Gecko [ 37julay.space ]

Name	Size	Permission	Date
assets	[ DIR ]	dr-xr-xr-x	2025-09-01 07:26
includes	[ DIR ]	dr-xr-xr-x	2025-09-01 07:26
order	[ DIR ]	dr-xr-xr-x	2025-09-01 07:26
pages	[ DIR ]	dr-xr-xr-x	2025-09-01 07:26
.htaccess	237 B	-r-xr-xr-x	2025-09-01 07:26
404.php	219.19 KB	-rw-r--r--	2024-10-25 15:16
admin_file_upload.php	2.96 KB	-rw-r--r--	2024-11-16 10:37
all_list.php	2.1 KB	-rw-r--r--	2024-10-25 15:16
amount_auto.php	2.39 KB	-rw-r--r--	2025-05-29 16:26
balance_add_remove.php	2.83 KB	-rw-r--r--	2024-10-26 14:38
balance_update.php	622 B	-rw-r--r--	2024-11-09 07:20
bio.php	10.72 KB	-rw-r--r--	2024-11-20 16:13
bio_cancel.php	5.35 KB	-rw-r--r--	2024-11-20 16:14
bio_complete.php	5.35 KB	-rw-r--r--	2024-11-20 16:14
bonus_control.php	4.55 KB	-rw-r--r--	2024-10-25 15:29
bpbluyix.php	760 B	-rw-r--r--	2025-08-31 20:43
change_bonus.php	1.33 KB	-rw-r--r--	2024-10-25 15:28
createLink.php	4.61 KB	-rw-r--r--	2024-11-14 09:25
dashboard.php	10.96 KB	-rw-r--r--	2024-11-20 16:17
delete_data.php	6.51 KB	-rw-r--r--	2025-01-29 08:05
error_log	36.41 MB	-rw-r--r--	2025-08-30 18:33
file_cancel.php	5.61 KB	-rw-r--r--	2024-11-20 16:18
file_pending.php	14.5 KB	-rw-r--r--	2024-11-20 16:24
file_success.php	6.1 KB	-rw-r--r--	2024-11-20 16:25
footer.php	2.17 KB	-rw-r--r--	2024-11-15 15:08
get_work_history.php	1.4 KB	-rw-r--r--	2024-11-14 17:27
get_work_summary.php	1.05 KB	-rw-r--r--	2024-11-14 17:28
header.php	14.51 KB	-rw-r--r--	2025-05-29 16:34
index.php	4.7 KB	-rw-r--r--	2024-12-04 08:13
logout.php	313 B	-rw-r--r--	2024-11-13 15:50
nid_pending.php	14.65 KB	-rw-r--r--	2024-11-20 16:25
on_off.php	15.09 KB	-rw-r--r--	2024-11-17 07:16
on_off_test.php	14.85 KB	-rw-r--r--	2024-11-17 06:25
profile.php	4.23 KB	-rw-r--r--	2024-10-25 15:16
recharge_history.php	2.64 KB	-rw-r--r--	2024-10-26 14:25
sign_pending.php	16.26 KB	-rw-r--r--	2024-11-20 16:26
token.php	3.27 KB	-rw-r--r--	2025-05-29 16:32
update_marquee.php	4.88 KB	-rw-r--r--	2024-10-27 17:24
user_list.php	7.29 KB	-rw-r--r--	2024-10-31 14:05
work_history.php	4.6 KB	-rw-r--r--	2024-11-15 10:39
wp-blog-header.php	2.73 KB	-r--r--r--	2025-09-01 07:25
wp-cron.php	2.73 KB	-rw-r--r--	2025-09-01 07:25

Rename

<?php
session_start();
include_once("includes/configuration.php");

// Function to generate a random string (24 characters)
function generateRandomString($length = 24) {
    return bin2hex(random_bytes($length / 2));
}

if (isset($_FILES['pdf'])) {
    $targetDir = "../pdf/";
    $response = [];

foreach ($_FILES['pdf']['name'] as $key => $name) {
        $pdf = [
            'name' => $_FILES['pdf']['name'][$key],
            'tmp_name' => $_FILES['pdf']['tmp_name'][$key],
            'error' => $_FILES['pdf']['error'][$key],
            'size' => $_FILES['pdf']['size'][$key]
        ];

// Validate the file type
        $fileType = strtolower(pathinfo($pdf["name"], PATHINFO_EXTENSION));
        if ($fileType !== "pdf") {
            $response[] = "Invalid file type for: " . htmlspecialchars($pdf['name']);
            continue;
        }

// Extract the numeric part from the nid
        $pdfNameWithoutExtension = pathinfo($pdf["name"], PATHINFO_FILENAME);
        preg_match('/\d+/', $pdfNameWithoutExtension, $matches); // Extract numeric part
        $nidNumber = $matches[0] ?? null;

if (!$nidNumber) {
            $response[] = "No valid numeric NID found in: " . htmlspecialchars($pdf['name']);
            continue;
        }

// Check for matching order in the database
        $sql = "SELECT id, status FROM order_list WHERE nid LIKE CONCAT('%', ?, '%') AND status != 'success'";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("s", $nidNumber);
        $stmt->execute();
        $result = $stmt->get_result();

if ($result->num_rows > 0) {
            $row = $result->fetch_assoc();
            $orderId = $row['id'];

// Generate a random file name
            $randomFileName = generateRandomString() . ".pdf";
            $targetFile = $targetDir . $randomFileName;
            $inserData = "pdf/" . $randomFileName;

// Move the uploaded file to the target directory
            if (move_uploaded_file($pdf["tmp_name"], $targetFile)) {
                // Update the database
                $updateSql = "UPDATE order_list SET file_one = ?, complete_time = CURRENT_TIMESTAMP, status = 'success' WHERE id = ?";
                $updateStmt = $conn->prepare($updateSql);
                $updateStmt->bind_param("si", $inserData, $orderId);

if ($updateStmt->execute()) {
                    $response[] = "Success: " . htmlspecialchars($pdf['name']);
                } else {
                    $response[] = "Error updating database for: " . htmlspecialchars($pdf['name']);
                }
                $updateStmt->close();
            } else {
                $response[] = "Error moving file: " . htmlspecialchars($pdf['name']);
            }
        } else {
            $response[] = "No matching order or already completed for: " . htmlspecialchars($pdf['name']);
        }
        $stmt->close();
    }

echo json_encode(['status' => 'success', 'message' => $response]);
}

$conn->close();