1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy / public_html /
Filename : productbycat.php
back
<?php
    
    // check if both catId and ctName are set
    if(!isset($_GET['catId']) || !isset($_GET['ctName'])) {
        header("Location:404.php");
    }

    $int_id = $_GET['catId'];
    $pattern = '/^\d+$/';

    if(!preg_match($pattern, $int_id))  { 
        header("Location:404.php"); 
    }

    ////////
    // Todo: create a validation for the check of the category name is alphabet only or not
    ////////

    if(!preg_match('/^[a-zA-Z ]+$/', $_GET['ctName'])) {
        header("Location:404.php");
    }

?>
<?php include "inc/header.php"; ?>
<?php 

    // Added part
    $ctName = trim($_GET['ctName']);
    $ctName = htmlspecialchars($ctName);
    $ctName = $db->link->escape_string($ctName);

    $available_categories= [];

    $sql    = "SELECT * FROM tbl_category WHERE catName='$ctName'";
    $result = $db->link->query($sql);

    while($row= $result->fetch_assoc()) {
        $available_categories[]= $row['catName'];
    }

    if(!in_array($ctName, $available_categories)) {
        header("Location: 404.php");
    }
    // Added part
    
    

    if(!isset($_GET['catId']) || $_GET['catId'] == NULL) {

        echo "<script>window.location='404.php';</script>";

    } else {

        $id= $_GET['catId'];

    }

    if(empty($_GET['ctName'])) {
        header("Location:index.php");
    }


?>

    <!-- More products -->
    <section id="latest-on-black-line" class="px-1">
        <div class="container latest-on-black-line-container" style="max-width: 1300px;">
            <h1 style='color: orange;'>

                <?php 

                    // further check
                    if(isset($_GET['ctName'])) {
                        echo $_GET['ctName'];
                    } else{
                        header("Location:index.php");
                    }

                ?>
        
            </h1>
            <p>Browse into our store and get the thing you need in your hands!</p>
            <div class="dress-items" id="my-products">

                <?php 

                    $catCheck= $cat->checkCatAvailability($_GET['ctName'], $_GET['catId']);
                    // edited part
                    if($catCheck == false) {
                        header("Location: 404.php");
                    }
                    
                    $productByCat= $pd->productByCat($id);

                    if($productByCat) {
                        // $last_prod_id= '';
                        while($result= $productByCat->fetch_assoc()) {

                ?>
                <div class="item">
                    <div class="dress-item-img-container">
                        <a href="preview.php?proid=<?php echo $result['productId']; ?>"><img src="admin/<?php echo $result['image']; ?>" alt=""></a>
                    </div>
                    <div class="dress-bottom-item">
                        <div class="first-child">
                            <b><?php echo $fm->shorten_30($result['productName']); ?></b>
                        </div>
                        <div class="last-child">
                            <a href="preview.php?proid=<?php echo $result['productId']; ?>">Rs. <?php echo $result['price']; ?></a>
                            <!-- <a href="#"><i class="fa fa-shopping-cart"></i> </a> -->
                            <a href="preview.php?proid=<?php echo $result['productId']; ?>" class="btn-2">View product</a>
                        </div>
                    </div>
                </div>

                <?php   
                            $last_prod_id= $result['productId'];

                            }
                        } else {
                            header("Location: 404.php");
                        }

                        function token_product_by_cat() {
                            $token= bin2hex(random_bytes(32));
                            $_SESSION["token_product_by_cat"] = $token;
                            return $token;
                        }
                        
                        echo "<input type='hidden' id='uniq-id' value='{$last_prod_id}'>";
                        echo "<input type='hidden' id='uniq-token' value='". token_product_by_cat() ."'>";

                ?>
            </div>
        </div>
    </section>

    <!-- Section: Features Items -->
    <!-- <section id="features-items" class="prod-by-cat">
        <div class="features-container">
            <div class="features-prod-title">
                <h2 class="feature-title"><?php 

                    // check category from the database, view only if the category is in the database
                    // $catCheck= $cat->checkCatAvailability($_GET['ctName'], $_GET['catId']);

                    if($catCheck) {

                ?></h2>
            </div>
            <div class="features-prod-items">
                <?php 

                    // $productByCat= $pd->productByCat($id);

                    // if($productByCat) {

                    //     while($result= $productByCat->fetch_assoc()) {
                
                ?>
                <div class="feature-prod-item">
                    <img src="admin/<?php // echo $result['image']; ?>" alt="">
                    <p><?php // echo $result['productName']; ?></p>
                    <p><?php // echo $fm->textShorten(htmlspecialchars_decode($result['body']), 10); ?></p>
                    <p>Rs. <?php // echo $result['price']; ?></p>
                    <a href="preview.php?proid=<?php // echo $result['productId']; ?>">See Details <i class="fa fa-chevron-right"></i></a>
                </div>
                <?php 

                    //     }

                    // } else {
                    //     header("Location:404.php");
                        // echo "<p style='width: 100%; text-align: justify; height: 20vh; color: red;'>Sorry, no products available related to this category at this moment</p>";
                    // }
                
                ?>
            </div>
        </div>
    </section> -->

    <?php 
        if($pd->countProductByCat($int_id) > 4):
    ?>
    <!-- Load more -->
    <section id="load-more">
        <div class="container load-more-container" style="display: flex; justify-content: center;">
            <button href="#" class="btn-2" id="load-more-btn" style="outline: none; cursor: pointer;">Show more products...</button>
        </div>
    </section>
    <?php endif; ?>

    <!-- Footer -->
    <?php include "inc/footer.php"; ?>

    <!-- Slider js file -->
    <script type="text/javascript" src="//code.jquery.com/jquery-1.11.0.min.js"></script>
    <script type="text/javascript" src="//code.jquery.com/jquery-migrate-1.2.1.min.js"></script>
    <script>
        $(document).ready(function(){
            // making link to logo
            $("#header-second img").attr("style", "cursor: pointer");
            
            $("#header-second img").click(function() {
                window.location.href='index.php';
            });

        });
    </script>
    <script>

        // $(document).ready(function() {

        //     var postCount= 4;

        //     var totalProdCount= <?php // echo $pd->countProductByCat($int_id); ?>


        //     $("#load-more-btn").click(function() {

        //         postCount += 4;

        //         if(postCount > totalProdCount) {
        //             document.getElementById("load-more").remove();
        //         }
                
        //         // $("#my-products").load("load_prod_by_cat_ajax.php", {
        //         //     prodCount: postCount,
        //         //     id: <?php // $int_id; ?>,
        //         //     ctName: <?php //$_GET['ctName']; ?>
        //         // });

        //         $("#my-products").load("load_prod_by_cat_ajax.php", {
        //             prodCount: postCount,
        //             id: <?php // echo $int_id; ?>,
        //             ctName: '<?php // echo $_GET['ctName']; ?>'
        //         })

        //     });

        // });

        // console.log(catId);

        document.querySelector("#load-more-btn").addEventListener("click", function() {

            const params = new URLSearchParams(window.location.search);
            console.log(typeof params);

            for(let param of params) {
                if(param[0] == 'catId') {
                    var catId= param[1];
                    break;
                }
            }

            for(let param of params) {
                if(param[0] == 'ctName') {
                    var catName= param[1];
                    break;
                }
                
            }

            // var total_prod_count = <?php echo $total_prod_count; ?>;
            var uniq_token       = document.querySelector("#uniq-token").value;
            // console.log(uniq_token);
            // var totalProdCount= <?php echo $pd->countProductByCat($int_id); ?>

            // using vanilla js
            var last_prod_id    = parseInt(document.getElementById("uniq-id").value);
            const Client        = new XMLHttpRequest();
            Client.open("POST", "load_prod_by_cat_ajax.php", true);
            Client.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
            Client.onload= function() {
                if(this.status === 200 && this.readyState  === 4) {
                    if (!$.trim(this.responseText)) {
                        // document.querySelector("#load-more").remove();
                        document.querySelector("#load-more-btn").innerHTML              = "We've only this much 😊";
                        document.querySelector("#load-more-btn").style.backgroundColor  = "rgb(229,35,56)";
                        document.querySelector("#load-more-btn").style.border           = "rgb(229,35,56)";
                        document.querySelector("#load-more-btn").style.cursor           = "auto";
                        document.querySelector("#load-more-btn").setAttribute("disabled", "true");
                    }
                    document.querySelector("#uniq-id").remove();
                    document.querySelector("#uniq-token").remove();
                    $("#my-products").append(this.responseText);
                    
                }
            };

            Client.setRequestHeader("X-Requested-With", "XMLHttpRequest");

            Client.send("last_prod_id="+ last_prod_id + "&uniq_token="+ uniq_token+"&cat_id="+ catId + "&cat_name="+ catName);
            // using vanilla js
        });

    </script>
</body>
</html>

    <?php } else {
        header("Location: 404.php");
    } ?>