
        </div>
      </div>
    </section>
  </div>
  <!-- end main-content -->
  
  <?php include_once 'section/footer.php'; ?>s