<?php require("header.php"); ?>

<?php require("sub_header.php"); 



$a=$_GET['id'];



$query=$conn->query("SELECT * FROM testimonials WHERE id='$a' ");

$title=$query->fetch(PDO::FETCH_ASSOC);



?>



<div class="main">



	<div class="container">



	    <div class="row">



	    	<div class="span12"> <!-- there are 1 to 12 spans we can use for size according to size -->



	   			<div class="widget stacked ">



      				<div class="widget-header" align="center">

      					<a href="testimonials_settings.php" style="float: left;margin-top: 5px;margin-left:5px" class="btn btn-success"><< Back</a>

      					<h3>Add/Alter Persons</h3>

      					

  					</div> <!-- /widget-header -->

				

						<div class="widget-content">

					

							<div class="tabbable">



								<div class="tab-content">



									<div class="tab-pane active" id="profile">

								

										<form name="form" id="form" action="" method="POST" class="form-horizontal" enctype='multipart/form-data'>

		

											<div class="login-fields">



															<?php if($_GET['msg']=='error'){?>

															<h3 style="color: green" style="padding-left: 182px;">Unable to update please try again</h3>

															<?php } ?>



												

												<div class="control-group">

													<label class="control-label col-md-4" for="person_name">Name :</label>

													<div class="controls">

														<input type="text" id="person_name" name="person_name" value="<?php echo $title['name']; ?>" class="span4" />

													</div>

												</div>



												<!-- <div class="control-group">

													<label class="control-label col-md-4" for="designation">Designation :</label>

													<div class="controls">

														<input type="text" id="designation" name="designation" value="<?php echo $title['designation']; ?>" class="span4" />

													</div>

												</div> -->



                          						<div class="control-group">

													<label class="control-label" for="pic">Image :</label> &nbsp;

															<?php if($title['image']){

															$f=$title['image'];?>

                              								<img height='500' width='350' style="background-color: #1b8d43;width: 150px" src="../images/testimonial/<?php echo $f;?>">

															<?php } ?>

														<div class="controls">

															<input type="FILE" id="pic" name="pic"  class="span4" />

														</div>

														<div style="padding-left: 182px;" > <b>Note :</b><p><i>Please uplode ( 250 X 250 ) Pixel images to maintain design</i> </p></div>

												</div>



												<div class="control-group">

													<label class="control-label" for="editor">Description :</label>

													<div class="controls">

														<textarea rows='5'  cols='30' maxlength="300" class="span4" name="editor"><?php echo $title['description']; ?></textarea>

													</div>

												</div>

												

												<div class=class="controls" style="padding-left: 182px; ">

													<button class="btn btn-primary" name='update'>Update</button>			

												</div>



											</div> <!-- /login-fields -->



										</form>	



									</div><!-- /tab-pane active -->	



								</div><!-- /tab-content -->	



							</div><!-- /tabbable -->



						</div> <!-- /widget-content -->



				</div> <!-- /widget -->



    		</div> <!-- /span8 -->



    	</div> <!-- /row -->



    </div> <!-- /container -->



</div> <!-- /main -->







<?php



extract($_POST);



if(isset($_GET['id'])){

	$a=$_GET['id'];

	$query=$conn->query("SELECT * FROM testimonials where id='$a'");

	$res=$query->fetch(PDO::FETCH_ASSOC);



		if (isset($_POST['update'])){





			if(isset($_FILES['pic']) && $_FILES['pic']['size']>0){

					$tmp = $_FILES['pic']['tmp_name'];

						if(is_uploaded_file($tmp)){

							$oname=$_FILES['pic']['name'];

							$name=getRand().'-'.$oname; //use this if you want to randamise the name write a function to it.

							$desc="../images/testimonial/".$name;

		

							move_uploaded_file($tmp,$desc);

							}

			}else{

				$name= $res['image'];

				}





$sql1 = $conn->prepare("UPDATE testimonials SET name=:person_name, image=:name, description=:editor WHERE id='$a' ");

$sql1->bindValue(':person_name',$person_name, PDO::PARAM_STR);

$sql1->bindValue(':name',$name, PDO::PARAM_STR);

// $sql1->bindValue(':designation',$designation, PDO::PARAM_STR);

$sql1->bindValue(':editor',$editor, PDO::PARAM_STR);



					if($sql1->execute()){

						echo "<script>document.location.href='testimonials_settings.php?msg=update'</script>";

					}

						echo "<script>document.location.href='?msg=error'</script>";	

		}



}elseif (isset($_POST['update'])){



			if(isset($_FILES['pic']) && $_FILES['pic']['size']>0){

					$tmp = $_FILES['pic']['tmp_name'];



					if(is_uploaded_file($tmp)){

						$oname=$_FILES['pic']['name'];

						$name=getRand().'-'.$oname; //use this if you want to randamise the name write a function to it.

						$desc="../images/testimonial/".$name;

						move_uploaded_file($tmp,$desc);

					}



			}else{



				echo "File is Empty";

				

				}



$sql1 = $conn->prepare("INSERT INTO  testimonials (name, image, description) VALUES (:person_name, :name, :editor) ");

$sql1->bindValue(':person_name',$person_name, PDO::PARAM_STR);

$sql1->bindValue(':name',$name, PDO::PARAM_STR);

// $sql1->bindValue(':designation',$designation, PDO::PARAM_STR);

$sql1->bindValue(':editor',$editor, PDO::PARAM_STR);



					if($sql1->execute()){

							echo "<script>document.location.href='testimonials_settings.php?msg=update'</script>";

							}

							echo "<script>document.location.href='?msg=error'</script>";	

}



function getRand(){

	$str=str_shuffle("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890$%@^");

		return sha1(str_shuffle(crypt($str)));

	}

?>



<?php include_once("foter.php"); ?>