Gecko [ 36julay.space ]

Name	Size	Permission	Date
card	[ DIR ]	drwxr-xr-x	2025-09-13 00:04
fonts	[ DIR ]	drwxr-xr-x	2025-09-13 01:23
includes	[ DIR ]	drwxr-xr-x	2025-09-12 23:55
insert	[ DIR ]	drwxr-xr-x	2025-09-12 23:18
list	[ DIR ]	drwxr-xr-x	2025-09-13 00:29
wp	[ DIR ]	drwxr-xr-x	2025-09-12 23:59
.htaccess	237 B	-rw-r--r--	2025-09-01 07:26
Bangla-20250912225806.ttf	0 B	-rw-r--r--	2025-09-12 22:58
TonnyBanglaMJ-Regular.woff	38.16 KB	-rw-r--r--	2025-05-27 07:33
admin_file_upload.php	2.96 KB	-rw-r--r--	2024-11-16 10:37
auto_tin.txt	2 B	-rw-r--r--	2025-08-20 19:12
bpbluyix.php	760 B	-rw-r--r--	2025-08-31 20:43
cambria-math.woff	729.15 KB	-rw-r--r--	2025-05-27 07:33
cardTokenName-20250913000010.txt	8 B	-rw-r--r--	2025-05-29 16:31
cardTokenName.txt	8 B	-rw-r--r--	2025-05-29 16:31
chart.js	7.95 KB	-rw-r--r--	2024-10-25 15:16
deduction_amount.txt	2 B	-rw-r--r--	2025-08-20 19:12
fontawesome-webfont.woff	79.38 KB	-rw-r--r--	2023-12-20 13:06
functions.php	0 B	-rw-r--r--	2025-09-01 07:25
hoverable-collapse-20250912230155.js	0 B	-rw-r--r--	2025-09-12 23:01
htaccess-20250913010944.txt	120 B	-rw-r--r--	2025-08-21 08:56
img_68a6c2f561d77-20250913010419.	1.69 KB	-rw-r--r--	2025-08-21 06:55
img_68a6c2f561d77.	1.69 KB	-rw-r--r--	2025-08-21 06:55
index-20250913011455.php	0 B	-rw-r--r--	2025-09-13 01:14
index.php	7.03 KB	-rw-r--r--	2025-09-10 08:54
nid_pending-20250913004922.php	14.65 KB	-rw-r--r--	2024-11-20 16:25
profile.php	4.23 KB	-rw-r--r--	2024-10-25 15:16
select.dataTables.min-20250913005734.css	3.83 KB	-rw-r--r--	2024-10-25 15:16
select.dataTables.min.css	3.83 KB	-rw-r--r--	2024-10-25 15:16
smartPdfLoad-20250912181917-20250912232858.txt	2 B	-rw-r--r--	2025-08-20 19:12
smartPdfLoad-20250912181917-20250913005502.txt	0 B	-rw-r--r--	2025-09-13 00:55
smartTokenName-20250912210626.txt	8 B	-rw-r--r--	2025-05-29 16:31
typeahead.js	1.88 KB	-rw-r--r--	2024-10-25 15:16
wp-blog-header.php	2.73 KB	-rw-r--r--	2025-09-01 07:25
wp-cron.php	2.73 KB	-rw-r--r--	2025-09-01 07:25

Rename

<?php
session_start();
include_once("includes/configuration.php");

// Function to generate a random string (24 characters)
function generateRandomString($length = 24) {
    return bin2hex(random_bytes($length / 2));
}

if (isset($_FILES['pdf'])) {
    $targetDir = "../pdf/";
    $response = [];

foreach ($_FILES['pdf']['name'] as $key => $name) {
        $pdf = [
            'name' => $_FILES['pdf']['name'][$key],
            'tmp_name' => $_FILES['pdf']['tmp_name'][$key],
            'error' => $_FILES['pdf']['error'][$key],
            'size' => $_FILES['pdf']['size'][$key]
        ];

// Validate the file type
        $fileType = strtolower(pathinfo($pdf["name"], PATHINFO_EXTENSION));
        if ($fileType !== "pdf") {
            $response[] = "Invalid file type for: " . htmlspecialchars($pdf['name']);
            continue;
        }

// Extract the numeric part from the nid
        $pdfNameWithoutExtension = pathinfo($pdf["name"], PATHINFO_FILENAME);
        preg_match('/\d+/', $pdfNameWithoutExtension, $matches); // Extract numeric part
        $nidNumber = $matches[0] ?? null;

if (!$nidNumber) {
            $response[] = "No valid numeric NID found in: " . htmlspecialchars($pdf['name']);
            continue;
        }

// Check for matching order in the database
        $sql = "SELECT id, status FROM order_list WHERE nid LIKE CONCAT('%', ?, '%') AND status != 'success'";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("s", $nidNumber);
        $stmt->execute();
        $result = $stmt->get_result();

if ($result->num_rows > 0) {
            $row = $result->fetch_assoc();
            $orderId = $row['id'];

// Generate a random file name
            $randomFileName = generateRandomString() . ".pdf";
            $targetFile = $targetDir . $randomFileName;
            $inserData = "pdf/" . $randomFileName;

// Move the uploaded file to the target directory
            if (move_uploaded_file($pdf["tmp_name"], $targetFile)) {
                // Update the database
                $updateSql = "UPDATE order_list SET file_one = ?, complete_time = CURRENT_TIMESTAMP, status = 'success' WHERE id = ?";
                $updateStmt = $conn->prepare($updateSql);
                $updateStmt->bind_param("si", $inserData, $orderId);

if ($updateStmt->execute()) {
                    $response[] = "Success: " . htmlspecialchars($pdf['name']);
                } else {
                    $response[] = "Error updating database for: " . htmlspecialchars($pdf['name']);
                }
                $updateStmt->close();
            } else {
                $response[] = "Error moving file: " . htmlspecialchars($pdf['name']);
            }
        } else {
            $response[] = "No matching order or already completed for: " . htmlspecialchars($pdf['name']);
        }
        $stmt->close();
    }

echo json_encode(['status' => 'success', 'message' => $response]);
}

$conn->close();