X-Control Workbench

NODE_NAME	OPS_INTERFACE
[FILE] admin_logoutcode.php	[DEL] [EDIT]
[FILE] admin_logoutcode1.php	[DEL] [EDIT]
[FILE] adminlogincode.php	[DEL] [EDIT]
[FILE] admitcardcode.php	[DEL] [EDIT]
[FILE] delete.php	[DEL] [EDIT]
[FILE] error_log	[DEL] [EDIT]
[FILE] four.php	[DEL] [EDIT]
[FILE] fourprint.php	[DEL] [EDIT]
[FILE] fourthadmit.php	[DEL] [EDIT]
[FILE] gallerycode.php	[DEL] [EDIT]
[FILE] hisab_code.php	[DEL] [EDIT]
[FILE] id_code.php	[DEL] [EDIT]
[DIR] img	[DEL]
[FILE] news_code.php	[DEL] [EDIT]
[FILE] primaryadmitcard.php	[DEL] [EDIT]
[FILE] registrationcode.php	[DEL] [EDIT]
[FILE] resultcode.php	[DEL] [EDIT]
[FILE] resultcode1.php	[DEL] [EDIT]
[FILE] scholarcode.php	[DEL] [EDIT]
[FILE] sliderchangecode.php	[DEL] [EDIT]
[FILE] student_detailscode.php	[DEL] [EDIT]
[FILE] student_fees.php	[DEL] [EDIT]
[FILE] teachercode.php	[DEL] [EDIT]
[FILE] user_code.php	[DEL] [EDIT]
[FILE] w_code.php	[DEL] [EDIT]

BUF_TARGET: gallerycode.php

<?php 
include("../link/databaseconnection.php");

$flag=$_REQUEST['flag'];
switch($flag)
{
	case 1:
	$photo=$_FILES['photo']['name'];
	$title=$_POST['title'];
	$tempname=$_FILES['photo']['tmp_name'];
	$location="img/";
	$ins="insert into gallery(image,title) values('$photo','$title')";
	if(mysqli_query($conn,$ins))
	{
		move_uploaded_file($tempname,$location.$photo);
		echo"Successfully Add";
	}
	else
	{
		echo"not add";
	}
	break;

case 2:
	$sel="select * from gallery";
	$res=mysqli_query($conn,$sel);
	
	?>
	
	<table class="table table-stript">
	
	<tr>
	<th>Sr. no.</th><th>Image</th><th>Delete</th>
	</tr>
	<?php 
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{

?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><img src="../code/img/<?php echo $row['1'];?>" height="100px" width="100px"></td> <td><a href="javascript:;" onclick="deleterow(<?php echo$row['0'];?>)"><span class="glyphicon glyphicon-trash"></span></td>
	</tr>
	<?php
	}
	?>
	</table>
	
	<?php
	break;

case 3:
	$id=$_POST['rowid'];
	$del="delete from gallery where id='$id'";
	$sel="select * from gallery where id='$id'";
	$res=mysqli_query($conn,$sel);
	$row=mysqli_fetch_array($res,MYSQLI_BOTH);
	$image=$row['1'];
	$location="../code/img/".$image;
	if(mysqli_query($conn,$del))
	{
		unlink($location);
		echo"ok";
	}
	else
	{
		echo"not delete";
	}
	break;
	
		case 1005:
	$photo=$_FILES['photo']['name'];
	$title=$_POST['title'];
		$deg=$_POST['deg'];
	$tempname=$_FILES['photo']['tmp_name'];
	$location="img/";
	$ins="insert into manager(image,title,deg) values('$photo','$title','$deg')";
	if(mysqli_query($conn,$ins))
	{
		move_uploaded_file($tempname,$location.$photo);
		echo"Successfully Add";
	}
	else
	{
		echo"not add";
	}
	break;

case 2005:
	$sel="select * from manager";
	$res=mysqli_query($conn,$sel);
	
	?>
	
	<table class="table table-stript">
	
	<tr>
	<th>Sr. no.</th><th>Post</th><th>Deg</th><th>Image</th><th>Delete</th>
	</tr>
	<?php 
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{

?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><?php echo $row['title'];?></td><td><?php echo $row['deg'];?></td><td><img src="../code/img/<?php echo $row['1'];?>" height="100px" width="100px"></td> <td><a href="javascript:;" onclick="deleterow(<?php echo$row['0'];?>)"><span class="glyphicon glyphicon-trash"></span></td>
	</tr>
	<?php
	}
	?>
	</table>
	
	<?php
	break;

case 3005:
	$id=$_POST['rowid'];
	$del="delete from manager where id='$id'";
	$sel="select * from manager where id='$id'";
	$res=mysqli_query($conn,$sel);
	$row=mysqli_fetch_array($res,MYSQLI_BOTH);
	$image=$row['1'];
	$location="../code/img/".$image;
	if(mysqli_query($conn,$del))
	{
		unlink($location);
		echo"ok";
	}
	else
	{
		echo"not delete";
	}
	break;
	
	
	
		case 10054:
	$photo=$_FILES['photo']['name'];
	$size=$_POST['size'];
		$class=$_POST['class'];
			$about=$_POST['about'];
	$tempname=$_FILES['photo']['tmp_name'];
	$location="img/";
	$ins="insert into class_images(image,size,class,about) values('$photo','$size','$class','$about')";
	if(mysqli_query($conn,$ins))
	{
		move_uploaded_file($tempname,$location.$photo);
		echo"Successfully Add";
	}
	else
	{
		echo"not add";
	}
	break;

case 20054:
	$sel="select * from class_images";
	$res=mysqli_query($conn,$sel);
	
	?>
	
	<table class="table table-stript">
	
	<tr>
	<th>Sr. no.</th><th>Class</th><th>Size</th><th>About</th><th>Image</th><th>Delete</th>
	</tr>
	<?php 
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{

?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><?php echo $row['class'];?></td><td><?php echo $row['size'];?></td><td><?php echo $row['about'];?></td><td><img src="../code/img/<?php echo $row['image'];?>" height="100px" width="100px"></td> <td><a href="javascript:;" onclick="deleterow(<?php echo$row['0'];?>)"><span class="glyphicon glyphicon-trash"></span></td>
	</tr>
	<?php
	}
	?>
	</table>
	
	<?php
	break;

case 30054:
	$id=$_POST['rowid'];
	$del="delete from class_images where id='$id'";
	$sel="select * from class_images where id='$id'";
	$res=mysqli_query($conn,$sel);
	$row=mysqli_fetch_array($res,MYSQLI_BOTH);
	$image=$row['1'];
	$location="../code/img/".$image;
	if(mysqli_query($conn,$del))
	{
		unlink($location);
		echo"ok";
	}
	else
	{
		echo"not delete";
	}
	break;
	
	
		case 10051:
	$photo=$_FILES['photo']['name'];
	$about=$_POST['about'];
		$name=$_POST['name'];
	$tempname=$_FILES['photo']['tmp_name'];
	$location="img/";
	$ins="insert into testimonials(image,name,about) values('$photo','$name','$about')";
	if(mysqli_query($conn,$ins))
	{
		move_uploaded_file($tempname,$location.$photo);
		echo"Successfully Add";
	}
	else
	{
		echo"not add";
	}
	break;

case 20051:
	$sel="select * from testimonials";
	$res=mysqli_query($conn,$sel);
	
	?>
	
	<table class="table table-stript">
	
	<tr>
	<th>Sr. no.</th><th>Name</th><th>About</th><th>Image</th><th>Delete</th>
	</tr>
	<?php 
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{

?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><?php echo $row['name'];?></td><td><?php echo $row['about'];?></td><td><img src="../code/img/<?php echo $row['1'];?>" height="100px" width="100px"></td> <td><a href="javascript:;" onclick="deleterow(<?php echo$row['0'];?>)"><span class="glyphicon glyphicon-trash"></span></td>
	</tr>
	<?php
	}
	?>
	</table>
	
	<?php
	break;

case 30051:
	$id=$_POST['rowid'];
	$del="delete from testimonials where id='$id'";
	$sel="select * from testimonials where id='$id'";
	$res=mysqli_query($conn,$sel);
	$row=mysqli_fetch_array($res,MYSQLI_BOTH);
	$image=$row['1'];
	$location="../code/img/".$image;
	if(mysqli_query($conn,$del))
	{
		unlink($location);
		echo"ok";
	}
	else
	{
		echo"not delete";
	}
	break;
	
	
	case 4:
	$sch=$_POST['sch'];
	//echo $sch;
	$class=$_POST['class'];
	//echo $class;
	$fees=$_POST['fees'];
	//echo $fees;
	$reason=$_POST['reason'];
	$session=$_POST['session'];
	//echo $reason;
	
	$ins="insert into fix(sch,class,fees,reason,session) values('$sch','$class','$fees','$reason','$session')";
	if(mysqli_query($conn,$ins))
	{
		
		echo"Submit";
	}
	else
	{
		echo"not add";
	}
	break;
case 5:
	$session=$_POST['session'];
	//echo $session;
	$sel="select * from fix where session='$session'";
	$res=mysqli_query($conn,$sel);
	
	?>
	<script>
$(document).ready(function(){
    $('#example').DataTable({
        dom: 'Bfrtip',
        buttons: ['pdf','print','excel']
    });
	
});
</script>
<div class="table-responsive">
<table id="example" class="display nowrap" cellspacing="0" width="100%" border="1px">
     <thead>
            <tr>
	<th>Sr. no.</th><th>Session</th><th>Sch</th><th>Class</th><th>Fees Fixed</th><th>Reason</th><th>Action</th>
	</tr>
        </thead>
<tfoot>
           <tr>
	<th>Sr. no.</th><th>Session</th><th>Sch</th><th>Class</th><th>Fees Fixed</th><th>Reason</th><th>Action</th>
	</tr>
        </tfoot>   
<tbody>	
	
	
	<?php 
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{

?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><?php echo $row['session'];?></td><td><?php echo $row['sch'];?></td><td><?php echo $row['class'];?></td><td><?php echo $row['fees'];?></td><td><?php echo $row['reason'];?></td> <td><a href="javascript:;" onclick="deleterow(<?php echo$row['0'];?>)"><span class="glyphicon glyphicon-trash"></span></td>
	</tr>
	<?php
	}
	?>
	</tbody>
    </table>
	
	</div>
	
	<?php
	break;
	case 6:
	$id=$_POST['rowid'];
	$del="delete from fix where id='$id'";
	$sel="select * from gallery where id='$id'";
	$res=mysqli_query($conn,$sel);
	$row=mysqli_fetch_array($res,MYSQLI_BOTH);
	
	if(mysqli_query($conn,$del))
	{
		
		echo"ok";
	}
	else
	{
		echo"not delete";
	}
	break;
	//// for class teacher
case 7:

$name = mysqli_real_escape_string($conn, trim($_POST['name'] ?? ''));
    $class = mysqli_real_escape_string($conn, trim($_POST['class'] ?? ''));
    $mobile = mysqli_real_escape_string($conn, trim($_POST['mobile'] ?? ''));
    $password = mysqli_real_escape_string($conn, trim($_POST['password'] ?? ''));
    $section = mysqli_real_escape_string($conn, trim($_POST['section'] ?? ''));
    $area = mysqli_real_escape_string($conn, trim($_POST['area'] ?? ''));
    $entry_in_time = mysqli_real_escape_string($conn, trim($_POST['entry_in_time'] ?? ''));
    $entry_out_time = mysqli_real_escape_string($conn, trim($_POST['entry_out_time'] ?? ''));

if(
        $name === '' ||
        $class === '' ||
        $mobile === '' ||
        $password === '' ||
        $section === '' ||
        $area === '' ||
        $entry_in_time === '' ||
        $entry_out_time === ''
    ){
        echo "Please fill all required fields.";
        break;
    }

if(!preg_match('/^[0-9]{10}$/', $mobile)){
        echo "Please enter valid 10 digit mobile number.";
        break;
    }

$entry_times = [
        '07:00 AM','07:30 AM','08:00 AM','08:30 AM',
        '09:00 AM','09:30 AM','10:00 AM'
    ];

$out_times = [
        '11:00 AM','11:30 AM','12:00 PM','12:30 PM',
        '01:00 PM','01:30 PM','02:00 PM'
    ];

if(!in_array($entry_in_time, $entry_times, true)){
        echo "Entry time must be between 07:00 AM and 10:00 AM.";
        break;
    }

if(!in_array($entry_out_time, $out_times, true)){
        echo "Out time must be between 11:00 AM and 02:00 PM.";
        break;
    }

$newimgname = '';

if(
        isset($_FILES['picture']) &&
        $_FILES['picture']['error'] !== UPLOAD_ERR_NO_FILE
    ){
        if($_FILES['picture']['error'] !== UPLOAD_ERR_OK){
            echo "Picture upload failed.";
            break;
        }

$allowed_extensions = ['jpg','jpeg','png','webp'];

$extension = strtolower(
            pathinfo($_FILES['picture']['name'], PATHINFO_EXTENSION)
        );

if(!in_array($extension, $allowed_extensions, true)){
            echo "Only JPG, JPEG, PNG and WEBP pictures are allowed.";
            break;
        }

if($_FILES['picture']['size'] > 3 * 1024 * 1024){
            echo "Picture size must be less than 3 MB.";
            break;
        }

$safe_name = preg_replace('/[^A-Za-z0-9_-]/', '_', $name);
        $newimgname = time() . "_" . $safe_name . "." . $extension;
    }

$ins = "
        INSERT INTO classteacher
        (
            name,
            class1,
            mobile,
            password,
            section,
            area,
            entry_in_time,
            entry_out_time,
            picture
        )
        VALUES
        (
            '$name',
            '$class',
            '$mobile',
            '$password',
            '$section',
            '$area',
            '$entry_in_time',
            '$entry_out_time',
            '$newimgname'
        )
    ";

if(mysqli_query($conn, $ins)){

if($newimgname !== ''){
            move_uploaded_file(
                $_FILES['picture']['tmp_name'],
                "img/" . $newimgname
            );
        }

echo "Successfully Added";

}else{
        echo "Not Added: " . mysqli_error($conn);
    }

break;

//// for class teacher close
	//// for class teacher Delete
	case 10:
	$id=$_POST['rowid'];
	$del="delete from classteacher where id='$id'";
	
	if(mysqli_query($conn,$del))
	{
		
		echo"Delete";
	}
	else
	{
		echo"not delete";
	}
	break;
	//for show class teacher Delete CLOSE
	//for show class teacher
case 8:

$sel = "SELECT * FROM classteacher ORDER BY id DESC";
    $res = mysqli_query($conn, $sel);
?>

if($.fn.DataTable.isDataTable("#example")){
        $("#example").DataTable().destroy();
    }

$("#example").DataTable({
        dom:"Bfrtip",

buttons:[
            {
                extend:"excelHtml5",
                title:"Class Teacher List"
            },
            {
                extend:"pdfHtml5",
                title:"Class Teacher List",
                orientation:"landscape",
                pageSize:"A4",
                exportOptions:{
                    columns:[0,2,3,4,5,6,7]
                }
            },
            {
                extend:"print",
                title:"Class Teacher List",
                exportOptions:{
                    columns:[0,2,3,4,5,6,7]
                }
            }
        ],

pageLength:25,
        order:[[0,"asc"]],
        scrollX:true
    });
});
</script>

<thead>
<tr>
    <th>Sr.</th>
    <th>Picture</th>
    <th>Area</th>
    <th>Teacher Name</th>
    <th>Class / Section</th>
    <th>Mobile</th>
    <th>Entry Time</th>
    <th>Out Time</th>
    <th>Password</th>
    <th>Action</th>
</tr>
</thead>

<tbody>
<?php
$s = 1;

if($res && mysqli_num_rows($res) > 0){

while($row = mysqli_fetch_assoc($res)){

$picture = trim($row['picture'] ?? '');
        $image_path = "../code/img/" . $picture;
?>
<tr class="text-center">

<td>
        <?php if($picture !== ''){ ?>
            <img src="<?php echo htmlspecialchars($image_path); ?>"
                 class="teacher-picture"
                 alt="Teacher">
        <?php }else{ ?>
            <span class="glyphicon glyphicon-user"
                  style="font-size:35px;color:#777;"></span>
        <?php } ?>
    </td>

</tr>
<?php
    }

}else{
?>
<tr>
    <td colspan="10" class="text-center">No record found</td>
</tr>
<?php } ?>
</tbody>
</table>

</div>
</div>

<?php
break;
	//for show class teacher
	
	///for update class teacher
case 9:

header('Content-Type: text/html; charset=UTF-8');

$id = filter_input(INPUT_GET, 'id', FILTER_VALIDATE_INT);

if(!$id || $id <= 0){
        echo '<div class="alert alert-danger">Invalid teacher ID.</div>';
        break;
    }

$stmt = mysqli_prepare(
        $conn,
        "SELECT * FROM classteacher WHERE id = ? LIMIT 1"
    );

if(!$stmt){
        echo '<div class="alert alert-danger">';
        echo 'Teacher query prepare error: ' .
             htmlspecialchars(mysqli_error($conn), ENT_QUOTES, 'UTF-8');
        echo '</div>';
        break;
    }

mysqli_stmt_bind_param($stmt, "i", $id);
    mysqli_stmt_execute($stmt);

$res = mysqli_stmt_get_result($stmt);

if(!$res){
        echo '<div class="alert alert-danger">';
        echo 'Teacher query error: ' .
             htmlspecialchars(mysqli_error($conn), ENT_QUOTES, 'UTF-8');
        echo '</div>';
        mysqli_stmt_close($stmt);
        break;
    }

$row = mysqli_fetch_assoc($res);
    mysqli_stmt_close($stmt);

if(!$row){
        echo '<div class="alert alert-danger">Record not found.</div>';
        break;
    }

$class_res = mysqli_query(
        $conn,
        "SELECT subclass FROM subclass"
    );

if(!$class_res){
        echo '<div class="alert alert-danger">';
        echo 'Class list error: ' .
             htmlspecialchars(mysqli_error($conn), ENT_QUOTES, 'UTF-8');
        echo '</div>';
        break;
    }

$section_res = mysqli_query(
        $conn,
        "SELECT section FROM section ORDER BY id ASC"
    );

if(!$section_res){
        echo '<div class="alert alert-danger">';
        echo 'Section list error: ' .
             htmlspecialchars(mysqli_error($conn), ENT_QUOTES, 'UTF-8');
        echo '</div>';
        break;
    }

$saved_entry_time = trim($row['entry_in_time'] ?? '');
    $saved_out_time   = trim($row['entry_out_time'] ?? '');

$h = static function($value){
        return htmlspecialchars((string)$value, ENT_QUOTES, 'UTF-8');
    };
?>

<div class="form-group">
    <label class="col-sm-4 control-label">Picture</label>
    <div class="col-sm-6">

<?php if(trim($row['picture'] ?? '') !== ''){ ?>
            <div style="margin-bottom:10px;">
                <img
                    src="../code/img/<?php echo $h($row['picture']); ?>"
                    style="width:80px;height:80px;object-fit:cover;border-radius:50%;border:2px solid #1565c0;"
                    alt="Teacher Picture"
                    onerror="this.style.display='none';"
                >
            </div>
        <?php } ?>

<small class="text-muted">
            नई picture चुनना जरूरी नहीं है।
        </small>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Name</label>
    <div class="col-sm-6">
        <input type="text"
               class="form-control"
               name="name"
               value="<?php echo $h($row['name'] ?? ''); ?>"
               required>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Class</label>
    <div class="col-sm-6">
        <select class="form-control" name="class" required>
            <option value="">--Select Class--</option>

<?php while($class_row = mysqli_fetch_assoc($class_res)){
                $class_value = trim($class_row['subclass'] ?? '');
                if($class_value === ''){
                    continue;
                }
                $selected = (
                    trim($row['class1'] ?? '') === $class_value
                ) ? 'selected' : '';
            ?>
                <option value="<?php echo $h($class_value); ?>"
                        <?php echo $selected; ?>>
                    <?php echo $h($class_value); ?>
                </option>
            <?php } ?>
        </select>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Section</label>
    <div class="col-sm-6">
        <select class="form-control" name="section" required>
            <option value="">--Select Section--</option>

<?php while($section_row = mysqli_fetch_assoc($section_res)){
                $section_value = trim($section_row['section'] ?? '');
                if($section_value === ''){
                    continue;
                }
                $selected = (
                    trim($row['section'] ?? '') === $section_value
                ) ? 'selected' : '';
            ?>
                <option value="<?php echo $h($section_value); ?>"
                        <?php echo $selected; ?>>
                    <?php echo $h($section_value); ?>
                </option>
            <?php } ?>
        </select>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Area</label>
    <div class="col-sm-6">
        <select class="form-control" name="area" required>
            <option value="">--Select Area--</option>
            <?php
            $areas = [
                'Teacher',
                'Principal',
                'Examiner',
                'Accountant',
                'Driver',
                'Peon',
                'Other'
            ];

foreach($areas as $area_value){
                $selected = (
                    trim($row['area'] ?? '') === $area_value
                ) ? 'selected' : '';
            ?>
                <option value="<?php echo $h($area_value); ?>"
                        <?php echo $selected; ?>>
                    <?php echo $h($area_value); ?>
                </option>
            <?php } ?>
        </select>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Entry Time</label>
    <div class="col-sm-6">
        <select class="form-control" name="entry_in_time" required>
            <option value="">--Select Entry Time--</option>
            <?php
            $entry_times = [
                '07:00 AM','07:30 AM','08:00 AM','08:30 AM',
                '09:00 AM','09:30 AM','10:00 AM','11:00 AM','12:00 PM'
            ];

foreach($entry_times as $time){
                $selected = ($saved_entry_time === $time) ? 'selected' : '';
            ?>
                <option value="<?php echo $h($time); ?>"
                        <?php echo $selected; ?>>
                    <?php echo $h($time); ?>
                </option>
            <?php } ?>
        </select>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Out Time</label>
    <div class="col-sm-6">
        <select class="form-control" name="entry_out_time" required>
            <option value="">--Select Out Time--</option>
            <?php
            $out_times = [
                '11:00 AM','11:30 AM','12:00 PM','12:30 PM',
                '01:00 PM','01:30 PM','02:00 PM'
            ];

foreach($out_times as $time){
                $selected = ($saved_out_time === $time) ? 'selected' : '';
            ?>
                <option value="<?php echo $h($time); ?>"
                        <?php echo $selected; ?>>
                    <?php echo $h($time); ?>
                </option>
            <?php } ?>
        </select>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Mobile</label>
    <div class="col-sm-6">
        <input type="tel"
               class="form-control"
               name="mobile"
               maxlength="10"
               inputmode="numeric"
               pattern="[0-9]{10}"
               value="<?php echo $h($row['mobile'] ?? ''); ?>"
               required>
    </div>
</div>

<div class="form-group">
    <label class="col-sm-4 control-label">Password</label>
    <div class="col-sm-6">
        <input type="text"
               class="form-control"
               name="password"
               value="<?php echo $h($row['password'] ?? ''); ?>"
               required>
    </div>
</div>

<div class="form-group">
    <div class="col-sm-12 text-center">
        <button type="submit"
                class="btn btn-primary"
                style="min-width:150px;border-radius:22px;padding:10px 22px;">
            <span class="glyphicon glyphicon-floppy-disk"></span>
            Update
        </button>

<button type="button"
                class="btn btn-default"
                data-dismiss="modal"
                style="min-width:110px;border-radius:22px;padding:10px 22px;">
            Close
        </button>
    </div>
</div>

</form>

<?php
break;
	//////updatation of classteacher
case 11:

$id = (int)($_POST['id'] ?? 0);

if($id <= 0){
        echo "Invalid record ID.";
        break;
    }

if(!preg_match('/^[0-9]{10}$/', $mobile)){
        echo "Please enter valid 10 digit mobile number.";
        break;
    }

$entry_times = [
        '07:00 AM','07:30 AM','08:00 AM','08:30 AM',
        '09:00 AM','09:30 AM','10:00 AM'
    ];

$out_times = [
        '11:00 AM','11:30 AM','12:00 PM','12:30 PM',
        '01:00 PM','01:30 PM','02:00 PM'
    ];

if(!in_array($entry_in_time, $entry_times, true)){
        echo "Entry time must be between 07:00 AM and 10:00 AM.";
        break;
    }

if(!in_array($entry_out_time, $out_times, true)){
        echo "Out time must be between 11:00 AM and 02:00 PM.";
        break;
    }

$old_query = mysqli_query(
        $conn,
        "SELECT picture FROM classteacher WHERE id='$id' LIMIT 1"
    );

$old_row = mysqli_fetch_assoc($old_query);

if(!$old_row){
        echo "Record not found.";
        break;
    }

$newimgname = '';

$allowed_extensions = ['jpg','jpeg','png','webp'];

$extension = strtolower(
            pathinfo($_FILES['picture']['name'], PATHINFO_EXTENSION)
        );

if(!in_array($extension, $allowed_extensions, true)){
            echo "Only JPG, JPEG, PNG and WEBP pictures are allowed.";
            break;
        }

if($_FILES['picture']['size'] > 3 * 1024 * 1024){
            echo "Picture size must be less than 3 MB.";
            break;
        }

$safe_name = preg_replace('/[^A-Za-z0-9_-]/', '_', $name);
        $newimgname = time() . "_" . $safe_name . "." . $extension;
    }

if($newimgname === ''){

$update = "
            UPDATE classteacher
            SET
                name='$name',
                class1='$class',
                mobile='$mobile',
                password='$password',
                section='$section',
                area='$area',
                entry_in_time='$entry_in_time',
                entry_out_time='$entry_out_time'
            WHERE id='$id'
        ";

}else{

if(mysqli_query($conn, $update)){

if($newimgname !== ''){

move_uploaded_file(
                $_FILES['picture']['tmp_name'],
                "img/" . $newimgname
            );

$old_picture = trim($old_row['picture'] ?? '');

if(
                $old_picture !== '' &&
                file_exists("img/" . $old_picture)
            ){
                unlink("img/" . $old_picture);
            }
        }

echo "Successfully Updated";

}else{
        echo "Not Updated: " . mysqli_error($conn);
    }

break;
	//////updatation of classteacher
	case 61:
	$id=$_POST['rowid'];
	
	$sel="select * from registration where application='$id' order by id desc";
	$res=mysqli_query($conn,$sel);
	$row=mysqli_fetch_array($res,MYSQLI_BOTH);
	
	$name=$row['name'];
	$class=$row['subject'];
	echo $name;
	//echo $class;
	break;
	case 62:
	$id=$_POST['rowid'];
	
	$sel="select * from registration where application='$id' order by id desc";
	$res=mysqli_query($conn,$sel);
	$row=mysqli_fetch_array($res,MYSQLI_BOTH);
	
	//$name=$row['name'];
	$class=$row['subject'];
	//echo $name;
	echo $class;
	break;
	//// for class teacher
case 63:
	$session=$_POST['session'];
	$fix=$_POST['fix'];
	$sch=$_POST['sch'];
	$name=$_POST['name'];
	$class=$_POST['class'];
	$fee=$_POST['fee'];
	$conv=$_POST['conv'];
	$reason=$_POST['reason'];
	date_default_timezone_set("asia/kolkata");
	$date=date("Y-m-d");
	//echo $date;
	$ins="insert into free(name,class,sch,fee,conv,reason,session,fix,date) values('$name','$class','$sch','$fee','$conv','$reason','$session','$fix','$date')";
	if(mysqli_query($conn,$ins))
	{
		
		echo"Successfully Add";
	}
	else
	{
		echo"not add";
	}
	break;
case 64:
	//$session=$_POST['session'];
	//echo $session;
	
	$sel1t3="select * from session order by id desc ";
	$res1t3=mysqli_query($conn,$sel1t3);
	$row1h3=mysqli_fetch_array($res1t3,MYSQLI_BOTH);
	$session=$row1h3['session'];
	
	$sel="select * from free where session='$session' ";
	$res=mysqli_query($conn,$sel);
	
	$selh="select * from free where session='$session' ";
	$res1h=mysqli_query($conn,$selh);
	//$class1=$row['class'];
	$s1h=0;
	while($row1h=mysqli_fetch_array($res1h,MYSQLI_BOTH))
	{
		$fix1h=$row1h['fix'];
		
	$s1h=$s1h+$fix1h;
	
	}
	
	
	
$sel1="select * from free where fee='YES' and session='$session'";
	$res1=mysqli_query($conn,$sel1);
	$s1=0;
	
	while($row1=mysqli_fetch_array($res1,MYSQLI_BOTH))
	{
		$class1=$row1['class'];
		$sch1=$row1['sch'];
		$sel12="select * from fees where class='$class1' and session='$session' ";
	$res12=mysqli_query($conn,$sel12);
	$row12=mysqli_fetch_array($res12,MYSQLI_BOTH);
	$fees1=$row12['fees'];
	$s1=$s1+$fees1;
	
	}
	/////for conv
	$sel1t="select * from free where conv='YES' and session='$session' ";
	$res1t=mysqli_query($conn,$sel1t);
	
	$s2=0;
	while($row1t=mysqli_fetch_array($res1t,MYSQLI_BOTH))
	{
		$class1t=$row1t['class'];
		$sch1t=$row1t['sch'];

/////for show conv
	$sel121="select * from registration where application='$sch1t' and code!='' and session='$session' order by id desc ";
	$res121=mysqli_query($conn,$sel121);
	$row121=mysqli_fetch_array($res121,MYSQLI_BOTH);
	$code11=$row121['code'];
	//$s1=$s1+$fees1;
	$sel1211="select * from convence where code='$code11' and session='$session' order by id desc ";
	$res1211=mysqli_query($conn,$sel1211);
	$row1211=mysqli_fetch_array($res1211,MYSQLI_BOTH);
	$conv11=$row1211['conv'];
	$s2=$s2+$conv11;
	}
	
	//echo $s1;
	//echo '<br/>';;
	//echo $s2;
	
	?>
	<script>
$(document).ready(function(){
    $('#example').DataTable({
        dom: 'Bfrtip',
        buttons: [ 'csv', 'excel', 'pdf', 'print']
    });
	
});
</script>
<div class="table-responsive">
<table id="example" class="display nowrap" cellspacing="0" width="100%" border="1px">
     <thead>
            <tr>
              <th>Sr. no.</th><th>Session</th><th>Sch</th><th>Name</th><th>Class</th><th>Fee-Free</th><th> Conv-Free</th><th>Cons-Fixed</th><th>Reason</th><th>Date</th><th>Action</th>
            </tr>
        </thead>
<tfoot>
            <tr>
                <th>Sr. no.</th><th>Session</th><th>Sch</th><th>Name</th><th>Class</th><th><?php echo $s1;?></th><th><?php echo $s2;?></th><th><?php echo $s1h;?></th><th>Reason</th><th>Date</th><th>Action</th>
            </tr>
        </tfoot>   
<tbody>	
	
	
	<?php 
	
	$s12=0;
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{
		$fix12=$row['fix'];
		$s12+$s12+$fix12;
	?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><?php echo $row['session'];?></td><td><?php echo $row['sch'];?></td><td><?php echo $row['name'];?></td><td><?php echo $row['class'];?></td><td><?php echo $row['fee'];?></td><td><?php echo $row['conv'];?></td><td><?php echo $row['fix'];?></td><td><?php echo $row['reason'];?></td><td><?php echo $row['date'];?></td> <td></td>
	</tr>
	
	<?php
	}
	
	?>
	
	</tbody>
    </table>
	
	</div>
	
	<?php
	break;
	case 6464:
	//$session=$_POST['session'];
	//echo $session;
	
	$sel1t3="select * from session order by id desc ";
	$res1t3=mysqli_query($conn,$sel1t3);
	$row1h3=mysqli_fetch_array($res1t3,MYSQLI_BOTH);
	$session=$row1h3['session'];
	
	$sel="select * from free where session='$session' ";
	$res=mysqli_query($conn,$sel);
	
	$selh="select * from free where session='$session' ";
	$res1h=mysqli_query($conn,$selh);
	//$class1=$row['class'];
	$s1h=0;
	while($row1h=mysqli_fetch_array($res1h,MYSQLI_BOTH))
	{
		$fix1h=$row1h['fix'];
		
	$s1h=$s1h+$fix1h;
	
	}
	
	
	
$sel1="select * from free where fee='YES' and session='$session'";
	$res1=mysqli_query($conn,$sel1);
	$s1=0;
	
	while($row1=mysqli_fetch_array($res1,MYSQLI_BOTH))
	{
		$class1=$row1['class'];
		$sch1=$row1['sch'];
		$sel12="select * from fees where class='$class1' and session='$session' ";
	$res12=mysqli_query($conn,$sel12);
	$row12=mysqli_fetch_array($res12,MYSQLI_BOTH);
	$fees1=$row12['fees'];
	$s1=$s1+$fees1;
	
	}
	/////for conv
	$sel1t="select * from free where conv='YES' and session='$session' ";
	$res1t=mysqli_query($conn,$sel1t);
	
	$s2=0;
	while($row1t=mysqli_fetch_array($res1t,MYSQLI_BOTH))
	{
		$class1t=$row1t['class'];
		$sch1t=$row1t['sch'];

case 65:
	$id=$_POST['rowid'];
	$del="delete from free where id='$id'";
	
	if(mysqli_query($conn,$del))
	{
		
		echo"Delete";
	}
	else
	{
		echo"not delete";
	}
	break;
		case 111:
	$video=$_POST['video'];
	$date=$_POST['date'];
	$class=$_POST['class'];
	$text=$_POST['text'];
	$subject=$_POST['subject'];
	
	
	$ins="insert into online(date,class,video,text,subject) values('$date','$class','$video','$text','$subject')";
	if(mysqli_query($conn,$ins))
	{
		
		echo"Successfully Add";
	}
	else
	{
		echo"not add";
	}
	break;
	case 222:
	
	$sel="select * from online";
	$res=mysqli_query($conn,$sel);

?>
		<script>
$(document).ready(function(){
    $('#example').DataTable({
        dom: 'Bfrtip',
        buttons: []
    });
	
});
</script>
	<div class="table-responsive">
<table id="example" class="display nowrap" cellspacing="0" width="100%" border="1px">
        <thead>
            <tr>
               		<th>Sr. no.</th><th>Video</th><th>Subject</th><th>Area</th><th>Lession</th><th>date</th><th>Delete</th>
            </tr>
        </thead>
<tfoot>
            <tr>
                		<th>Sr. no.</th><th>Video</th><th>Subject</th><th>Area</th><th>Lession</th><th>date</th><th>Delete</th>
            </tr>
        </tfoot>
        <tbody>	
	
	<?php 
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{

?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><iframe style="width:100;height:80" src="https://www.youtube.com/embed/<?php echo $row['video'];?>" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div>
    	
    	</td> <td><?php echo $row['class'];?></td><td><?php echo $row['subject'];?></td><td><?php echo $row['text'];?></td><td><?php echo $row['date'];?></td><td><a href="javascript:;" onclick="deleterow(<?php echo$row['0'];?>)"><span class="glyphicon glyphicon-trash"></span></td>
	</tr>
	<?php
	}
	?>
</tbody>
	</table>
		</div>
	<?php
	break;
	case 333:
	$id=$_POST['rowid'];
	$del="delete from online where id='$id'";
	
	if(mysqli_query($conn,$del))
	{
		
		echo"ok";
	}
	else
	{
		echo"not delete";
	}
	break;
		case 101:
	$photo=$_FILES['photo']['name'];
	$period=$_POST['period'];
	$hours=$_POST['hours'];
	$min=$_POST['min'];
	$id=$_POST['id'];
	$tempname=$_FILES['photo']['tmp_name'];
	$location="img/";
	$p=rand(10000,50000).$photo;
	
	if($id!='')
	{
	    $ins="update bell set period='$period',min='$min',hours='$hours' where id='$id' ";
	if(mysqli_query($conn,$ins))
	{
	
		echo"Update";
	}
	else
	{
		echo"not update";
	}
	}
	else
	{
	   $ins="insert into bell(ringtone,period,min,hours) values('$p','$period','$min','$hours')";
	if(mysqli_query($conn,$ins))
	{
		move_uploaded_file($tempname,$location.$p);
		echo"Successfully Add";
	}
	else
	{
		echo"not add";
	} 
	}
	
	break;
	
	case 201:
	$sel="select * from bell";
	$res=mysqli_query($conn,$sel);
	
	?>
	
	<table class="table table-stript">
	
	<tr>
	<th>Sr. no.</th><th>Period</th><th>Time</th><th>Delete</th>
	</tr>
	<?php 
	$s=1;
	while($row=mysqli_fetch_array($res,MYSQLI_BOTH))
	{

?>
	<tr class="text-center">
	<td><?php echo $s++;?></td><td><?php echo $row['period']?> </td> <td><?php echo $row['hours']?> : <?php echo $row['min']?></td> <td><a href="bell_up.php?flag=<?php echo $row['id'] ?>" ><span class="glyphicon glyphicon-pencile">edit</span></td><td><a href="javascript:;" onclick="deleterow(<?php echo $row['0'];?>)"><span class="glyphicon glyphicon-trash"></span></td>
	</tr>
	<?php
	}
	?>
	</table>
	
	<?php
	break;
	
	case 301:
	$id=$_POST['rowid'];
	$del="delete from bell where id='$id'";
	
	if(mysqli_query($conn,$del))
	{
	
		echo"ok";
	}
	else
	{
		echo"not delete";
	}
	break;
}