File Explorer

<?php include('db_config.php');
if(isset($_POST["action"])){ 	
 $current_url=$_SERVER['REQUEST_URI']; 
$csub_id= explode("/", $current_url);
 $csub= $csub_id[1];
$findid = (mysqli_query($conn, "SELECT * FROM category"));
while ($res2=mysqli_fetch_array($findid)){
    if(strtolower(str_replace(" ", "-", $res2["cat_name"])) == $csub){
        $prdid = $res2["id"];
    }
} 
  $cidd=$prdid;
	$query = "select category.cat_name,product.* from product join category on product.category_id=category.id WHERE status = '' and product.category_id='".$cidd."'";
	if(isset($_POST["brand"]))
	{
		$brand_filter = implode("','", $_POST["brand"]);
		$query .= "
		 AND prod_brand IN('".$brand_filter."')
		";
	}
	$result_srv = mysqli_query($conn, $query);
	$output = '';
	 if(mysqli_num_rows($result_srv) > 0) {
	 while($res_prd= mysqli_fetch_array($result_srv)){
	 	   $cat_name=$res_prd['cat_name']; 
         $prod_name=$res_prd['prod_name']; 
         $categorys = strtolower(str_replace(" ", "-", $cat_name));
         $prod_name = strtolower(str_replace(" ", "-", $prod_name));
 $pdid=$res_prd['id'];
               $sql_prd=mysqli_fetch_array(mysqli_query($conn,"select * from product_detail where product_detail.prod_id='".$pdid."'"));
         $prd_url="$categorys/$prod_name.php";
			$output .= '<div class="col-md-3 col-sm-6 col-12">
                      <div class="product-item product-animation" style="padding:0px">
                        <div class="product-thumb">
                        <a href="https://www.amerx.in/'.$prd_url .'">
   						     <img src="https://www.amerx.in/admin/product/'. $res_prd['prod_img1'] .'" alt="" class="img-responsive" style="width:100%;height:275px; text-align:left;border: 1px solid #ccc">
							    </a>
							<div class="ribbons">
                          <span class="ribbon ribbon-new">Extra '.$sql_prd['prod_discount'] .'%</span>
                          <span class="ribbon ribbon-discount"><i class="icon-heart icons"></i></span>
                     </div>
							<div class="product-info">
							    <p class="amrbrds">'.$res_prd['prod_brand'].'</p>
					            <h3 class="amrtitle" style="min-height:46px;"><a href="https://www.amerx.in/'.$prd_url .'">'. $res_prd['prod_name'] .'</a></h3>
					            <p class="mbdesc">'. $res_prd['short_desp'] .'</p>
					            <div class="prices">
                                    <span class="price-old">Rs.'.$sql_prd['prod_cross_price'].' </span>
                                    <span class="price pprod_prices">-'. $sql_prd['prod_discount'].'% Rs.'. $sql_prd['prod_price'].'</span>
                                   </div>
				    	         </div>
				    	      </div>
				       </div>
				</div>
			';
		}
	}
	else
	{
		$output = '<h3>No Data Found</h3>';
	}
	echo $output;
}

Editing File: fetch_data.php