1#@!#!123s

: / home / probwael / public_html /
Filename : process_property.php
back
<?php
session_cache_expire(120);
ini_set('session.gc_maxlifetime', 7200); 
@session_start();

include("conn.php");

$em=$_SESSION["em"];
$_SESSION["loginto"]=$_SERVER["REQUEST_URI"];

$result=mysqli_query($conn, "select * from _register where email='$em' and status='online'") or die(mysqli_error($conn));
			  $crow = $result->fetch_assoc();
              $fullname=$crow['fullname'];
              $phone=$crow['phone'];
			  $postal=$crow['postal'];
			  $dbalance=$crow['dbalance'];

if (mysqli_num_rows($result)==0) 
{
$_SESSION["msg"]="<font color=red><b><a href='signup'><u>Click here to register</u></a> or login below to upload your property.</b></font>";
header("location: login");
}
else {

//used for menu			  
if (mysqli_num_rows($result)>0) { $online='yes'; } else { $online='no'; }

//get settings
$dsett = mysqli_query($conn, "select * FROM _security where id='1'") or die(mysqli_error($conn));
while($irow = $dsett->fetch_assoc()){
$dcompany=$irow['dcompany'];
$dlogo=$irow['dlogo'];
$dcomm_address=$irow['address'];
$dcomm_phone=$irow['dphone'];
$dcomm_phone2=$irow['dphone2'];
$dcomm_email=$irow['demail'];
$currency=$irow['icurrency'];
$web_title=$irow['dtitle'];
//social urls
$sfb=$irow['social_fb'];
$stw=$irow['social_tw'];
$sin=$irow['social_in'];
$sgp=$irow['social_gp'];
$slk=$irow['social_lk'];
}

$trid=$_GET['transid'];

//get product details
$gcart = mysqli_query($conn, "SELECT tprice FROM _dcart where transid='$transid'") or die(mysqli_error($conn));
$gcart2 = mysqli_query($conn, "SELECT tprice FROM _dcart where transid='$transid' group by transid") or die(mysqli_error($conn));
while($crow = $gcart->fetch_assoc()) {
$cprice=$crow['tprice'];
$ctprice=$ctprice+$cprice;
}
$ccount=mysqli_num_rows($gcart2);
?>

<!doctype html>
<html lang="en-US">
	
<!-- Mirrored from tk-themes.net/html-landmark/shop-list.html by HTTrack Website Copier/3.x [XR&CO'2014], Fri, 22 Jun 2018 15:45:11 GMT -->
<head>
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
		<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"/>
		<link rel="shortcut icon" href="images/favicon.ico"/>
		<title>Edit Profile</title>

		<link rel="stylesheet" href="css/bootstrap.min.css" type="text/css" media="all"/>
		<link rel="stylesheet" href="css/font-awesome.min.css" type="text/css" media="all"/>
		<link rel="stylesheet" href="css/ionicons.min.css" type="text/css" media="all" />
		<link rel="stylesheet" href="css/icon-moon.css" type="text/css" media="all" />
		<link rel="stylesheet" href="css/magnific-popup.min.css">
		<link rel="stylesheet" href="css/animate.css">
		<link rel="stylesheet" href="css/owl.carousel.css" type="text/css" media="all"/>
		<link rel="stylesheet" href="css/owl.theme.css" type="text/css" media="all"/>
		<link rel="stylesheet" href="css/style.css" type="text/css" media="all"/>
		<link rel="stylesheet" href="css/custom.css" type="text/css" media="all"/>
		<link rel="stylesheet" href="css/landmark-map.css" media="all"/>
		<link href="../../fonts.googleapis.com/cssa3ff.css?family=Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i%7CExo:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i" rel="stylesheet">

		<!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->
		<!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
		<!--[if lt IE 9]>
			<script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
			<script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
		<![endif]-->
	</head>
	<body>
		<div class="site">
			<? include("menu.php"); ?>
			<div id="main">
				<div class="section pt-7 pb-7">
					<div class="container" style="margin-top:-30px;">
						<h3>ADD NEW PROPERTY</h3>
						<hr>
						<div class="row">
							
							<div class="col-md-3">
							<? include("sidebar.php"); ?>
							</div>
							
							<div class="col-md-8">
								<b><? echo $_SESSION['msg']; ?></b>
			  					
							
							
							<?
include("webcontrol/class.upload.php");

$icategory=$conn->real_escape_string(htmlentities($_POST["icategory"],ENT_QUOTES));
$ititle=$conn->real_escape_string(htmlentities($_POST["ititle"],ENT_QUOTES));
$descr=$conn->real_escape_string(htmlentities($_POST["descr"],ENT_QUOTES));
$rprice=$conn->real_escape_string(htmlentities($_POST["rprice"],ENT_QUOTES));
$dbeds=$conn->real_escape_string(htmlentities($_POST["dbeds"],ENT_QUOTES));
$dbath=$conn->real_escape_string(htmlentities($_POST["dbath"],ENT_QUOTES));
$dsqm=$conn->real_escape_string(htmlentities($_POST["dsqm"],ENT_QUOTES));
$dgarage=$conn->real_escape_string(htmlentities($_POST["dgarage"],ENT_QUOTES));
$prneg=$conn->real_escape_string(htmlentities($_POST["prneg"],ENT_QUOTES));
$dstate=$conn->real_escape_string(htmlentities($_POST["dstate"],ENT_QUOTES));
$dlocation=$conn->real_escape_string(htmlentities($_POST["dlocation"],ENT_QUOTES));

$sid=date('YmHis');
$transid=date('YmHis');
$dtime=date('d-M-Y H:i a');

if($icategory!=='' and $ititle!=='' and $rprice!=='') {
mysqli_query($conn, "insert into _dlistings set sid='$sid', icategory='$icategory', ititle='$ititle', descr='$descr', rprice='$rprice', dbeds='$dbeds', dbath='$dbath', dsqm='$dsqm', dgarage='$dgarage', dstate='$dstate', dlocation='$dlocation', prneg='$prneg', transid='$transid', dtime='$dtime', demail='$em', dstatus='Awaiting Approval'") or die(mysqli_error($conn));
          
@list(, , $imtype1, ) = getimagesize($_FILES['pic1']['tmp_name']); 
@list(, , $imtype2, ) = getimagesize($_FILES['pic2']['tmp_name']); 
@list(, , $imtype3, ) = getimagesize($_FILES['pic3']['tmp_name']); 
@list(, , $imtype4, ) = getimagesize($_FILES['pic4']['tmp_name']);            

//upload image 1
if ($imtype1 == 3 or $imtype1 == 2 or $imtype1 == 1) {  
$picid=$transid.'-1';
$foo = new Upload($_FILES['pic1']);            
include("image_ad.php");
mysqli_query($conn, "insert into _dpics set picid='$picid', transid='$transid', sid='$sid'");
$failed1='no';
}  else { $failed1='yes'; }

//upload image 2
if ($imtype2 == 3 or $imtype2 == 2 or $imtype2 == 1) {             
$picid=$transid.'-2';
$foo = new Upload($_FILES['pic2']);            
include("image_ad.php");
mysqli_query($conn, "insert into _dpics set picid='$picid', transid='$transid', sid='$sid'");
$failed2='no';
} else { $failed2='yes'; }

//upload image 3
if ($imtype3 == 3 or $imtype3 == 2 or $imtype3 == 1) {             
$picid=$transid.'-3';
$foo = new Upload($_FILES['pic3']);            
include("image_ad.php");
mysqli_query($conn, "insert into _dpics set picid='$picid', transid='$transid', sid='$sid'");
$failed3='no';
} else { $failed3='yes'; }

//upload image 4
if ($imtype4 == 3 or $imtype4 == 2 or $imtype4 == 1) {             
$picid=$transid.'-4';
$foo = new Upload($_FILES['pic4']);            
include("image_ad.php");
mysqli_query($conn, "insert into _dpics set picid='$picid', transid='$transid', sid='$sid'");
$failed4='no';
} else { $failed4='yes'; }

      
 ?>
				<div class="alert alert-success pgray  alert-lg" role="alert">
                  <h2 class="no-margin no-padding">&#10004; Your property was uploaded successfully and is awaiting approval by the admin</h2>
                  <br><p><a href="property_listings"><u>Click here to manage uploaded properties</u></a>  </p>
                </div>
<? } else { ?>

				<div class="alert alert-danger pgray  alert-lg" role="alert">
                  <h2 class="no-margin no-padding">Unable to upload ad!</h2>
                  <br><p>One or more required items missing. <a href="property_new"><u>Try again</u></a></p>
                </div>
<? } ?>
							
							
							
							
							</div>
							
						</div>
					</div>
				</div>
			</div>
			<? include("footer.php"); ?>
		</div>
		<div id="go-to-top" class="go-to-top">
			<i class="fa fa-angle-up"></i>
		</div>
		
		<script src="js/jquery.min.js"></script>

		<script src="js/jquery-migrate.min.js"></script>
		<script src="js/bootstrap.min.js"></script>
		<script src="js/modernizr-2.7.1.min.js"></script>
		<script src="js/owl.carousel.min.js"></script>
		<script src="js/off-cavnass.js"></script>
		<script src="js/jquery.magnific-popup.min.js"></script>
		<script src="js/script.js"></script>

		<script src="js/core.min.js"></script>
		<script src="js/widget.min.js"></script>
		<script src="js/mouse.min.js"></script>
		<script src="js/slider.min.js"></script>
		<script src="js/jquery.ui.touch-punch.js"></script>
		<script src="js/price-slider.js"></script>
	</body>

<!-- Mirrored from tk-themes.net/html-landmark/shop-list.html by HTTrack Website Copier/3.x [XR&CO'2014], Fri, 22 Jun 2018 15:45:11 GMT -->
</html>
<?
$_SESSION['msg']='';
}
?>