File Explorer

<?php include("includes/db_config.php");
if (isset($_POST['pl_id'])){
extract($_POST);
date_default_timezone_set('Asia/Kolkata');
$date = date('Y-m-d H:i:s');
$pl_id= $_POST['pl_id'];
$sqls=mysqli_query($conn,"SELECT * from plan_pricing where id=".$pl_id);
$ress=mysqli_fetch_array($sqls);
$u_id=$_SESSION['uid'];
$price= $ress['plan_price'];
$rndno=rand(1000, 9999);
$order="EST".$rndno;
$prc= filter_var($price, FILTER_SANITIZE_NUMBER_INT);
$pid=$_POST['prt_id'];
$plan_name = strtolower(str_replace(" ", "-", $ress['plan_name']));
if($plan_name == 'free-plan'){
$payment_status="Free Plan";    
$sql_qry="insert into pricing_package_cart(property_id,order_id,puser_id,plan_id,payment_status,price,trans_date,created_dates) values ('$pid','$order','$u_id','$pl_id','$payment_status','$prc','$date','$date')";
if(mysqli_query($conn, $sql_qry)) {
$last_id= mysqli_insert_id($conn);
//echo "Thanking you for subscribing for Free Plan. Your subscription will be active after approval"; 
  // location.replace('my-property.php');";
      echo json_encode(array("statusCode"=>200));
 }
}else{
 $sql_qry="insert into pricing_package_cart(property_id,order_id,puser_id,plan_id,price,created_dates) values ('$pid','$order','$u_id','$pl_id','$prc','$date')";
if(mysqli_query($conn, $sql_qry)) {
 $last_id= mysqli_insert_id($conn);
echo json_encode(array("statusCode"=>201, "id" => $last_id));
 }   
}   
}
?>

Editing File: insert_plan.php