LINEJ; - Online Cineplex Rent & Ticket Management system

$delete (ow

: $this->link->query(fuuery)

di{$this->link -)error._LINE_J;

if($delete_row){

rettrn

$delete_row;

)

^else

{

retum false;

) ))

Session.php

<?php class Session{

public

_static_fimction

inite{

if (version_compare(phpversion$,'5.4.0','<)) if (session_idO: ") { {

session_start$;

l

)

^else

{

if

(session_statusO

: pHp_SESSION*NONE) {

session_startQ;

pblic ))l

_static

_firction ss($key, $val){

$-SESSIONtSkeyl = $val;

l

pnblic _static

fiwtion _Se($keyx if (isset{$_SESsloN[$key])) {

return $_SESSION[$key] ;

)

^else

{

rcturn false;

pblic l)

sta:tic function checkSessione{

self::initQ;

if

^(self:

:get("adminlogin"):

_false)

{

self::destroyQ;

header("Location:login.php _")_;

))

public

static fimction checkl,ogm(){

self::init$;

if

(self:

:get{"adminlogin"):

tnre)

{ kder("Location:dashbord.php");

))

public static function deshoyQ{

session_destroy$i

header( " Location{ogin.php") _;

ll.}\

J t t'

Adminlogin.php

<?php

$filepath:realpafh(dimame(_Ffl F ))'

ioclude_oace ($fi

lryath.7../lib/Sessionphp);

Session::checklogn0;

iaclude_oace ($filepath.y. Jlib/Database.php);

include_once ($fi lepath. y../helpers/Fornnalphp);

4php

class

Adminlogn{

private _$db;

private

$fin;

public fimction

_conshuct$

{

Sthis-tF

new DatabaseQ;

Slhir>fu:

new

FormatQ; ₎

pHic fimctim

^er+minlogin($arlminUser,$adminPass){

Sadminlrs : Sthis>fin->v61i66o4grd-*rror,

$dminPas = $his>fin>validdio{$adminPass);

$adminuser

: mysqli_real_escrye_sting($this->db>linh$adminUser);

$adminPass =

mysqli_real_escrye_sring($ftis->db->link

gadminPass);

if

(empty( $adminuser)

llempt( $aAminfass) {

Sloginmsg= "Usemame or Passward must not empty

";

return $loginmsg;

)else{

$query:

"SELECT

*

_FROMtable_admin WHERE adminUser-'$adminUser'

AND

adminPass='$adminPass"';

$resulc

$this->db->select($query);

if

($result !=false) {

$value:

$re sult->fetch_assoc$;

session: :set("adminlogrn ",true);

session: : set(r' adminldr',$valtre[adminfd']);

session: ^:set("admini.{ame',$valuef admin}.{ame']);

session: :set("admin{Jssr",$valuefadminUserl);

header( "Location:dashbord-php");

)else{

$loginmsy

"lJse, name

orPasswardnotmatch ";

retura $loginmsg;

I r I l9\

t J J t .'

Brand.php

<?*p

$fileparh

: realpath(dimamdFllEJ);

include_once

($fileparh-7./tihlDatabase.phf);

<pb

class

Brand{

private _$db;

private

$fu;

pr$lic

function

_c,onstruc$

{

$this->dF

new DatabaseQ;

$this->fu:

aew

FormatQ; )

public firnction braodlnsert($brandName)

{

$llrdName :

$this->fu->validation($brandName);

SDrmdName

: mysqli_real_e

$this->db->link,$brandl.{ame);

if (@y( SbradNare) _{

$msg: '{qlm clas#erro#Brmd field

must not be

empty</spn> ";

rtfiun l"r*S

lelse{

fuuery: .INSERT INTO

table_brmd{brmdName)

YALLIESf

$brand}.iame')" ;

$handins€rt

: Sthis->dL>insert{fuuery);

if

($bmndinsert)

{

$msg

:'(Elan

class:'success>Brand name Insert€d Successfully";

returo

$*g;

)else{

fmsg :n(slmo class:'errcr>Brand

name

Not

Inserted</sparp";

rehrm

$*g;

)l ⁾

public function

getAllBrand${

$que"y:

"SELECT

*

_FROMtable_brand ORDER

BY

brandld DESC ";

$result

: $this>db->setrect(fuuery!

retum _$result;

)

public

fimction getBrandByld($rd){

$query

:

"SELECT

*

_FROM

_table

_brandWHERE brandld

:

'$id' ";

$result

:

$this->db->select(furrcry) return _$result;

l

public function brandUpdate($brandName,

$rdx

$brandName

:

$this->fin->validation($brandName);

$brandName

:

mysqli_real_escape_string($this->db>1ink"$brandNarre!

$id =

mysqli*real_escape_sring($this>db>link,$id);

if

(empty( $brandName))

{

$msg

= "(E)aa 6l4ss:'gspfBraod field

must not be empty

4span> ";

retum _$msg;

)else{

$query

- "UPDATE

table_braod SET brandName

:'$brandName'

WHERE braodld:'$id"';

$updad_row : $this->dL>nSare($query);

if

($updaed_row)

{

$*sg :

o<sllan class:'successlBrand Inserted Sucressfully<Jspar>" ; leturo

$*g;

)else

{

$msg

:"<span clasr'errorlBrand

Not Updated";

r€hlrn

$*g;

)) )

trfilic fimim delBrdBylq$O{

Sqocry: T)ELETE

FROM

able_hand

WHERE brandld

:'$id"';

$deldm : $eis->db>del*{$query);

if($deld*a) {

$m*g

:

n(Ela&

ctas#succes>Brand

name deleted suceessfirlly";

return

$*g;

)else{

$*sg :

"(span class='Error>Brand rurme not deleted<lspan>";

return

$*g;

) ) )?>

,.

Cart.php

<?php

$filepath

: realpath(dirname(_Fllp l);

include_once ($fi lepath. 7../liblDatabase.php);

include_once ($fi lepath. 7../helpers/Formatphp') ;

<?php class Cart{

private _$db;

private

$ftr;

public function

_conskuctQ

{

$this->db:

new DatabaseQ;

$this->fu=

new

Formai$;

)

public

ftnction addTocar(fuuantity, $O {

$q,raotity

- f,this->fm->validatio{fuuautity);

$quantity

:

mysqli_real_escape

string($this->db->linlq$quant$;

$productld

:

mysqli_real_escape_string($this ->db->linlq$id) _;

$sld :

session_id$;

$squsy : ,SELECT *FROM

table_product WHERE

productld='$productld"';

$result

: $this;db>selet{gsquery}->f"t"h*w0;

$productName

:

$resultfproductName'] ;

$price

:

$result['price'1 _;

$image

:

$resultl'image'];

:

"SELECT TFROM table_cart WHERE

productld:'$producfld' AI{D sld: tsld'";

tgEflo : $fris>db>selec(Scbeckquery);

if(fec$r'o) {

$msg: 'htdust

akleady added

! ";

1gfitm $rnsg;

lelse{

fuuerY:

"INSERT

INT'

able_car(sld,productld,productName,price,quantity,image)

YALUES('$sld','$plsductld','$productNarne','$price','$quantity','$image')";

$poductinsert

:

$this->db->insert($query);

if($productinsert) {

header("Location:cart.php");

)else{

header(*Location:error.php") _;

) )l

public function getCartProduct$ {

$sld:

session_id$;

$q,rety

=

"SELECT

*

_FROMtable_cart SfHERE

sld

= '$sld'

";

$result

:

$this>db->select$query) _; rctum _$result;

)

public function updateCa*Quantity($cam4 $quantityX

$carttC

:

mysqli_real*escape_string($&is.>db'>1ink"$carttdl

$quantity

:

mysqli_real_esoape_string($this->db->linh$quantity;;

$query: ^.UPDATE

table_cart SET quantity

-'$quantity'

T(HERE cartld

='$cartld"';

$updated_row

:

$this-)db->update($query) ;

if

($updated_row) {

$msg

:

"(span

"1*s:tsuccess>Quntity

^updated

Successfully4qra#"

_; return

$*g;

)else{

$msg

:"(sllan class:'ermrlQuantit5r Not

Updated" _; return

$*g;

))

public

finction delProductByCrt($delld){

$delld

: mysqli_ml_escape_sting($this->db.>link

$delld);

$q,rery: "DELETE

FROM table_calt WHERE cartld

:'$delld"';

$deldata

: $this->db>delet{$query);

if

($deldata)

{

echo'<scripFwindow.locatioa :'carlphp';</script)"'

)else{

$msg

:

^n(spfln

clasrError>Category

not deleted";

rehm $msg

)l

@tic tualn che*CetTaBteQ{

$sH:s*ryfulQ;

$query: SELBCT '

^FROM

^ablc

^,cet^WHERE

^sld :

_'$sld'^n;

$resrlt:S@;

rctum

&e {q _}

public

function delCustomercartQ

{ SsId:

session_idS;

$query: "DELETE

FROM table_cart WHERE

sld:'$sld"';

$this-tb->delete($query)

;

)

public firnction orderProduct($cmrld)

{

$sld = session_idQ;

$query:

"SELECT

*

_FROMtable_cart WHERE

sld :'$sld' _";

5i.

$getPro

:

$this->db->selec($query);

if($getPro)

while ($resulr$getPro+fetch*assoe$) {

$productld

:

$result['productld'];

$productName =

$result['productNmel;

$quantity

:

$resultflquantity'] ;

$price

:

$resultfprice'] *$quantity;

$image = $result[image'J;

$query:

"INSERT

INTO

table_order(cmrld,productld,productName,quantity,price,image) VAluEs($cmrld','$productld','$productName','$quantity','$price','$image') " ;

ert = $this->db->insert($query);

Jtt llt

public frxrction payableAmount($cmrld){

$query

=

"SELECT ^priceFROM table_order WHERE

cmrld :

_'$cmrld'

_AND _datr

nowQ";

$result =

$this->db->selec(fuuery);

rctum _Sresult;

)

public fimction getOrderProduct{$cmrld){

$query:

"SELECT ⁺FROM table_order WHERE

cmrld :'$cmrld'

_ORDER

_BY

_dat€

DESC";

Sresult

:

$this->db.>select(&uery);

retum

&esult )

pblic

firnction checkorder($cmrld)

{

tquery:

"SELECT

*

_FROMtable_order WHERE

cmrld :

_'$cmrld'

_";

trc$It :

3&is->dh,>selec{$query);

rsm

Sresdq

p*ltotuln@t l

Squcry: 'SELECT *

_FROM

ta&_@der

ORDER

BY

date DESC";

&sutt:$tbis.ry,

letum$resulq,

)

prblic

tunction

productShifted($id$dae,$price){

$id

:

mysqli_real_escape*string($this->db->linlq$id) _;

$dde

:

mysqli_real_escape_sfiing($this->db->link _$date);

Spice : mysqli_realrcscape_string($this->46-ttioh$lni*);

5l

$query:

^UUPDATEtable_order SET status = '1' WHERE cmrld

-'$id'AND

dat€=r$date'

AI{D price'$price"';

$updated_row

:

$this->db->update($query) ;

if

($updated_row) {

$msg

:

" (span class:'successlUpdated Successfully" ;

return $msg;

]' else {

$msg

:

"(span

class:'errorlNot

Successfully" ;

retum $msg;

1l

public function delProductShifted($id, 'J $date, $price) {

$id

: mysqli_real

escape_string($this->db->1ink,$id);

$date

:

mysqli_rea1_escape_string($this->db->link,$date) ;

$price

: mysqli real

escape_string($this->db->1ink,$price);

$query

: "DELETE

FROM table_order WHERE

cmrld:

'$id'

AND

date:'$date'

AND price:'$price"';

$deldata

:

$this->db->delete($query);

if

($deldata) {

$msg

:

_"Data deleted successfrrlly<lspan> " ;

retum _$msg;

)else{

$msg

:

"(span class:'Error'>Data not deleted" ;

return $msg;

I\ tt

public function productShifConfirm($id, Sdate, $price){

$id

:

mysqli_real-escape_string($this->db->1ink,$id);

$date

: _mysqli

realescape_string($this->db->link,$date);

$price

: mysqli_real

escape_string($this->db->link,$price);

$query: "UPDATE

table_order SET

status:'2'WHERE cmrld:'$id'AND

date:'$date'

-L\D price:'$price"';

Supdated_row = $this->db->update($query) ;

if

($updated_row) {

$msg

:

"(span class:'success'>Updated Successfully";

retum _$msg;

l' eise{

$msg

:

"{span

class='error}Not

Successfully" ;

rcturn _$msg;

r)\9>

t)t'

l-'r1P

I

l.

$filepath

: realpath(dimame(_FllEj);

include_once ($fi lepath.T..AiblDatabase.php');

{$fi1epath.'/..ihelper$Format.php}

:>

<?php

class Cxregory{

private _$db;

private

$fu;

public firnctiau {

$this->db-

^newDatabffie0;

$this->frn:

new

Fonnat$;

)

public fimction catlnsert($catNamex

$catName

:

$this->fin>validation($cat}.Iame);

$catName

:

mysqli_real_escape_stirg($this->db->link _$catName);

if

(empty( $catl.{ame)

{

$msg: "(sllan clasr'errorXategory field

must not be empty

{span>

rcturn$msg;

)else{

fuuery:'INSERT ^INTO

table_category(cati.lame) VALUES('$catName') " ;

$catinsert

:

$tlis->db->insert{$query);

if

($catinseft)

{

$msg

:

^r(5p,sxclass='srccesslCategory Inserted Successfullyclspan>'' rcturn

$*g;

)else

{

$msg

:"(sllan

class='error>Categorl

Not

Inse'rted<Jspap" _;

reurn $msg

fbltutulnertAilcd0{ )l)

trpy:'SELBCT

⁺^FROMtaHe_category ORDER

BY

catld DESC *;

&eslr : $rhis->db>s1sc(&Ey)t rehrtr &EsIq

)

pblic

fimction

getcatByld($idx

Iquay :'SELECT ^*

^FROMtable_category WHERE catld

:'$id"';

Iresult :

$this->db->select(fuuery);

rehrn

$resulq

)

public function catupdate($catlt{ame, $id)

{

$catl.Iame

=

$this->fu->validation($cati.Iame);

$catName

: mysqli_ral_escape_*ing($this->db->linh$catNarne);

[,

$id

: mysqli_realescape_saing($this->db->tnlq$id);

if

(empty( $catName))

{

$msg

=

"(spa& class:'errorbCategory

field

must not be empty </slrarP

";

return $msg;

)else{

$query

- "UPDATE

table_category SET

catl.{ame:'$catName'WHERE

catld

='$id"';

$updaed_row

:

_$this->db->u$ate($query) _;

if

($updaed_tow)

{

$msg

:

"<sllan olass:'successlCategory Inserted Successfullyclspan>" _; return $msg;

)else{

$msg

:"(span

cla^ss:'errorlCategory

Not

Updated";

return $msg;

) ))

public firnction

delcatByld($idX

$query: "DEIETE

^FROMtable_category WHERE

cartld:'$id"'i

$deldata

: $this->dF>delete(fuuery);

if

(Sdeldata)

{

$msg

:

""' retum

$*g;

)else{

$msg

:

"<sllan

class-Error>Category rot

deleted";

re&rn $*g;

) ) )>

Customer.php

<rPtP

ft'tcprtr:@;

idude_re (lfiI€pe'/-rib/Dmbese.php);

include_re (Iflrpe7.;tegasffmx.p@);

4PhP

des

Customer{

pivate

$db;

pivme $fu;

pblic

flrnction

_construetg {

$fris->db:

new Database$;

$this->fin:

new FormatQ;

public function customerRegistration($datax 55

)

l.

$aame

:

mysqli_realescape_striag($this->db>1fuk

$datatnamel);

$address

:

mysqli_real_escape_skiag($this->db>link $dstat'addrmsl);

$ciry

: mysqli_real_escape*strins($this>db>link $datalciql);

$cormty :

mysqli_real_escape_sting($this>db-.>link

$datalcounff ]);

$zip

:

mysqli_real_escape_striug($this->db>link $datafzip

l);

$phoae

:

mysqli_real_escape_string($this->dL>link $dara['phooe'];

$email

:

mysqli_real_escape_string($this->db-'>link $data['email']);

$password: mysqli_real_escape_sEing($this->db>li$cod5($dxa['password];

if

^($name

-"

^ll

$address: ""

_ll

$ci$,: ""

$coun61,: ""

$rin: ""

_ll

$phone: ""

;;

$email: "" ll$password:

^uu11

$msg

:

"(span class:'error'>Fields must not be empty ";

retum _$msg;

$mailquery

:

"SELECT

*FROM

table_customer WHERE

email:'$email' LIMIT

';

$mailcheck

:

$&is->db->selec($mailquery);

if

($mailcheck

!:

false)

{

$msg:

"<span

class'errof>This

E-mail dready exist <,/span>

";

return$*gt

)else{

$query:.INSERT INTO

table_customedname,address,city,coun$,zip,phone,email,password)

VAluEs('$name','$ad&ess','$citt','$cormtry','$zip','$phone','$email','$password')";

: $&is->db>insert{fuuery}

if

($productinsert)

{

$msg

:

^n(spa$class='successlCustomer data Inserted Successfirlly"'

r€film $*gt

)else{

tmsg :'<sp6

classCerror>Customer data not Inserted<lspan>";

EfiM

TrnS8;

rblicfusm@{ )ll

$€mail

:

mysqli_real_escrye_string($nhis.>db>tink

$datatenaill);

: mysqli_real_escrye_string$rhis>dt+link,md5(&lata['password1]];

if (empt($email)

_ll

emp!($pa*sword) {

$msg: '{sl}an class:'error}Fields

must not be empty

4span> ";

rentm

$*g; )

Squerla: 'SELECT *FROM

table_customer WHERE email

:'gemail'AND

_password

:

Tpassword'";

$result

:

$&is->db->select($query);

if

($result

!-

false)

{

$value

:

$result->fetch_assocQ;

[,

a t-

[-

I

Session: :set{"cuslo gio",true);

Session: :set("cmrld",$value

fcustomerld]);

Session: :set{"crnrNaffre",$value['nanoe'J];

header("Location:cart.php") _;

)else{

$*tg :

"(span

class:'error!

E-mail or password aot

natch

! ";

return $msg;

)

l

public function getCustomerData{$O{

$query

=

"SELECT

*

_FROMtable_customer WHERE

customerld :'$id' _";

$result

:

$this->db->selec($query);

return $result;

)

public fimction customer{Jpdde($dat4

$cmIO{

$ume : mysqli_real_ery_sring($ttis->db>link

$dara['name'];

$aeess : mysqli_real_escrye_seing(Sftis.>db>link

$dataladdress'l);

$city

: mysqli_real_esc4e_string(W);

$cuntry: mysqli_real_esc4e_@(

_D;

$zip

: mysqli_real_escrye_r@(tthis-Xb>link $datap};

Sphre : mysqli_real esrye_striry(3this.>e>tnkJdaa[lhoae]];

$ffiil ^: mysqli_real_.fsc+e snine(ghb>&,>link sdalafemail1);

if (3ome:"

fad.lrc$s- " I lc*y- " lllcorregy': '"

3dU- ""

_ll

$1&one- ""

!emae'1

$rrreg

- ^'<ryE. dass#euu>fide

must not be

ryty ^4ryan> ^";

Isum Smsg

fpt: '[JPDATE*-mer lds{

SET

re ^: kme', ddress : '$ddress', cigr:

tct5/, omy: tos*rf, ^zip: tip', ^phre : _Qfione',

_email

:

_'$e,mail'WHERE customerld

:tdf ₁

f-qpe4frov : 3thir>db>updd{$query}

if($up0med-mg {

$,msg

: "<spm clas#mccesslCustomer kofrle

Updated Suecessfirlly" ; retum _$msg;

)else{

$msg

:"<sllan class='erorlCustomer

Profile not Updated

{span>";

return

$*g;

) ) ) )?>

Product.php {ehp

I a

t

$filepath

: realpa&(dinrame(_FllEj);

inelude_once ($fi lepath. 7. ./lib/Database.php);

($fi lepath.'/.. /helper$lFormat.php)

+php

class Product{

private $frn;

private _$db;

public

function

_coastructQ{

$this->fu:

new FormatQ;

$this->dF

nerv Databaseg;

)

publie function productlnsert($datqgfils; ₁

$ptoductName:

mysqli_real_escape_string($this".>db->1inh$data['productName'J);

$catld

:

mysqli_real_escape_sting($this->db>liok,$datal,catld,]) _;

$brandld

:

mysqli_real_escape_sring($this->db->link $data['brandld']);

$body

:

mysqli_real_escape_sring($&is->db->linlq

gdatathody'l);

$price

:

mysqli_real_escape_suing($this->db->link

$data['price'];

$type

: mysqli-rel-escape

s{ring($this>db>1ink,$data['type'J);

$permited

:

array('jpg',

Jpeg','png','grf);

Sfile_name

:

_$filefimage'] _['rame']_;

$file_size

:

$filefimage'] _fsize'l _;

$file_try :

$fileflimage] [tnnp_name ] ;

$div

:

eqil.ode(.', $file_aame);

$file_elrt

: strtolower(eod($dir);

fufurc_image - substr(d5(time0),

0, I 0).'.'.$file_ext;

fuplmde{_image : "rqildf

-$rmiqrc_image;

if (rpofocmrrc: ^rr

_ll

fcate'"

$brmdlfl:

^rrn_il

$uoay: ""

_ll

$price:

^n"_;;

lXf,le

F"[tt5rpr:"){

f-"8: '<ln cHeuu>Fields

must not be empty

</spn>

_";

rEmfng

ldsif $flc_sia ^>l

^04tS6Z)

_{

echo'<E m cNerm#Image

Size should

lbe

less then

IMB!

4spm>";

I el*if (in-array($file

,ext, $pennited)

:

_false)

_{

echo "<span

class:tq1pq>you

can upload only:_"

.implde(,', $permited)."{span>,'.

)

^else{

move_uploaded_file($fi1e_temp, 9uploaded_image);

Xquery: 'INSERT INTO

tablejroduct(productName,catld,brandld,bod5price,image,type) VAllIEs('$productName','$catld,,'$brandld,,'$body,'gp6ce','$uploaded image,,'$t]rpe')";

$poductinsert

:

$this->db>insert($query);

if

($productinsert) _{

$msg

:

"Product inserted Successfully" _; return $msg;

)else{

$msg

:"<tpan

class:'error'>Product

Not

inserted</sp&n)";

return $rnsg;

I\I ttt

public

function getAllProductQ{

$query :

"SELECT

tablejroduct.*,

table_category.catName, table_brand.brandName FROM

tablegoduct INNER

JOIN table_category ON

tablejroduct.catld :

table_category.catld

INNER

JOIN table. brand ON

table3roduct.brandld : _table

brand.brandld ORDER

BY tablejroduct.productld

DESC " ;

$result

:

$this->db->select($query);

refurn $result:

t

public tunction getProByld($id) _{

$query:

"SELECT

*

_FROM

tablejroduct

WF{ERE

productld:'$id'

_";

$result

:

$this->db->seiect(fuuery);

refurn $result;

pubiic functi on productUpdate($data, _$file, $id) {

Sproduct\ame

:

m1.sqli_real_escape_string($this->db->link,$data['productName']):

k

arld

:

_m,r_{:qli_re}_{a1_e}scape_string(Sthis->db->link.$data[,catld,'l);

:randld :

mr sqli_real_escape_string(sthis->db->1ink.$data['brandld']);

S:.-':', :

mr :.ri1i_rea1_escape_s'.rutsrSrhis->db->1ir,k.Sdata[,bod1-'] _):

::-.-= - :...;-. :e.- :--:- i=-:-i S:::-._-,ih_tlj11 (l"tot,n,i,-e,lr

!-:"

⁼

_-r -'' ^-=.- .-....-t, t--; -,.;.to;;tti; ^j,i'

S:-::-:.: - ::::-" ,,. .a=. ;1 ^. _-at

! --

= ^:-=:

-

:. = -- ::. _::j:.3

5:l--_s r" = S:l-;-:,€a -

_..2e

S:1,=_:=:::

:

_S:lle-

'-r:+.

:-:_::me.1:

Sdir :

explcxlq'"'. St'i1e_narne _i:

Stile_err

:

*rtolovi-er( end{ Sdiv ₎_):

Sunique_image

:

substr(md5 (timeQ), 0, 1 0).'.'. $fi le_ext;

SupI oaded_image

=

^"upload/". $unique_image;

ii

rSproductName

:"" ll$catld:: ""il $brandld:: ""

$bod5: ""

_ll

$prics:""

_ll

$type::

",y1 Smsg

:

"Fields must not be empty <lspan> _";

return $msg;

)else{

if

^(!empty($fi te_name)) {

if

($fde_size >1048567) _{

echo "{span class:'error'>Image Size should be less then

IMB!

";

)

^elseif(in_array($file_ext,

$permitedl:

_{false) {}

echo "<span

class:'error')You

can upload

only:-"

.implode(',',

$permited). " ', _;

)

^else{

move_uploaded_fi 1e($ fi le_temp, $uploaded_image) ;

$query

: "UPDATE tablejroduct

SET productName

:

'$productName',

catld:

'$catld',

brandld: '$brandld', body:

'$body', price

:'$price', _image:

'$uploaded_image', R?e

:'$ty'pe'

WHERE productld

:'$id"';

$productupdated

:

$this->db->update($query) ;

if

($productupdated) {

$msg

: "(Elan

class:'successlProduct updated Successfully" _; return $msg;

)else{

$msg

:

_lrpan

class:'error'>Produc t Not updated<./span> " ^.

return _$msg;

\\

_tt

)

^else{

$query:

"UPDATE

tablejroduct SET productName:'$productName', catld:'$catld', brandld:'$brandld', body:

'$body', price

:'$price', type:'$t;,pe'WHERE productld:'$id'

_";

Sproductupdate

:

$this->db->update($query);

if($productupdate)

{

$msg

:

"(span class:'success'>Product updated Successfully" _; return $msg;

) elce{

Smsg

:"qapan

class:'error'>Product

Not

updated".

return $msg;

Irlt

public tunction delProByld($id) ''JJ _{

Squery:

"SELECT

*

_FROM

tablejroduct

_WF{ERE

productld:

$getData

:

$this->db->select($query);

if ($getDatd

while

($dellmg

:

$getData->fetch_assoc0) {

$dellink

:

$detlmg['image'] _;

unlink($dellink);

))

sdelquery

: "DELETE

FROM

table3roduct

WHERE

productld:

_'$id'

Sdeldata

:

$this->db->delete($delquery);

if

lSdeldatat _{

S ms g

:

^"Product deleted successfu ll),.Jspan>" _; 60

rFtrrm S,mo-'_vrrrub,

)else{

$msg

:

"(span

class:'ErrorlProduct

not deleted" _; return $msg;

tl

public function getFeaturedProduct0 {

$query:

"SELECT

*

_FROM

table3roduct

WHERE

type:'0'

ORDER

BY

^productld DESC

LIMIT

'';

$result

:

$this->db->select($query);

retum _$result;

)

public

function getNewProducQ {

$query

:

"SELECT

*

_FROM

tablejroduct

ORDER

BY

productld DESC

LIMIT 4

$result

:

$this->db->select($query ),

return $result:

public function getSingieProductrsid r i

Squery

:

"SELECT

p.*.

c ;.aName. b.hi-and\;une

FRO\{ tablejroduct

as p,

table_category as c.

table 'r,ral;

^a-.b

\\tlERE p.caild: c.catld,tND p.brandld:

b.brandid

AND

n ^- L ^,Lr L'uU! ^-.^f^{, ,}^-tT,{LrU - '( J!U^i..-'l'^'^.

Sre=uit

: Sths->::- -!.=.;:,

S: *=:-. .

:::*:: Sl:s--:.

r1-Ir:DE ^*--

^ir ^' ^I,U --:]lJau-_-^rT

r- .,

_ORDER

B\-

pioductld

-: .:

^-.,

-

: _--r----;:

:-i

-.::_. -:_-

!: _-*:-- : ^'Sa-:

_--

_^ '

^:?.,-r1,1

'::." _:::..:1.: _THERE brandid:'l' OFJER By

^productld

- :S- *llflT i

S:--.-. : !rnrs->db'->-lectt

Squery r:

:.:-:ri

Sresult:

: *:-l;

tunction latestFromWaltonQ{

Squen

:

"SELECT

*

_FROM

tablelroduct

WHERE

brandld:'S'ORDER BY

productld

)ESC LIMIT

1 '';

Sresult

:

$this->db->select($query);

return $result;

)

Dalam dokumen Online Cineplex Rent & Ticket Management system (Halaman 56-73)

LINEJ;

: $this->link->query(fuuery)

di{$this->link -)error._LINE_J;

rettrn

)

{

) ))

Session.php

public

inite{

if (version_compare(phpversion$,'5.4.0','<)) if (session_idO: ") { {

l

)

{

if

: pHp_SESSION*NONE) {

pblic ))l

firction ss($key, $val){

l

fiwtion Se($keyx if (isset{$_SESsloN[$key])) {

)

{

pblic l)

if

:get("adminlogin"):

{

))

public

self::init$;

if

:get{"adminlogin"):

{ kder("Location:dashbord.php");

))

J t t'

Adminlogin.php

$filepath:realpafh(dimame(_Ffl F ))'

lryath.7../lib/Sessionphp);

Session::checklogn0;

4php

Adminlogn{

$fin;

_conshuct$

Sthis-tF

Slhir>fu:

FormatQ; )

pHic fimctim

Sadminlrs : Sthis>fin->v61i66o4grd-*rror,

$dminPas = $his>fin>validdio{$adminPass);

: mysqli_real_escrye_sting($this->db>linh$adminUser);

mysqli_real_escrye_sring($ftis->db->link

if

llempt( $aAminfass) {

";

)else{

$query:

*

AND

$resulc

if

$value:

)else{

$loginmsy

orPasswardnotmatch ";

Brand.php

<?*p

: realpath(dimamdFllEJ);

($fileparh-7./tihlDatabase.phf);

<pb

Brand{

$fu;

pr$lic

_c,onstruc$

{

$this->dF

$this->fu:

FormatQ; )

{

$llrdName :

: mysqli_real_e

if (@y( SbradNare) {

_firction ss($key, $val){

fiwtion _Se($keyx if (isset{$_SESsloN[$key])) {

FormatQ; ₎

if (@y( SbradNare) _{

)l ⁾

_table