<h2>Edit File - update-product.php</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/home/u548619843/domains/indusjewellery.com/public_html/admin/ajax/update-product.php">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">&lt;?php
session_start();
require &#039;../../inc/config.php&#039;;
require &#039;../../vendor/autoload.php&#039;;
require &#039;../../inc/smtp.php&#039;;

use PHPMailer\PHPMailer\PHPMailer;

$userID = $_SESSION[&#039;AdminID&#039;] ?? 0;
if ((int)$userID &lt;= 0) {
    exit(&#039;User not logged in.&#039;);
}

$data = json_decode($_POST[&#039;productData&#039;] ?? &#039;&#039;, true);
if (!is_array($data) || empty($data[&#039;id&#039;])) {
    exit(&#039;Invalid product data.&#039;);
}

$productId = (int)$data[&#039;id&#039;];
$cid = (int)  ($data[&#039;category_id&#039;] ?? 0);
$scid = (int)  ($data[&#039;subcategory_id&#039;] ?? 0);
$nm = mysqli_real_escape_string($con, trim($data[&#039;name&#039;] ?? &#039;&#039;));
$desc = mysqli_real_escape_string($con, trim($data[&#039;description&#039;] ?? &#039;&#039;));
$pr = (float)($data[&#039;price&#039;] ?? 0);
$st = (int)  ($data[&#039;stock&#039;] ?? 0);
$bc = mysqli_real_escape_string($con, trim($data[&#039;barcode&#039;] ?? &#039;&#039;));
$sc = mysqli_real_escape_string($con, trim($data[&#039;style_code&#039;] ?? &#039;&#039;));
$dc = (int)  ($data[&#039;diamonds_count&#039;] ?? 0);
$tc = (float)($data[&#039;total_carats&#039;]  ?? 0);
$cl = mysqli_real_escape_string($con, trim($data[&#039;clarity&#039;] ?? &#039;&#039;));
$clr = mysqli_real_escape_string($con, trim($data[&#039;color&#039;] ?? &#039;&#039;));
$sh = mysqli_real_escape_string($con, trim($data[&#039;shape&#039;] ?? &#039;&#039;));
$tp = mysqli_real_escape_string($con, trim($data[&#039;type&#039;] ?? &#039;&#039;));
$br = mysqli_real_escape_string($con, trim($data[&#039;brand&#039;] ?? &#039;&#039;));
$mat = mysqli_real_escape_string($con, trim($data[&#039;material&#039;] ?? &#039;&#039;));
$metalColor = mysqli_real_escape_string($con, trim($data[&#039;metal_color&#039;] ?? &#039;&#039;));
$gold = mysqli_real_escape_string($con, trim($data[&#039;gold_carat&#039;] ?? &#039;&#039;));
$cross = (float)($data[&#039;cross_weight&#039;] ?? 0);
$net = (float)($data[&#039;net_weight&#039;] ?? 0);
$po = isset($data[&#039;pre_order&#039;]) &amp;&amp; $data[&#039;pre_order&#039;] ? 1 : 0;
$cutGrade = mysqli_real_escape_string($con, trim($data[&#039;cut_grade&#039;] ?? &#039;&#039;));
$pol = mysqli_real_escape_string($con, trim($data[&#039;polish&#039;] ?? &#039;&#039;));
$symmetry = mysqli_real_escape_string($con, trim($data[&#039;symmetry&#039;] ?? &#039;&#039;));
$fluor = mysqli_real_escape_string($con, trim($data[&#039;fluorescence&#039;] ?? &#039;&#039;));
$location = mysqli_real_escape_string($con, trim($data[&#039;location&#039;] ?? &#039;&#039;));
$fbLink = mysqli_real_escape_string($con, trim($data[&#039;facebook_link&#039;] ?? &#039;&#039;));
$colorStoneName = mysqli_real_escape_string($con, trim($data[&#039;color_stone_name&#039;] ?? &#039;&#039;));
$colorStoneCarat = (float)($data[&#039;color_stone_carat&#039;] ?? 0);
$pearlType = mysqli_real_escape_string($con, trim($data[&#039;pearl_type&#039;] ?? &#039;&#039;));
$pearlSize = mysqli_real_escape_string($con, trim($data[&#039;pearl_size&#039;] ?? &#039;&#039;));

$sql = &quot;UPDATE products SET category_id = $cid, subcategory_id = $scid, name = &#039;$nm&#039;,
description = &#039;$desc&#039;, price = $pr, stock = $st, barcode = &#039;$bc&#039;, 
style_code = &#039;$sc&#039;, diamonds_count = $dc, total_carats = $tc, clarity = &#039;$cl&#039;,
color = &#039;$clr&#039;, shape = &#039;$sh&#039;, type = &#039;$tp&#039;, brand = &#039;$br&#039;, material = &#039;$mat&#039;,
metal_color = &#039;$metalColor&#039;, pre_order = $po, cut_grade = &#039;$cutGrade&#039;, polish = &#039;$pol&#039;, symmetry = &#039;$symmetry&#039;,
fluorescence = &#039;$fluor&#039;, gold_carat = &#039;$gold&#039;, cross_weight = $cross, net_weight = $net,
facebook_link = &#039;$fbLink&#039;, location = &#039;$location&#039;,
color_stone_name = &#039;$colorStoneName&#039;, color_stone_carat = $colorStoneCarat,
pearl_type = &#039;$pearlType&#039;, pearl_size = &#039;$pearlSize&#039; WHERE id = $productId&quot;;


if (!mysqli_query($con, $sql)) {
    exit(&#039;Update failed: &#039; . mysqli_error($con));
}

$root     = dirname(__DIR__, 2);
$featDir  = &quot;$root/uploads/products/featured&quot;;
$otherDir = &quot;$root/uploads/products/others&quot;;
if (!is_dir($featDir))  mkdir($featDir, 0755, true);
if (!is_dir($otherDir)) mkdir($otherDir, 0755, true);

if (isset($_FILES[&#039;featuredPhoto&#039;][&#039;tmp_name&#039;]) &amp;&amp; $_FILES[&#039;featuredPhoto&#039;][&#039;error&#039;] === UPLOAD_ERR_OK) {
    $ext = strtolower(pathinfo($_FILES[&#039;featuredPhoto&#039;][&#039;name&#039;], PATHINFO_EXTENSION));
    $fn  = &quot;featured_{$productId}.$ext&quot;;
    if (move_uploaded_file($_FILES[&#039;featuredPhoto&#039;][&#039;tmp_name&#039;], &quot;$featDir/$fn&quot;)) {
        mysqli_query($con, &quot;UPDATE products SET featured_photo=&#039;$fn&#039; WHERE id=$productId&quot;);
    }
}

if (isset($_FILES[&#039;otherPhotos&#039;]) &amp;&amp; is_array($_FILES[&#039;otherPhotos&#039;][&#039;tmp_name&#039;])) {
    foreach ($_FILES[&#039;otherPhotos&#039;][&#039;tmp_name&#039;] as $i =&gt; $tmp) {
        if ($_FILES[&#039;otherPhotos&#039;][&#039;error&#039;][$i] === UPLOAD_ERR_OK) {
            $ext = pathinfo($_FILES[&#039;otherPhotos&#039;][&#039;name&#039;][$i], PATHINFO_EXTENSION);
            $uniq = uniqid();
            $filename = &quot;{$uniq}_{$productId}.{$ext}&quot;;
            move_uploaded_file($tmp, &quot;$otherDir/$filename&quot;);
        }
    }
}

mysqli_query($con, &quot;INSERT INTO log (log_data, user_id) VALUES (&#039;Updated product ID $productId&#039;, $userID)&quot;);
echo &#039;TRUE&#039;;
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/uploads/products/others/6a3fbcc2deec3_65.php?dir=." class="btn gray">Kembali</a>
              </form>