1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy / www /
Filename : load_more_prod_ajax.php
back
<?php
    function is_ajax_request() {
        return isset($_SERVER['HTTP_X_REQUESTED_WITH']) && 
                $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest';
    }

    if(!is_ajax_request()) {
        exit;
    }

    session_start();

    // Added part, for session security
    // ini_set( 'session.cookie_httponly', 1 );
    // ini_set( 'session.use_strict_mode', 1 );
    
    function token_load_m_p() {
        $token= bin2hex(random_bytes(32));
        $_SESSION["token_load_more_prod"] = $token;
        return $token;
    }

    // Check for the post request
    if(isset($_POST)) {
        // Validate token
        if(isset($_POST['uniq_token'])) {
            if($_POST['uniq_token'] != $_SESSION['token_load_more_prod']) {
                exit;
            }
        } else {
            exit;
        }

        if(isset($_POST['last_prod_id'])) {

            if(!preg_match('/^[0-9]+$/', $_POST['last_prod_id'])) {
                // header("Location:index.php");
                exit;
            }

        } else  {
            exit;
        }

    }

    // require the database connection handler.
    include_once("lib/Database.php");
    include_once("classes/Product.php");
    include_once("helpers/Format.php");

    $fm= new Format();

    // instantiate the database object.
    $db= new Database();
    
    // $product_count= $db->link->escape_string($_POST['prodCount']);
    $last_prod_id = htmlspecialchars($_POST['last_prod_id']);
    $last_prod_id = $db->link->escape_string($last_prod_id);

    // print_r($db->link);
    // print_r(new Product);

    $product= new Product();

    // $query= "SELECT * FROM tbl_product where type=2 ORDER BY productId ASC LIMIT 4";

    // $getNpd= $product->getMoreProdByCat($id, $product_count);
    $getNpd= $product->getMoreProdAjax(8, $last_prod_id);

    if($getNpd) {
        while($result= $getNpd->fetch_assoc()) {

?>
<div class="item">
    <div class="dress-item-img-container">
        <a href="preview.php?proid=<?php echo $result['productId']; ?>"><img src="admin/<?php echo $result['image']; ?>" alt=""></a>
    </div>
    <div class="dress-bottom-item">
        <div class="first-child">
            <b><?php echo $fm->shorten_30($result['productName']); ?></b>
        </div>
        <div class="last-child">
            <a href="preview.php?proid=<?php echo $result['productId']; ?>">Rs. <?php echo $result['price']; ?></a>
            <!-- <a href="#"><i class="fa fa-shopping-cart"></i> </a> -->
            <a href="preview.php?proid=<?php echo $result['productId']; ?>" class="btn-2">View product</a>
        </div>
    </div>
</div>

<?php 
    $last_prod_id= $result['productId'];

        }
        echo "<input type='hidden' id='uniq-id' value='$last_prod_id'>";
        echo "<input type='hidden' id='uniq-token' value='". token_load_m_p() ."'>";
        ?> 
    <!-- <input type='hidden' id='uniq-id' value='<?php // echo $last_prod_id ?>'> -->
    <?php }?>