1#@!#!123s

https 1#@!#!123s
: / home2 / affluencebiotech / www / absolutoffice.com / ABS / user /
Filename : attach_documents.php
back
<?php
session_start();
include 'db.php'; // Include database connection file

// Check if the user is logged in
if (!isset($_SESSION['user_id'])) {
    echo "<script>
            alert('Please login first');
            document.location.href = 'login.php';
          </script>";
    exit();
}

// Define the directory where documents will be uploaded
$user_id = $_SESSION['user_id'];  // Get the user ID from session
$upload_dir = "uploads/documents/$user_id/";  // Directory based on user ID

// Create the directory if it doesn't exist
if (!file_exists($upload_dir)) {
    mkdir($upload_dir, 0777, true);  // Create user-specific directory with proper permissions
}

// Check if the form is submitted
if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['docs'])) {
    // Get the files from the form
    $files = $_FILES['docs'];

    // Prepare the SQL query to insert file paths into the database
    $document_paths = [];  // Array to store document paths

    // Loop through each file and process it
    for ($i = 0; $i < count($files['name']); $i++) {
        // Get file details
        $file_name = $files['name'][$i];
        $file_tmp_name = $files['tmp_name'][$i];
        $file_size = $files['size'][$i];
        $file_error = $files['error'][$i];

        // Get file extension
        $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));

        // Set allowed file extensions
        $allowed_extensions = ['pdf', 'jpg', 'jpeg', 'png'];

        // Check if the file extension is valid
        if (in_array($file_ext, $allowed_extensions)) {
            // Check if the file size is less than 5MB
            if ($file_size <= 5 * 1024 * 1024) {
                // Generate a unique name for the file
                $new_file_name = uniqid('file_', true) . '.' . $file_ext;

                // Set the destination path
                $destination = $upload_dir . $new_file_name;

                // Move the uploaded file to the server
                if (move_uploaded_file($file_tmp_name, $destination)) {
                    // Add the file path to the array for database insertion
                    $document_paths[] = $destination;

                    // You can also store more specific data about each file, such as its original name
                } else {
                    echo "<script>alert('Error uploading file $file_name. Please try again.');</script>";
                    continue;
                }
            } else {
                echo "<script>alert('File $file_name is too large. Maximum size is 5MB.');</script>";
                continue;
            }
        } else {
            echo "<script>alert('File $file_name has an invalid format. Only PDF, JPG, and PNG files are allowed.');</script>";
            continue;
        }
    }

    // If we have valid files, insert the document paths into the database
    if (count($document_paths) > 0) {
        foreach ($document_paths as $document_path) {
            // Insert the document path into the database
            $sql = "INSERT INTO attach_documents (user_id, document_path) 
                    VALUES ('$user_id', '$document_path')";
            
            if (mysqli_query($conn, $sql)) {
                // Successfully inserted document path into the database
            } else {
                echo "<script>alert('Error storing document in the database.');</script>";
                break;
            }
        }

        // Redirect to the next page or show success message
        echo "<script>
                alert('Documents uploaded successfully.');
                document.location.href = '../client-account.php'; // Redirect to next step or page
              </script>";
    }
} else {
    echo "<script>alert('No documents were selected.');</script>";
}
?>