File Explorer

<?php session_start();
include("includes/db_config.php"); 
//$sql = "INSERT INTO comment (myText) VALUES ()";
date_default_timezone_set('Asia/Kolkata');
$date = date('Y-m-d H:i:s');
$wh_id= $_POST['id'];
$sql1=mysqli_query($conn,"select * from wishlist where id='".$wh_id."'");
$data= mysqli_fetch_array($sql1);
$prod_details_id=$data['prod_details_id'];
$prod_id=$data['prod_id'];
$user_id=$data['user_id'];  
$quantity=$data['quantity'];  
$price=$data['price'];  
$user_id=$_SESSION['id'];
$statuss="0";
$sql_paytm ="UPDATE  wishlist SET status='$statuss' WHERE user_id='".$user_id."' and id='".$wh_id."'"; 
$result_ptm=mysqli_query($conn,$sql_paytm) or die(mysqli_error());
$sql="INSERT into addto_cart(prod_details_id,prod_id,user_id,quantity,price,created_date) values ('$prod_details_id','$prod_id','$user_id','$quantity','$price','$date')";
if (mysqli_query($conn, $sql)) {
    $w_id= $_POST['id'];
    $sql = "DELETE FROM wishlist WHERE user_id='$user_id' and id='$w_id'";
    $result = mysqli_query($conn, $sql) or die(mysqli_error($conn));
    echo json_encode(array("statusCode"=>200));
} 
else {
    echo json_encode(array("statusCode"=>201));
}
 $conn->close();
 ?>

Editing File: wish_tocart.php