create_auction_result.php

<?php

include_once("header.php");
require_once "config.php";
require_once "send_mail.php";

?>

<div class="container my-5">

<?php

if($_SERVER["REQUEST_METHOD"] == "POST"){

        $title = $_POST["auctionTitle"];
        $details = $_POST["auctionDetails"];
        $category = $_POST["category"];
        $SPrice = $_POST["auctionStartPrice"];
        $RPrice = $_POST["auctionReservePrice"];
        $Date = $_POST["auctionEndDate"];
        $seller_id = $_SESSION['userID'];

    try {
        $end_time = new DateTime($Date);
    } catch (Exception $e) {
    }
    $now = new DateTime();

    if (empty($title) || empty($category) || empty($SPrice) || empty($Date))
    {
        exit('Please complete the create auction form!');
    }

    if ($SPrice < 1){
        exit('The minimum starting price is 1');
    }

    if ($category == 'Choose...'){
        exit('Please choose a valid category');
    }

    if (!empty($RPrice) && ($RPrice < $SPrice)) {
        exit('The reserve price cannot be lower than the starting price');
    }

    if ($end_time < $now) {
        exit('The end date must be in the future');
    }



    if (!$link) {
            die("Connection failed: " . mysqli_connect_error());
        }

        $sql = "INSERT INTO item (title,description, start_price,current_price, reserve_price, end_date, seller_id,category,status)
                VALUES ('$title','$details','$SPrice','$SPrice','$RPrice','$Date','$seller_id','$category','0')";

        if (mysqli_query($link, $sql)) {
            echo "<script>alert('Auction created successfully')</script>";
            $last = mysqli_insert_id($link);
            // Send mail to the seller.
            $emails = "SELECT email FROM user WHERE user_id = '$seller_id'";
            $email_result = $link->query($emails);
            while ($row = mysqli_fetch_array($email_result)) {
                $seller_email = $row['email'];
                $subject = "New Auction Created";
                $body = "Hi there, <br/> <br/> You have successfully created an auction for ".$title.".<br/> <br/> Kind regards, <br/> Simple Click Marketing Team <br/>";
                send_email($seller_email, $subject, $body);
            }
        } else {
            echo "Error: " . $sql . "<br>" . mysqli_error($link);
        }


    $upfile=$_FILES["pic"];
        //Define type list
        $typelist=array("image/jpeg","image/jpg","image/png","image/gif");
        $path="./images/";

        if($upfile["error"]>0){
            switch($upfile['error']){
                case 1:
                    $info="file size exceed php.ini - upload_max_filesize.";
                    die("Error:".$info);
                case 2:
                    $info="file size exceed html - MAX_FILE_SIZE.";
                    die("Error:".$info);
                case 3:
                    $info="Just part of the file have been uploaded.";
                    die("Error:".$info);
                case 4:
                    $newfile = 'No image';
                    $path = './images/0.jpg';
                    $query = "INSERT INTO images(item_id,name,path)VALUES('$last','$newfile','$path')";
                    $result = $link-> query($query);
                    echo('<div class="text-center">Auction successfully created! <a href ="mylistings.php">View your new listing.</a></div>');
                    die();
                case 5:
                    $info="Cannot find temp directory.";
                    die("Error:".$info);
                case 6:
                    $info="writing file failed";
                    die("Error:".$info);
            }
        }

        //File size filter
        if($upfile['size']>10000000){
            die("file size exceed limitation");
        }

        //File type filter
        if(!in_array($upfile["type"],$typelist)){
            die("Illegal file type!".$upfile["type"]);
        }

        //Generate a new file name
        $fileinfo=pathinfo($upfile["name"]);
        do{
            $newfile=date("YmdHis").rand(1000,9999).".".$fileinfo["extension"];
        }while(file_exists($path.$newfile));

        //Check if this file existed
        if(is_uploaded_file($upfile["tmp_name"])){
            //Upload file (move file)
            if(move_uploaded_file($upfile["tmp_name"],$path.$newfile)){
                //Store pic name and path into database
                $query = "INSERT INTO images(item_id,name,path)VALUES('$last','$newfile','$path$newfile')";
                $result = $link -> query($query);

                if($result){
                    echo "<script>alert('Picture uploaded successfully')</script>";
                }
                else{
                    echo"Request failed, please try again";
                }
            }else{
                die("Update file failed!");
            }
        }else{
            die("Not a file!");
        }


        mysqli_close($link);

}

// If all is successful, let user know.
echo('<div class="text-center">Auction successfully created! <a href ="mylistings.php">View your new listing.</a></div>');


?>

</div>


<?php include_once("footer.php")?>