Your IP : 216.73.216.26
<?php
session_start();
include('../connection.php');
include '../function_lib.php';
include('imageresize.php');
$uid = $_SESSION['userid'];
if (!isset($_POST['help_id'])) {
redirect('./index.php');
}
$help_id = $_POST['help_id'];
$result = mysqli_query($connection,"SELECT help_id, commit_id, give_uid, r_commit_id, receive_uid, amount, datetime, confirm_status, lock_status, extend, status FROM help WHERE help_id='" . $help_id . "'");
if (mysqli_num_rows($result) > 0) {
$row = mysqli_fetch_object($result);
$receiver = $row->receive_uid;
$subject = mysqli_real_escape_string($connection,$_POST['subject']);
$message = mysqli_real_escape_string($connection,$_POST['message']);
if ($row->status == 1) {
setMessage('This request is already authenticated.', 'alert-success');
} elseif ($row->lock_status == 1) {
setMessage('This request is blocked.', 'alert-error');
} elseif ($row->status == 0) {
// mysqli_begin_transaction($connection, MYSQLI_TRANS_START_READ_ONLY);
if (!empty($_FILES['receipt']) && isset($_FILES['receipt']['name']) ) {
$resize = new resizeImage();
// upload image in three dimesions
//$largePath = "uploads/news/large/";
//$largeImage = $resize->do_resize(500,400 ,$_FILES['receipt'],$largePath,0,"large");
$smallPath = "uploads/";
$smallImage = $resize->do_resize(800, 500, $_FILES['receipt'], $smallPath, 0, "thumb", 90);
// if(!empty($smallImage) && file_exists($smallPath.$smallImage)){
$sql = "INSERT INTO `bank_receipt` (help_id, sender, receiver, subject, message, datetime, filename) VALUES "
. "('" . $help_id . "','" . $uid . "','" . $receiver . "','" . $subject . "','" . $message . "','" . date('Y-m-d H:i:s') . "','" . $smallImage . "')";
// echo "............. ".$sql;
$is_insert = mysqli_query($connection, $sql);
if($is_insert){
mysqli_query($connection,"UPDATE help SET status=1 WHERE help_id='" . $help_id . "'");
}
// }
}
// mysqli_commit($connection);
setMessage('This request successfully authenticate.', 'alert-success');
}
// setMessage('Please upload the Bank Recepit.', 'alert-success');
redirect('./index.php');
} else {
redirect('./index.php');
}
?>