revealability

Back Back Up Advanced Editor

<?php
session_start();
include '../../assets/constant/config.php';

try {
    $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
    $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

if (isset($_POST['submit'])) {

$stmt = $conn->prepare("INSERT INTO `category`(`heading`) VALUES (?)");
        $stmt->bindParam(1, $_POST['heading']);

// $stmt->bindParam(2, $img);
        $stmt->execute();

$_SESSION['success'] = "Added blog";

?>
        <script>
        // Redirect to ../about_seo.php
        window.location.href = "../manage_category.php";
    </script>
   <?php
    }

////update Cateogory

if (isset($_POST['update'])) {
       
    
        $stmt = $conn->prepare("UPDATE `category` SET `heading` = ? WHERE id= ? ");

$stmt->bindParam(1, $_POST['heading']);

// $stmt->bindParam(2, $img);
        $stmt->bindParam(2, $_POST['id']);
        $stmt->execute();
      //  exit;
        $_SESSION['success'] = "Category Updated";
        ?>
        <script>
        // Redirect to ../about_seo.php
        window.location.href = "../manage_category.php";
    </script>
   <?php
    }

/////category delete

if (isset($_POST['del_id'])) {

$stmt = $conn->prepare("UPDATE `category` SET delete_status='1' where id=? ");

$stmt->execute([htmlspecialchars($_POST['del_id'], ENT_QUOTES, 'UTF-8')]);

$_SESSION['success'] = "Category Deleted";

?>
        <script>
        // Redirect to ../about_seo.php
        window.location.href = "../manage_category.php";
    </script>
   <?php
    }
} catch (PDOException $e) {
    echo "Connection failed: " . $e->getMessage();
}