File Explorer

<?php include("db_config.php"); 
if($_SERVER['REQUEST_METHOD']=='POST'){
  extract($_POST);
 $email= $_POST['email'];
 $name= $_POST['name'];
 $rndno=rand(1000, 9999);
$pic1=$rndno.".jpg";
$image =$_POST['image'];
$actualpath1 = "../admin/img/$pic1";
 $sql = "SELECT count(*) as num FROM es_property_user WHERE email_id = '$email'";
$result = mysqli_query($conn, $sql) or die(mysqli_error($conn));
$res= mysqli_fetch_array($result);
$count=$res['num']; 
if($count > 0 )
{ $sqll ="SELECT * FROM es_property_user WHERE email_id = '".$email."'";
$resultt = mysqli_query($conn, $sqll) or die(mysqli_error($conn));
$ress= mysqli_fetch_array($resultt);    
$response['user_id']=$ress['id'];
$response['status']=1;
}else{
date_default_timezone_set('Asia/Kolkata');
$date = date('Y-m-d H:i:s');
$ip=$_SERVER['REMOTE_ADDR'];
$sql="INSERT into es_property_user(name,email_id,profile_img,created_date,ip_address) values ('$name','$email','$pic1','$date','$ip')";
$result = mysqli_query($conn, $sql);
$last_id= mysqli_insert_id($conn);
if($result){
file_put_contents($actualpath1,base64_decode($image));
$response['user_id']=$last_id;
$response['status']=2;
}
}
	echo json_encode($response);
	mysqli_close($conn);
}

Editing File: google-login.php