File Explorer

<?php session_start();
include("includes/db_config.php");
include("includes/css.php");
if(isset($_POST['update']))
{
extract($_POST);
$id=$_POST["id"];
$cat_id=$_POST["category_id"];
//$subcat_id=$_POST["sub_category_id"];
$details = htmlentities( $_POST['desp']); 
$detail=mysqli_real_escape_string($conn,$details);
$title=mysqli_real_escape_string($conn,$title);
$sqlct=mysqli_fetch_array(mysqli_query($conn,"SELECT * from category where id='$cat_id'"));
//$sqlsct=mysqli_fetch_array(mysqli_query($conn,"SELECT * from sub_category where id='$subcat_id'"));
$category = strtolower(str_replace(" ", "-", $sqlct["name"]));
$subcategory = strtolower(str_replace(" ", "-", $sqlsct['sub_name'])); 
$service_title = strtolower(str_replace(" ", "-", $serv_title));
$old_serv_title = strtolower(str_replace(" ", "-", $old_serv_title));
if(file_exists('../$category/$subcategory')){
  if(strtolower(str_replace(" ", "-", $service_title)) == strtolower(str_replace(" ", "-", $old_serv_title))) {
    if(file_exists('../'.$category.'/'.$subcategory.'/'.strtolower(str_replace(" ", "-", $old_serv_title)).'.php')){
$sql ="UPDATE service_detail SET cat_id='$cat_id',subcat_id='$subcat_id',service_title='$serv_title',desp='$detail',title='$title' WHERE id='$id'"; 
            $res=mysqli_query($conn,$sql) or die(mysqli_error());
            if($res){
            $sqlg = "SELECT * from service_detail where id = $id";
              $resultg = mysqli_query($conn,$sqlg) or die(mysqli_error());
              $resg = mysqli_fetch_object($resultg);
              
              if($_FILES["image"]["name"] != ""){
                $oname=$_FILES["image"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["image"]["tmp_name"];
                $path = "images/".$resg->id.'1'.'.'.$extension;
                $upath = "images/".$resg->image;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $image1 = $resg->id.'1'.'.'.$extension;
                } else {
                  $image1 = $resg->image;
                }
            if($_FILES["banner"]["name"] != ""){
                $oname=$_FILES["banner"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["banner"]["tmp_name"];
                $path = "images/banner/".$resg->id.'5'.'.'.$extension;
                $upath = "images/banner/".$resg->banner;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $banner = $resg->id.'5'.'.'.$extension;
                } else {
                  $banner = $resg->banner;
                } 
            $sqlup = "UPDATE service_detail SET  image = '$image1',banner ='$banner' WHERE id = $resg->id";
                $resultup = mysqli_query($conn,$sqlup) or die(mysqli_error());
                if($resultup)
                {
               echo "<script>document.location.href='service-details.php'</script>";
               }        
            }
      }else{
        if(copy('../service-details.php', '../'.$category.'/'.$subcategory.'/'.strtolower(str_replace(" ", "-", $old_serv_title)).'.php')) {
            $sql ="UPDATE service_detail SET cat_id='$cat_id',subcat_id='$subcat_id',service_title='$serv_title',desp='$detail',title='$title' WHERE id='$id'"; 
            $res=mysqli_query($conn,$sql) or die(mysqli_error());
            if($res){
            $sqlg = "SELECT * from service_detail where id = $id";
              $resultg = mysqli_query($conn,$sqlg) or die(mysqli_error());
              $resg = mysqli_fetch_object($resultg);
              
              if($_FILES["image"]["name"] != ""){
                $oname=$_FILES["image"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["image"]["tmp_name"];
                $path = "images/".$resg->id.'1'.'.'.$extension;
                $upath = "images/".$resg->image;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $image1 = $resg->id.'1'.'.'.$extension;
                } else {
                  $image1 = $resg->image;
                }
            if($_FILES["banner"]["name"] != ""){
                $oname=$_FILES["banner"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["banner"]["tmp_name"];
                $path = "images/banner/".$resg->id.'5'.'.'.$extension;
                $upath = "images/banner/".$resg->banner;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $banner = $resg->id.'5'.'.'.$extension;
                } else {
                  $banner = $resg->banner;
                } 
            $sqlup = "UPDATE service_detail SET  image = '$image1',banner ='$banner' WHERE id = $resg->id";
                $resultup = mysqli_query($conn,$sqlup) or die(mysqli_error());
                if($resultup)
                { 
               echo "<script>document.location.href='service-details.php'</script>";
               }        
            }

}
            }
          }
        }else{
            if(file_exists('../'.$category.'/'.$subcategory.'/'.strtolower(str_replace(" ", "-", $old_serv_title)).'.php')){
        if(rename("../$category/$subcategory/".strtolower(str_replace(" ", "-", $old_serv_title)).".php", "../$category/$subcategory/".strtolower(str_replace(" ", "-", $service_title)).".php")){
           $sql ="UPDATE service_detail SET cat_id='$cat_id',subcat_id='$subcat_id',service_title='$serv_title',desp='$detail',title='$title' WHERE id='$id'"; 
            $res=mysqli_query($conn,$sql) or die(mysqli_error());
            if($res){
            $sqlg = "SELECT * from service_detail where id = $id";
              $resultg = mysqli_query($conn,$sqlg) or die(mysqli_error());
              $resg = mysqli_fetch_object($resultg);
              
              if($_FILES["image"]["name"] != ""){
                $oname=$_FILES["image"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["image"]["tmp_name"];
                $path = "images/".$resg->id.'1'.'.'.$extension;
                $upath = "images/".$resg->image;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $image1 = $resg->id.'1'.'.'.$extension;
                } else {
                  $image1 = $resg->image;
                }
            if($_FILES["banner"]["name"] != ""){
                $oname=$_FILES["banner"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["banner"]["tmp_name"];
                $path = "images/banner/".$resg->id.'5'.'.'.$extension;
                $upath = "images/banner/".$resg->banner;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $banner = $resg->id.'5'.'.'.$extension;
                } else {
                  $banner = $resg->banner;
                } 
            $sqlup = "UPDATE service_detail SET  image = '$image1',banner ='$banner' WHERE id = $resg->id";
                $resultup = mysqli_query($conn,$sqlup) or die(mysqli_error());
                if($resultup)
                { 
               echo "<script>document.location.href='service-details.php'</script>";
               }        
           }
     }
    }else{  
     if(copy('../service-details.php', '../'.$category.'/'.$subcategory.'/'.strtolower(str_replace(" ", "-", $service_title)).'.php')) {
            $service_title=mysqli_real_escape_string($conn,$_POST['service_title']);
$sql ="UPDATE service_detail SET cat_id='$cat_id',subcat_id='$subcat_id',service_title='$serv_title',desp='$detail',title='$title' WHERE id='$id'"; 
            $res=mysqli_query($conn,$sql) or die(mysqli_error());
            if($res){
            $sqlg = "SELECT * from service_detail where id = $id";
              $resultg = mysqli_query($conn,$sqlg) or die(mysqli_error());
              $resg = mysqli_fetch_object($resultg);
              
              if($_FILES["image"]["name"] != ""){
                $oname=$_FILES["image"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["image"]["tmp_name"];
                $path = "images/".$resg->id.'1'.'.'.$extension;
                $upath = "images/".$resg->image;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $image1 = $resg->id.'1'.'.'.$extension;
                } else {
                  $image1 = $resg->image;
                }
            if($_FILES["banner"]["name"] != ""){
                $oname=$_FILES["banner"]["name"];
                $pos = strrpos($oname, ".");
                $extension=substr($oname,$pos+1);
                $tn = $_FILES["banner"]["tmp_name"];
                $path = "images/banner/".$resg->id.'5'.'.'.$extension;
                $upath = "images/banner/".$resg->banner;
                unlink($upath);
                 move_uploaded_file($tn,$path);
                 $banner = $resg->id.'5'.'.'.$extension;
                } else {
                  $banner = $resg->banner;
                } 
            $sqlup = "UPDATE service_detail SET  image = '$image1',banner ='$banner' WHERE id = $resg->id";
                $resultup = mysqli_query($conn,$sqlup) or die(mysqli_error());
                if($resultup)
                { 
                echo "<script>document.location.href='service-details.php'</script>";
               }        
            }
          }

}
      }
    }
?>

<body class="hold-transition skin-blue sidebar-mini">
    <div class="wrapper">
        <?php include("includes/header.php")?>
        <?php include("includes/sidebar.php")?>
        
        <div class="content-wrapper">
            
            
            <section class="content">
                <div class="row">
                    <div class="col-md-12">
                        <div class="box box-primary">
                            <div class="box-header with-border">
                                <h3 class="box-title">Edit Room & Suits Details</h3>
                            </div>
                            <?php $id=$_GET['id'];
                                $sql_qrry="select sub_category.sub_name,category.name as categoryn,service_detail.* from service_detail join category on service_detail.cat_id=category.id join sub_category on service_detail.subcat_id=sub_category.id  where service_detail.id='".$id."'";
                                $resultss = mysqli_query($conn, $sql_qrry);
                                $res= mysqli_fetch_array($resultss);
                                ?>
                            
                            <div class="box-body">
                                <form class="login-form" method="POST" action="" enctype="multipart/form-data">
                                    <div class="form-group">
                                        <div class="col-md-4">
                                            <label>Category:</label>
                                            <div class="input-group">
                                                <div class="input-group-addon">
                                                    <i class="fa fa-suitcase"></i>
                                                </div>
                                                    <select name="category_id" id="cat_id" class="form-control">
                                                <option value="<?php echo $res['cat_id']; ?>"><?php echo $res['categoryn']; ?></option>
                                                 <?php
                                                    $sql2="SELECT * from category";
                                                    $exe2=mysqli_query($conn,$sql2);
                                                    while ($res2=mysqli_fetch_array($exe2))
                                                    {
                                                    ?>
                                                    <option value="<?php echo $res2['id']; ?>"><?php echo $res2['name'];?></option>
                                                    <?php
                                                    }
                                                    ?>
                                            </select>
                                            </div>
                                        </div><div class="col-md-4">
                                            <label>Sub-Category:</label>
                                            <div class="input-group">
                                                <div class="input-group-addon">
                                                    <i class="fa fa-suitcase"></i>
                                                </div>
                                                <select name="sub_category_id" id="sub_cat" class="form-control">
                                                <option value="<?php echo $res['subcat_id']; ?>"><?php echo $res['sub_name']; ?></option>
                                                </select>
                                            </div>
                                        </div>
                                        <div class="col-md-4">
                                            <label>Service Title</label>
                                            <div class="input-group">
                                                <div class="input-group-addon">
                                                    <i class="fa fa-suitcase"></i>
                                                </div>
                                                <input type="text" value="<?= $res['service_title'];?>" name="serv_title" class="form-control" placeholder="Enter Title">
                                                <input type="hidden" value="<?= $res['service_title'];?>" name="old_serv_title">
                                            </div>
                                        </div>
                                        <div class="col-md-12">
                                            <label>Title</label>
                                            <div class="input-group">
                                                <div class="input-group-addon">
                                                    <i class="fa fa-suitcase"></i>
                                                </div>
                                                <input type="text" value="<?= $res['title'];?>" name="title" class="form-control" placeholder="Enter T itle">
                                            </div>
                                       </div>
                                        
                                        <div class="col-md-4">
                                            <label>Images</label>
                                            <img src="images/<?php echo $res['image']; ?>" style="width:80px;"><br>
                                            <input type="file" class="form-control" name="image" placeholder="Choose Images">
                                        </div> 
                                        <div class="col-md-4">
                                            <label>Banner</label>
                                            <img src="images/banner/<?php echo $res['banner']; ?>" style="width:80px;"><br>
                                            <input type="file" class="form-control" name="banner" placeholder="Choose Images">
                                        </div> 
                                        <div class="col-md-12">
                                            <label>Details :</label>
                                            <div class="input-group">
                                                <div class="input-group-addon">
                                                    <i class="fa fa-suitcase"></i>
                                                </div>
                                                <textarea name="desp" id="summernote" style="height:400px"><?php echo html_entity_decode($res['desp']); ?> </textarea>
                                            </div>
                                        </div> 
                                         <input type="hidden" value="<?php echo $res['id'];?>" class="form-control" name="id" id="id">

</html>

Editing File: edit-service-detail1.php