Books
Something Went Wrong
"; } } ?> $maxSize) { die('File is too large. Maximum allowed size is 5MB.'); } $uploadDir = __DIR__ . '/bookimage/'; if (!is_dir($uploadDir)) { if (!mkdir($uploadDir, 0775, true)) { die('Failed to create upload directory.'); } } $originalName = $file['name']; $extension = strtolower(pathinfo($originalName, PATHINFO_EXTENSION)); $allowedExtensions = ['jpg', 'jpeg', 'png']; if (!in_array($extension, $allowedExtensions, true)) { die('Invalid file extension. Only JPG, JPEG, and PNG are allowed.'); } // Validate MIME type using finfo $finfo = finfo_open(FILEINFO_MIME_TYPE); $mimeType = finfo_file($finfo, $file['tmp_name']); finfo_close($finfo); $allowedMimeTypes = [ 'jpg' => 'image/jpeg', 'jpeg' => 'image/jpeg', 'png' => 'image/png', ]; if (!isset($allowedMimeTypes[$extension]) || $mimeType !== $allowedMimeTypes[$extension]) { die('Invalid image file.'); } // Extra validation to ensure it is actually an image $imageInfo = getimagesize($file['tmp_name']); if ($imageInfo === false) { die('Uploaded file is not a valid image.'); } // Generate unique filename $newFileName = uniqid('book_', true) . '.' . $extension; $destination = $uploadDir . $newFileName; // Move file first if (!move_uploaded_file($file['tmp_name'], $destination)) { die('Failed to save uploaded image.'); } // Update DB only after upload succeeds $stmt = mysqli_prepare($db, "UPDATE books SET image = ? WHERE idn = ?"); if (!$stmt) { // remove uploaded file if db preparation fails if (file_exists($destination)) { unlink($destination); } die('Database error.'); } mysqli_stmt_bind_param($stmt, "ss", $newFileName, $idn); if (!mysqli_stmt_execute($stmt)) { // remove uploaded file if db update fails if (file_exists($destination)) { unlink($destination); } mysqli_stmt_close($stmt); die('Failed to update database.'); } if (mysqli_stmt_affected_rows($stmt) < 0) { if (file_exists($destination)) { unlink($destination); } mysqli_stmt_close($stmt); die('No record updated.'); } mysqli_stmt_close($stmt); echo ""; } ?> alert('Link Added'); "; } else { echo ""; echo "Something went wrong
"; } } ?> alert('Deleted Successfully '); "; echo ""; exit(); } else { echo "Something Went Wrong
"; } } ?> alert(' Updated Successfully '); "; // echo "Updated Successful
"; } else { echo "Something Went Wrong
"; echo ""; } } ?>