Gecko [ rhythmmedical.in ]

Name	Size	Permission
includes	[ DIR ]	drwxrwxrwx
blogs.php	6.32 KB	-rw-rw-rw-
blogs_add.php	1.38 KB	-rw-rw-rw-
blogs_delete.php	474 B	-rw-rw-rw-
blogs_edit.php	882 B	-rw-rw-rw-
blogs_photo.php	898 B	-rw-rw-rw-
blogs_row.php	287 B	-rw-rw-rw-
conn.php	838 B	-rw-rw-rw-
contactForm.php	3.04 KB	-rw-rw-rw-
error_log	477 B	-rw-rw-rw-
home.php	7.21 KB	-rw-rw-rw-
profile_update.php	1.53 KB	-rw-rw-rw-
sales_print.php	3.07 KB	-rw-rw-rw-
transact.php	925 B	-rw-rw-rw-
users.php	5.69 KB	-rw-rw-rw-
users_activate.php	530 B	-rw-rw-rw-
users_add.php	1.48 KB	-rw-rw-rw-
users_delete.php	500 B	-rw-rw-rw-
users_edit.php	1.19 KB	-rw-rw-rw-
users_photo.php	692 B	-rw-rw-rw-
users_row.php	303 B	-rw-rw-rw-

Code Editor : users_add.php

<?php
	include 'includes/session.php';

if(isset($_POST['add'])){
		$firstname = $_POST['firstname'];
		$lastname = $_POST['lastname'];
		$email = $_POST['email'];
		$password = $_POST['password'];
		$address = $_POST['address'];
		$contact = $_POST['contact'];

$conn = $pdo->open();

$stmt = $conn->prepare("SELECT *, COUNT(*) AS numrows FROM users WHERE email=:email");
		$stmt->execute(['email'=>$email]);
		$row = $stmt->fetch();

if($row['numrows'] > 0){
			$_SESSION['error'] = 'Email already taken';
		}
		else{
			$password = password_hash($password, PASSWORD_DEFAULT);
			$filename = $_FILES['photo']['name'];
			$now = date('Y-m-d');
			if(!empty($filename)){
				move_uploaded_file($_FILES['photo']['tmp_name'], '../images/'.$filename);	
			}
			try{
				$stmt = $conn->prepare("INSERT INTO users (email, password, firstname, lastname, address, contact_info, photo, status, created_on) VALUES (:email, :password, :firstname, :lastname, :address, :contact, :photo, :status, :created_on)");
				$stmt->execute(['email'=>$email, 'password'=>$password, 'firstname'=>$firstname, 'lastname'=>$lastname, 'address'=>$address, 'contact'=>$contact, 'photo'=>$filename, 'status'=>1, 'created_on'=>$now]);
				$_SESSION['success'] = 'User added successfully';

}
			catch(PDOException $e){
				$_SESSION['error'] = $e->getMessage();
			}
		}

$pdo->close();
	}
	else{
		$_SESSION['error'] = 'Fill up user form first';
	}

header('location: users.php');

${this.title}

Code Editor : users_add.php