<?php
include('connection.php');
$order_no=$_POST['order_no'];
$address=$_POST['address'];
$customer=$_POST['customer'];
$contact=$_POST['contact'];
$city=$_POST['city'];
$state=$_POST['state'];
$pin=$_POST['pin'];
$gst=$_POST['gst'];
$program=$_POST['program'];
$program_date=$_POST['program_date'];
$totalamount=$_POST['totalamount'];
$famount=$_POST['famount'];
$cid=$_REQUEST['id'];
$lid=$_POST['lid'];
$remarks=$_POST['remarks'];



$sql2="select * from customer_details where cid='$cid'";
$result2=mysql_query($sql2)or die(mysql_error());
$row2=mysql_fetch_array($result2);
$file1=$row2['file1'];
$file2=$row2['file2'];


if(!empty($_FILES["file1"]["tmp_name"]))
 {
$uploads_dir = 'uploads/customer';

        $tmp_name = $_FILES["file1"]["tmp_name"];
        // basename() may prevent filesystem traversal attacks;
        // further validation/sanitation of the filename may be appropriate
        $name = basename($_FILES["file1"]["name"]);
        $random_digit=rand(0000,9999);
        $new_file_name1=$random_digit.$name;

        move_uploaded_file($tmp_name, "$uploads_dir/$new_file_name1");
		unlink('uploads/customer/'.$file1);
		if(empty($new_file_name1))
			$new_file_name1=$file1;
 }
 else
	 $new_file_name1=$file1;
	 
if(!empty($_FILES["file2"]["tmp_name"]))
 {
$uploads_dir = 'uploads/customer';

        $tmp_name = $_FILES["file2"]["tmp_name"];
        // basename() may prevent filesystem traversal attacks;
        // further validation/sanitation of the filename may be appropriate
        $name = basename($_FILES["file2"]["name"]);
        $random_digit=rand(0000,9999);
        $new_file_name2=$random_digit.$name;

        move_uploaded_file($tmp_name, "$uploads_dir/$new_file_name2");
		unlink('uploads/customer/'.$file2);
		if(empty($new_file_name2))
			$new_file_name2=$file2;
 }
 else
	 $new_file_name2=$file2;

if(isset($_REQUEST['submit']))
{
    if(empty($lid))
    {
      $sql="update customer_details set order_no='$order_no',address='$address',city='$city',state='$state',pin='$pin',gst='$gst',program='$program',pdate='$program_date',total_amount='$totalamount',famount='$famount',remarks='$remarks' ,`file1`='$new_file_name1',`file2`='$new_file_name2',`customer`='$customer', `phone`='$contact' where cid='$cid'";  
    }
    else
    {
 $sql="update customer_details set lid='$lid',order_no='$order_no',address='$address',city='$city',state='$state',pin='$pin',gst='$gst',program='$program',pdate='$program_date',total_amount='$totalamount',famount='$famount',remarks='$remarks' ,`file1`='$new_file_name1',`file2`='$new_file_name2',`customer`='$customer', `phone`='$contact' where cid='$cid'";
}
	mysql_query($sql);
    	
	header('location:customer_management.php?log=edit');
	echo '<META HTTP-EQUIV="Refresh" Content="0; URL=customer_management.php?log=edit">'; 
}
?>