Root Explorer PHP

Editing: order_manage.php

<?php
session_start();
require_once('server.php');
$db = new server();
$ierp = $db->connect_sql();

$update_by = $_SESSION['email'] ?? 'unknown';

if (isset($_GET['action']) && $_GET['action'] == 'fetch_orders') {
    $orders = [];

$searchTerm = isset($_GET['search']) ? trim($_GET['search']) : '';
    $searchTermEscaped = mysqli_real_escape_string($ierp, $searchTerm);
    $sortOrder = isset($_GET['sort']) && $_GET['sort'] == 'ASC' ? 'ASC' : 'DESC';
$queryPending = "
    SELECT product_id, item_number, product_name_en, product_name_th,
           created_at, category, category_detail
    FROM products
    WHERE product_Act != 0
";

if (!empty($searchTermEscaped)) {
    $queryPending .= "
        AND (
            product_name_en LIKE '%$searchTermEscaped%' 
            OR item_number LIKE '%$searchTermEscaped%'
            OR car_model_input LIKE '%$searchTermEscaped%'
            OR car_brand_input LIKE '%$searchTermEscaped%'
            OR category LIKE '%$searchTermEscaped%' 
            OR product_name_th LIKE '%$searchTermEscaped%' 
            OR category_detail LIKE '%$searchTermEscaped%'
        )
    ";
}
	
    $queryPending .= " ORDER BY created_at $sortOrder  LIMIT 50";
    $resultPending = mysqli_query($ierp, $queryPending);
    while ($row = mysqli_fetch_assoc($resultPending)) {
        $orders[] = [
            'product_id'    => $row['product_id'],
            'item_number'   => $row['item_number'],
            'product_name_en'  => $row['product_name_en'],
            'product_name_th'  => $row['product_name_th'],
            'created_at'    => $row['created_at'],
            'category'      => $row['category'],
            'category_detail' => $row['category_detail']
        ];
    }

echo json_encode($orders);
    exit;
}

if (isset($_GET['action']) && $_GET['action'] == 'fetch_ProductNew') {
    $orders = [];
    $searchTerm = isset($_GET['search']) ? trim($_GET['search']) : '';
    $searchTermEscaped = mysqli_real_escape_string($ierp, $searchTerm);

$sortOrder = isset($_GET['sort']) && $_GET['sort'] == 'ASC' ? 'ASC' : 'DESC';
    $queryPending = "SELECT product_id, item_number, product_name_en,product_name_th , created_at ,category , category_detail , status ,homepagenewproduct_order
                     FROM products WHERE product_Act != 0";

if (!empty($searchTermEscaped)) {
        $queryPending .= " AND product_name_en LIKE '%$product_name_en%' 
                          OR item_number LIKE '%$searchTermEscaped%'
                          OR car_model_input LIKE '%$searchTermEscaped%'
                          OR car_brand_input LIKE '%$searchTermEscaped%'
                          OR category LIKE '%$searchTermEscaped%' 
                          OR product_name_th LIKE '%$searchTermEscaped%' 
                          OR category_detail LIKE '%$searchTermEscaped%' ";
    }

$queryPending .= " ORDER BY created_at $sortOrder LIMIT 50";

$resultPending = mysqli_query($ierp, $queryPending);

while ($row = mysqli_fetch_assoc($resultPending)) {
        $orders[] = [
            'product_id'    => $row['product_id'],
            'item_number'   => $row['item_number'],
            'product_name_en'  => $row['product_name_en'],
            'product_name_th'  => $row['product_name_th'],
            'created_at'    => $row['created_at'],
            'category'      => $row['category'],
            'category_detail' => $row['category_detail'],
            'homepagenewproduct_order' => $row['homepagenewproduct_order'],
            'status' => $row['status']
        ];
    }

echo json_encode($orders);
    exit;
}

if (isset($_GET['action']) && $_GET['action'] == 'fetch_category') {
    $categories = [];

// Query เลือกเฉพาะ category และ category_detail
    $query = "
        SELECT DISTINCT category, category_detail
        FROM products
        WHERE product_Act != 0
		 AND category != 'Bulbs'
        ORDER BY category ASC, category_detail ASC
    ";

$result = mysqli_query($ierp, $query);

if ($result) {
        while ($row = mysqli_fetch_assoc($result)) {
            $categories[] = [
                'category' => $row['category'],
                'category_detail' => $row['category_detail']
            ];
        }
    }

// ส่งกลับ JSON
    echo json_encode($categories);
    exit;
}

if (isset($_GET['action']) && $_GET['action'] == 'get_order_details' && isset($_GET['id'])) {
    $product_id = mysqli_real_escape_string($ierp, $_GET['id']);
    $query = "SELECT * FROM products WHERE product_id = '$product_id'and product_Act != 0";
    $result = mysqli_query($ierp, $query);

if (!$result || mysqli_num_rows($result) == 0) {
        error_log("Order not found for ID: $product_id");
        echo '<p class="text-center text-danger">Order not found.</p>';
        exit;
    }

$product = mysqli_fetch_assoc($result);
    echo '<div class="product-details">';

if (!empty($product['image_path'])) {
        echo '<img src="../back-php/' . htmlspecialchars($product['image_path']) . '" width="100" height="auto" alt="Product Image">';
    }
    $fields = [
        'product_id'   => 'Order ID',
        'product_name_en' => 'Product_en',
        'product_name_th' => 'Product_th',
        'item_number'  => 'SKU',
        'category' => 'Category',
        'category_detail' => 'Category Detail',
        'status'       => 'Status',
        'created_at'   => 'Created At'
    ];
    foreach ($fields as $key => $label) {
        if (!empty($product[$key])) {
            echo '<p><strong>' . $label . ':</strong> ' . htmlspecialchars($product[$key]) . '</p>';
        }
    }

echo '
        <button class="btn btn-info edit-product" data-product_id="' . htmlspecialchars($product['product_id']) . '">Edit</button>
        <button class="btn btn-danger delete-product" data-product_id="' . htmlspecialchars($product['product_id']) . '">✖ Delete</button>
    </div>';

exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] == 'add_shownewproduct') {
    $product_id = intval($_POST['product_id']);
    $new_status = trim($_POST['show_on_homepage']);
    $homepage_order = strtolower($_POST['homepage_order']);

$stmt = $ierp->prepare("UPDATE products SET status = ? ,homepagenewproduct_order = ? WHERE product_id = ?");
    $stmt->bind_param("sii", $new_status, $homepage_order, $product_id);

if ($stmt->execute()) {
        echo json_encode(["success" => true]);
    } else {
        echo json_encode(["success" => false, "error" => $stmt->error]);
    }

$stmt->close();
    exit;
}

if (isset($_GET['action']) && $_GET['action'] === 'get_edit_product' && isset($_GET['id'])) {

$product_id = $_GET['id'];

$stmt = $ierp->prepare("
        SELECT * 
        FROM products 
        WHERE product_id = ? 
        AND product_Act != 0 
        LIMIT 1
    ");
    $stmt->bind_param("s", $product_id);
    $stmt->execute();
    $result = $stmt->get_result();

if ($result && $result->num_rows > 0) {

$row = $result->fetch_assoc();

// ✅ ใช้ RefID_img จาก products
        $refID_img = $row['RefID_img'];

$detail_stmt = $ierp->prepare("
            SELECT detail_img_product, detail_img_id 
            FROM detail_img_product 
            WHERE detail_RefID_img = ? 
            AND detail_img_product_Act != 0
        ");
        $detail_stmt->bind_param("s", $refID_img);
        $detail_stmt->execute();
        $detail_result = $detail_stmt->get_result();

$detail_images = [];
        while ($detail_row = $detail_result->fetch_assoc()) {
            $detail_images[] = $detail_row;
        }

$all_stmt = $ierp->query("
            SELECT DISTINCT category, category_detail 
            FROM products
        ");

$all_products = [];
        while ($all_row = $all_stmt->fetch_assoc()) {
            $all_products[] = [
                'category' => $all_row['category'],
                'category_detail' => $all_row['category_detail']
            ];
        }

echo json_encode([
            'product' => [
                'product_id' => $row['product_id'],
                'product_name_en' => $row['product_name_en'],
                'product_name_th' => $row['product_name_th'],
                'item_number' => $row['item_number'],
                'Product_content_en' => $row['Product_content_en'],
                'Product_content_th' => $row['Product_content_th'],
                'status' => $row['status'],
                'category' => $row['category'],
                'category_detail' => $row['category_detail'],
                'created_at' => $row['created_at'],
                'image_path' => $row['image_path'],
                'RefID_img' => $row['RefID_img'],
                'product_function' => $row['product_function'],
                'product_func_image' => $row['product_func_image'],
                'manual_pdf' => $row['manual_pdf'],
                'youtube_links' => $row['youtube_links'],
                'car_brand_input' => $row['car_brand_input'],
                'car_image_upload_brand' => $row['car_image_upload_brand'],
                'car_model_input' => $row['car_model_input'],
                'car_image_upload' => $row['car_image_upload'],
                'detail_images' => $detail_images
            ],
            'all_products' => $all_products
        ]);

} else {
        echo json_encode(["error" => "Product not found"]);
    }

exit;
}

if ($_POST['action'] === 'upload_summernote_image' && isset($_FILES['image'])) {
    $uploadDir = 'uploads/summernote/';
    if (!is_dir($uploadDir)) {
        mkdir($uploadDir, 0777, true);
    }

$file = $_FILES['image'];
    $filename = uniqid() . "_" . basename($file['name']);
    $targetPath = $uploadDir . $filename;

if (move_uploaded_file($file['tmp_name'], $targetPath)) {
        $imageUrl = "/adminkit-dev/static/back-php/uploads/summernote/" . $filename;
        echo json_encode(["success" => true, "url" => $imageUrl]);
    } else {
        echo json_encode(["success" => false]);
    }
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] == 'update_product') {

$product_id = mysqli_real_escape_string($ierp, $_POST['product_id']);
    $RefID_img = mysqli_real_escape_string($ierp, $_POST['RefID_img']);
    $product_name_en = mysqli_real_escape_string($ierp, $_POST['product_name_en']);
    $product_name_th = mysqli_real_escape_string($ierp, $_POST['product_name_th']);
    $item_number = mysqli_real_escape_string($ierp, $_POST['item_number'] ?? '');
    $category = mysqli_real_escape_string($ierp, $_POST['category']);
    $category_detail = mysqli_real_escape_string($ierp, $_POST['category_detail']);
    $product_function = mysqli_real_escape_string($ierp, $_POST['product_function'] ?? '');
    $Product_content_en = mysqli_real_escape_string($ierp, $_POST['Product_content_en'] ?? '');
    $Product_content_th = mysqli_real_escape_string($ierp, $_POST['Product_content_th'] ?? '');
    $car_model_input = mysqli_real_escape_string($ierp, $_POST['car_model_input'] ?? '');
    $car_brand_input = mysqli_real_escape_string($ierp, $_POST['car_brand_input'] ?? '');
    $remove_manual_pdf = isset($_POST['remove_manual_pdf']) && $_POST['remove_manual_pdf'] == '1';
    $removedFuncImgs = $_POST['removed_func_images'] ?? [];

$query = "SELECT image_path, product_func_image ,car_image_upload ,car_image_upload_brand ,manual_pdf FROM products WHERE product_id = '$product_id' LIMIT 1";
    $result = mysqli_query($ierp, $query);
    $current_data = mysqli_fetch_assoc($result);

$querydetail_img = "SELECT 	*  FROM detail_img_product WHERE detail_RefID_img = '$RefID_img'";
    $resultdetail_img = mysqli_query($ierp, $querydetail_img);
    $current_detail_img = mysqli_fetch_assoc($resultdetail_img);

$image = $current_data['image_path'];
    $product_func_image = $current_data['product_func_image'];
    // $image_details_paths = $current_detail_img['detail_img_product'];
    $car_image_upload = $current_data['car_image_upload'];
    $car_image_upload_brand = $current_data['car_image_upload_brand'];
    $youtube_links = null;
    $manual_pdf = null;

if (!empty($_POST['youtube_links']) && is_array($_POST['youtube_links'])) {
        $cleanLinks = [];
        foreach ($_POST['youtube_links'] as $link) {
            $link = trim($link);
            if ($link !== "") {
                $cleanLinks[] = mysqli_real_escape_string($ierp, $link);
            }
        }
        if (count($cleanLinks) > 0) {
            $youtube_links = implode(',', $cleanLinks);
        }
    }

if (isset($_FILES['image']) && $_FILES['image']['error'] === UPLOAD_ERR_OK) {
        $uploadDir = 'uploads/';
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0777, true);
        }

$uniqid = strrev(uniqid());
        $originalName = basename($_FILES['image']['name']);
        $imageName = $uniqid . '_' . $originalName;
        $targetPath = $uploadDir . $imageName;

if (move_uploaded_file($_FILES['image']['tmp_name'], $targetPath)) {
            $image = $targetPath;
        } else {
            echo json_encode(["error" => "Failed to upload main image"]);
            exit;
        }
    }
 // ===================== DELETE FUNCTION IMAGES =====================
    if (!empty($removedFuncImgs) && !empty($product_func_image)) {

$funcImages = array_filter(explode(',', $product_func_image));

foreach ($removedFuncImgs as $idx) {
            if (isset($funcImages[$idx])) {
                $path = $funcImages[$idx];
                unset($funcImages[$idx]);
            }
        }

$funcImages = array_values($funcImages);
        $product_func_image = implode(',', $funcImages);
    }

// ===================== UPLOAD FUNCTION IMAGES (NEW) =====================
    if (!empty($_FILES['product_func_image']['tmp_name'])) {

$dir = 'uploads/';
        if (!is_dir($dir)) mkdir($dir, 0777, true);

$newPaths = [];

foreach ($_FILES['product_func_image']['tmp_name'] as $i => $tmp) {
            if ($_FILES['product_func_image']['error'][$i] === UPLOAD_ERR_OK) {
                $name = strrev(uniqid()) . '_' . basename($_FILES['product_func_image']['name'][$i]);
                $path = $dir . $name;
                if (move_uploaded_file($tmp, $path)) {
                    $newPaths[] = $path;
                }
            }
        }

if ($newPaths) {
            $old = $product_func_image ? explode(',', $product_func_image) : [];
            $product_func_image = implode(',', array_merge($old, $newPaths));
        }
    }

$uniqid = strrev(uniqid());
        $originalName = basename($_FILES['car_image_upload']['name']);
        $imageName = $uniqid . '_' . $originalName;
        $targetPath = $uploadDir . $imageName;

if (move_uploaded_file($_FILES['car_image_upload']['tmp_name'], $targetPath)) {
            $car_image_upload = $targetPath;
        } else {
            echo json_encode(["error" => "Failed to upload function image"]);
            exit;
        }
    }

$uniqid = strrev(uniqid());
        $originalName = basename($_FILES['car_image_upload_brand']['name']);
        $imageName = $uniqid . '_' . $originalName;
        $targetPath = $uploadDir . $imageName;

if (move_uploaded_file($_FILES['car_image_upload_brand']['tmp_name'], $targetPath)) {
            $car_image_upload_brand = $targetPath;
        } else {
            echo json_encode(["error" => "Failed to upload function image"]);
            exit;
        }
    }

if ($remove_manual_pdf && !empty($current_data['manual_pdf'])) {
        $oldPdf = $current_data['manual_pdf'];

// เตรียมให้ DB เป็น NULL
        $manual_pdf = null;
    }

if (isset($_FILES['manual_pdf']) && $_FILES['manual_pdf']['error'] === UPLOAD_ERR_OK) {
        $uploadBase = 'uploads/';
        if (!empty($item_number)) {
            $safe_item_number = preg_replace('/[^a-zA-Z0-9_\-]/', '', $item_number);
            $pdfUploadDir = $uploadBase . $safe_item_number . '/';
            if (!is_dir($pdfUploadDir)) {
                if (!mkdir($pdfUploadDir, 0777, true)) {
                    echo json_encode(["error" => "Failed to create directory for PDF: " . $pdfUploadDir]);
                    exit;
                }
            }
            $fname = basename($_FILES['manual_pdf']['name']);
            $dest  = $pdfUploadDir . $fname;
            if (move_uploaded_file($_FILES['manual_pdf']['tmp_name'], $dest)) {
                $manual_pdf = $dest;
            } else {
                echo json_encode(["error" => "Failed to upload manual PDF"]);
                exit;
            }
        } else {
            echo json_encode(["error" => "Item number is missing for PDF upload."]);
            exit;
        }
    }
$manual_pdf_sql = $manual_pdf === null ? "NULL" : "'" . mysqli_real_escape_string($ierp, $manual_pdf) . "'";

$query = "UPDATE products SET
        product_name_en = '$product_name_en',
        product_name_th = '$product_name_th',
        item_number = '$item_number',
        Product_content_en = '$Product_content_en',
        Product_content_th = '$Product_content_th',
        category = '$category',
        category_detail = '$category_detail',
        image_path = '$image',
        product_func_image = '$product_func_image',
        product_function = '$product_function',
        youtube_links = '$youtube_links',
        manual_pdf = $manual_pdf_sql,
        car_model_input = '$car_model_input',
        car_image_upload = '$car_image_upload',
        car_brand_input = '$car_brand_input',
        car_image_upload_brand = '$car_image_upload_brand',
		update_by  = '$update_by',
		last_update = NOW()
        WHERE product_id = '$product_id'";

if (mysqli_query($ierp, $query)) {
        $uniqid = !empty($RefID_img) ? $RefID_img : uniqid('ref_', true);

// === ลบรูป detail image ที่ถูกเลือกให้ลบ ===
        if (!empty($_POST['remove_detail_img_ids']) && is_array($_POST['remove_detail_img_ids'])) {
            foreach ($_POST['remove_detail_img_ids'] as $id) {
                $id = intval($id);

mysqli_query($ierp, "UPDATE detail_img_product SET detail_img_product_Act = 0 WHERE detail_img_id = $id");
            }
        }

// === เพิ่มรูป detail image ===
        if (isset($_FILES['image_details']) && is_array($_FILES['image_details']['error'])) {
            $uploadDir = 'uploads/details/';
            if (!is_dir($uploadDir)) mkdir($uploadDir, 0777, true);

foreach ($_FILES['image_details']['error'] as $key => $error) {
                if ($error === UPLOAD_ERR_OK) {
                    $imageName = basename($_FILES['image_details']['name'][$key]);
                    $targetPath = $uploadDir . $imageName;

if (move_uploaded_file($_FILES['image_details']['tmp_name'][$key], $targetPath)) {
                        $insertDetailQuery = "INSERT INTO detail_img_product (detail_RefID_img, detail_product_id, detail_img_product)
                                          VALUES ('$uniqid', '$product_id', '$targetPath')";
                        mysqli_query($ierp, $insertDetailQuery);
                    }
                }
            }
        }

echo json_encode(["success" => true]);
    } else {
        echo json_encode(["error" => "Failed to update product"]);
    }
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] == 'add_image_category_details') {
    header('Content-Type: application/json');

$category = mysqli_real_escape_string($ierp, $_POST['category']);
    $category_detail = mysqli_real_escape_string($ierp, $_POST['category_details']);
    $image_category_details_path = '';

if (isset($_FILES['image_category_details']) && $_FILES['image_category_details']['error'] === UPLOAD_ERR_OK) {
        $safe_category_detail = preg_replace('/[^a-zA-Z0-9_\-]/', '', $category_detail);
        $subUploadDir = 'Category-IMAG-' . $safe_category_detail . '/';
        $uploadDir = 'uploads/' . $subUploadDir;

if (!is_dir($uploadDir)) {
            if (!mkdir($uploadDir, 0777, true)) {
                echo json_encode(["success" => false, "message" => "Failed to create directory: " . $uploadDir]);
                exit;
            }
        }

$image_name = basename($_FILES['image_category_details']['name']);
        $targetPath = $uploadDir . $image_name;

if (move_uploaded_file($_FILES['image_category_details']['tmp_name'], $targetPath)) {
            $image_category_details_path = $targetPath;
        } else {
            echo json_encode(["success" => false, "message" => "Failed to upload main image_category_details"]);
            exit;
        }
    } else {
        echo json_encode(["success" => false, "message" => "No image uploaded or upload error."]);
        exit;
    }

$stmt = mysqli_prepare($ierp, "UPDATE products SET image_category_detail_grouping = ? WHERE category_detail = ?");

if ($stmt) {
        mysqli_stmt_bind_param($stmt, "ss", $image_category_details_path, $category_detail);

if (mysqli_stmt_execute($stmt)) {
            if (mysqli_stmt_affected_rows($stmt) > 0) {
                echo json_encode(["success" => true, "message" => "Product image updated successfully."]);
            } else {
                echo json_encode(["success" => false, "message" => "No product found with the specified category detail, or image is already the same."]);
            }
        } else {
            echo json_encode(["success" => false, "message" => "Failed to execute update query: " . mysqli_error($ierp)]);
        }
        mysqli_stmt_close($stmt);
    } else {
        echo json_encode(["success" => false, "message" => "Failed to prepare statement: " . mysqli_error($ierp)]);
    }
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] == 'add_product') {

$product_name_en       = isset($_POST['product_name_en'])       ? mysqli_real_escape_string($ierp, $_POST['product_name_en'])       : null;
    $product_name_th       = isset($_POST['product_name_th'])       ? mysqli_real_escape_string($ierp, $_POST['product_name_th'])       : null;
    $item_number        = isset($_POST['item_number'])        ? mysqli_real_escape_string($ierp, $_POST['item_number'])        : null;
    $status             = isset($_POST['status'])             ? mysqli_real_escape_string($ierp, $_POST['status'])             : null;
    $category           = isset($_POST['category'])           ? mysqli_real_escape_string($ierp, $_POST['category'])           : null;
    $category_detail    = isset($_POST['category_detail'])    ? mysqli_real_escape_string($ierp, $_POST['category_detail'])    : null;
    $Product_content_en    = isset($_POST['Product_content_en'])    ? mysqli_real_escape_string($ierp, $_POST['Product_content_en'])    : null;
    $Product_content_th    = isset($_POST['Product_content_th'])    ? mysqli_real_escape_string($ierp, $_POST['Product_content_th'])    : null;
    $product_function   = isset($_POST['product_function'])   ? mysqli_real_escape_string($ierp, $_POST['product_function'])   : null;
    $car_model_input    = isset($_POST['car_model_input'])    ? mysqli_real_escape_string($ierp, $_POST['car_model_input'])    : null;
    $car_brand_input    = isset($_POST['car_brand_input'])    ? mysqli_real_escape_string($ierp, $_POST['car_brand_input'])    : null;

$youtube_links = null;
    if (!empty($_POST['youtube_links']) && is_array($_POST['youtube_links'])) {
        $cleanLinks = [];
        foreach ($_POST['youtube_links'] as $link) {
            $link = trim($link);
            if ($link !== "") {
                $cleanLinks[] = mysqli_real_escape_string($ierp, $link);
            }
        }
        if (count($cleanLinks) > 0) {
            $youtube_links = implode(',', $cleanLinks);
        }
    }

$image = null;
    $product_func_image = [];

if (empty($product_func_image)) {
        $product_func_image = null;
    }
    $image_details_paths = [];
    $car_image_upload = '';
    $car_image_upload_brand = '';
    $uniqid = strrev(uniqid());
    $manual_pdf = null;

if (isset($_FILES['image']) && $_FILES['image']['error'] === UPLOAD_ERR_OK) {
        $uploadDir = 'uploads/';
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0777, true);
        }
        $uniqid = strrev(uniqid());
        $imageName = $uniqid . '_' . basename($_FILES['image']['name']);
        $targetPath = $uploadDir . $imageName;
        if (move_uploaded_file($_FILES['image']['tmp_name'], $targetPath)) {
            $image = $targetPath;
        } else {
            echo json_encode(["error" => "Failed to upload main image"]);
            exit;
        }
    }

if (isset($_FILES['product_func_image']) && is_array($_FILES['product_func_image']['tmp_name'])) {
        $uploadDir = 'uploads/';
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0777, true);
        }

foreach ($_FILES['product_func_image']['tmp_name'] as $i => $tmpName) {
            if ($_FILES['product_func_image']['error'][$i] === UPLOAD_ERR_OK) {
                $uniqid = strrev(uniqid());
                $imageName = $uniqid . '_' . basename($_FILES['product_func_image']['name'][$i]);
                $targetPath = $uploadDir . $imageName;
                if (move_uploaded_file($tmpName, $targetPath)) {
                    $product_func_image[] = $targetPath;
                }
            }
        }

if (!empty($product_func_image)) {
            $product_func_image = implode(',', $product_func_image);
        }
    }

if (isset($_FILES['car_image_upload']) && $_FILES['car_image_upload']['error'] === UPLOAD_ERR_OK) {
        $uploadDir = 'uploads/';
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0777, true);
        }
        $uniqid = strrev(uniqid());
        $imageName = $uniqid . '_' . basename($_FILES['car_image_upload']['name']);
        $targetPath = $uploadDir . $imageName;
        if (move_uploaded_file($_FILES['car_image_upload']['tmp_name'], $targetPath)) {
            $car_image_upload = $targetPath;
        } else {
            echo json_encode(["error" => "Failed to upload function image"]);
            exit;
        }
    }

if (isset($_FILES['car_image_upload_brand']) && $_FILES['car_image_upload_brand']['error'] === UPLOAD_ERR_OK) {
        $uploadDir = 'uploads/';
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0777, true);
        }
        $uniqid = strrev(uniqid());
        $imageName = $uniqid . '_' . basename($_FILES['car_image_upload_brand']['name']);
        $targetPath = $uploadDir . $imageName;
        if (move_uploaded_file($_FILES['car_image_upload_brand']['tmp_name'], $targetPath)) {
            $car_image_upload_brand = $targetPath;
        } else {
            echo json_encode(["error" => "Failed to upload function image"]);
            exit;
        }
    }

if (isset($_FILES['manual_pdf']) && $_FILES['manual_pdf']['error'] === UPLOAD_ERR_OK) {
        $uploadBase = 'uploads/';

if (!empty($item_number)) {
            $safe_item_number = preg_replace('/[^a-zA-Z0-9_\-]/', '', $item_number);

$pdfUploadDir = $uploadBase . $safe_item_number . '/';

if (!is_dir($pdfUploadDir)) {
                if (!mkdir($pdfUploadDir, 0777, true)) {
                    echo json_encode(["error" => "Failed to create directory for PDF: " . $pdfUploadDir]);
                    exit;
                }
            }

$fname = basename($_FILES['manual_pdf']['name']);
            $dest  = $pdfUploadDir . $fname;

if (move_uploaded_file($_FILES['manual_pdf']['tmp_name'], $dest)) {
                $manual_pdf = $dest;
            } else {
                echo json_encode(["error" => "Failed to upload manual PDF"]);
                exit;
            }
        } else {
            echo json_encode(["error" => "Item number is missing for PDF upload."]);
            exit;
        }
    }

$query = "INSERT INTO products (RefID_img, product_name_en,product_name_th , item_number, status, category, image_path, category_detail, Product_content_en, Product_content_th,  product_function, product_func_image , car_model_input , car_brand_input , car_image_upload , car_image_upload_brand ,manual_pdf, youtube_links,update_by )
              VALUES ( '$uniqid', '$product_name_en','$product_name_th', '$item_number', '$status', '$category', '$image', '$category_detail', '$Product_content_en','$Product_content_th',  '$product_function', '$product_func_image' , '$car_model_input' , '$car_brand_input' , '$car_image_upload' , '$car_image_upload_brand' ,'$manual_pdf' ,'$youtube_links','$update_by')";

if (mysqli_query($ierp, $query)) {
        $product_id = mysqli_insert_id($ierp);
        if (isset($_FILES['image_details']) && is_array($_FILES['image_details']['error'])) {
            $uploadDir = 'uploads/details/';
            if (!is_dir($uploadDir)) {
                mkdir($uploadDir, 0777, true);
            }

if (move_uploaded_file($_FILES['image_details']['tmp_name'][$key], $targetPath)) {
                        $insertDetailQuery = "INSERT INTO detail_img_product (detail_RefID_img, detail_product_id, 	detail_img_product)
                                              VALUES ('$uniqid', '$product_id', '$targetPath')";
                        mysqli_query($ierp, $insertDetailQuery);
                    }
                }
            }
        }
        echo json_encode(["success" => true]);
    } else {
        echo json_encode(["error" => "Failed to add product"]);
    }
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'delete_product') {
    $product_id = mysqli_real_escape_string($ierp, $_POST['product_id']);

mysqli_query($ierp, "UPDATE detail_img_product SET detail_img_product_Act = 0 WHERE detail_product_id = '$product_id'");

$updateProduct = "UPDATE products SET product_Act = 0 , update_by = '$update_by', last_update = NOW() WHERE product_id = '$product_id'";

if (mysqli_query($ierp, $updateProduct)) {
    echo json_encode(["success" => true, "message" => "ปิดใช้งานสินค้าสำเร็จ"]);
} else {
    echo json_encode(["error" => "ไม่สามารถอัปเดตสถานะสินค้าได้: " . mysqli_error($ierp)]);
}
exit;
}

$input = json_decode(file_get_contents('php://input'), true);

if (
    $_SERVER['REQUEST_METHOD'] === 'POST' &&
    isset($input['action']) &&
    $input['action'] === 'Update_adminProductList' &&
    isset($input['order']) &&
    is_array($input['order'])
) {

$stmt = $ierp->prepare("UPDATE products SET display_order = ? WHERE product_id = ?");
    $stmt->bind_param('ii', $displayOrder, $productId);

$ierp->begin_transaction();
    try {
        foreach ($input['order'] as $item) {
            $productId     = (int) $item['id'];
            $displayOrder  = (int) $item['order'];
            $stmt->execute();
        }
        $ierp->commit();
        echo 'OK';
    } catch (Exception $e) {
        $ierp->rollback();
        http_response_code(500);
        echo 'Error: ' . $e->getMessage();
    }

$stmt->close();
    $ierp->close();
} else {
    http_response_code(400);
    echo 'Invalid request';
}

$input = json_decode(file_get_contents('php://input'), true);
if ($_SERVER['REQUEST_METHOD'] !== 'POST' || empty($input['action']) || empty($input['category'])) {
    http_response_code(400);
    exit('Missing action or category');
}

function update_order($db, $sql, $data, $category)
{
    $stmt = $db->prepare($sql);
    foreach ($data as $item) {
        if (!$stmt) continue;
        $stmt->bind_param("iss", $item['order'], $category, $item['name']);
        $stmt->execute();
    }
    if ($stmt) $stmt->close();
}

switch ($input['action']) {
    case 'update_category_detail_order':
        update_order($ierp, "UPDATE products SET category_detail_display_order=? WHERE category=? AND category_detail=?", $input['Order'] ?? [], $input['category']);
        echo "อัปเดตลำดับหมวดย่อยเรียบร้อยแล้ว";
        break;

case 'update_brand_order':
        update_order($ierp, "UPDATE products SET brand_display_order=? WHERE category=? AND car_brand_input=?", $input['brandOrder'] ?? [], $input['category']);
        echo "อัปเดตลำดับแบรนด์เรียบร้อยแล้ว";
        break;

case 'update_model_order':
        update_order($ierp, "UPDATE products SET model_display_order=? WHERE category=? AND car_model_input=?", $input['modelOrder'] ?? [], $input['category']);
        echo "อัปเดตลำดับรุ่นรถเรียบร้อยแล้ว";
        break;

case 'update_brand_model_order':
        update_order($ierp, "UPDATE products SET brand_display_order=? WHERE category=? AND car_brand_input=?", $input['brandOrder'] ?? [], $input['category']);
        $selectedBrand = $input['selectedBrand'] ?? '';
        $stmt = $ierp->prepare("UPDATE products SET model_display_order=? WHERE category=? AND car_brand_input=? AND car_model_input=?");
        foreach ($input['modelOrder'] ?? [] as $item) {
            if (!$stmt) continue;
            $stmt->bind_param("isss", $item['order'], $input['category'], $selectedBrand, $item['name']);
            $stmt->execute();
        }
        if ($stmt) $stmt->close();
        echo "อัปเดตลำดับแบรนด์และรุ่นรถเรียบร้อยแล้ว";
        break;

default:
        http_response_code(400);
        echo "Invalid action";
}
$ierp->close();

[ CANCEL ]

Name	Type	Actions
.. (Parent Directory)
📄 AddProduct.php	FILE	[EDIT]
📄 Find_Store.php	FILE	[EDIT]
📄 auth_check.php	FILE	[EDIT]
📄 config.php	FILE	[EDIT]
📄 errors.php	FILE	[EDIT]
📄 functions.php	FILE	[EDIT]
📄 location_inser.php	FILE	[EDIT]
📄 login_db.php	FILE	[EDIT]
📄 logout.php	FILE	[EDIT]
📄 manage-Award.php	FILE	[EDIT]
📄 manage-qr-product-catalogue.php	FILE	[EDIT]
📄 manage-slider.php	FILE	[EDIT]
📄 manage_page.php	FILE	[EDIT]
📄 maps-controll.php	FILE	[EDIT]
📄 order_manage.php	FILE	[EDIT]
📄 profile_manage.php	FILE	[EDIT]
📄 server.php	FILE	[EDIT]
📄 update_news_order.php	FILE	[EDIT]
📁 uploads/	DIR

[ Root System Explorer ]

Editing: order_manage.php