1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy / www /
Filename : load_prod_by_cat_ajax.php
back
<?php

    // var_dump(preg_match('/^[0-9]+$/', '123'));exit;
    // echo ($_POST['cat_name']);exit;
    // For preventing access of this file.
    // if(!preg_match('/^[0-9]+$/', $_POST['prodCount'])) {
    //     header("Location:index.php");
    // }

    // if(!preg_match('/^[0-9]+$/', $_POST['id'])) {
    //     header("Location:index.php");
    // }
    
    if(isset($_POST)) {

        if(isset($_POST['cat_id'])) {
            if(!preg_match('/^[0-9]+$/', $_POST['cat_id'])) {
                exit;
            }
        } else {
            exit;
        }

        if(isset($_POST['last_prod_id'])) {
            if(!preg_match('/^[0-9]+$/', $_POST['cat_id'])) {
                exit;
            }
        } else {
            exit;
        }

        if(isset($_POST['cat_name'])) {
            if(!preg_match('/^[a-zA-Z0-9 ]+$/', $_POST['cat_name'])) {
                exit;
            }
        } else {
            exit;
        }

    } else {
        exit;
    }



    // require the database connection handler.
    include_once("lib/Database.php");
    include_once("classes/Product.php");
    include_once("classes/Category.php");
    include_once("helpers/Format.php");

    // Added part, for session security
    // ini_set( 'session.cookie_httponly', 1 );
    // ini_set( 'session.use_strict_mode', 1 );

    // instantiate the database object.
    $db  = new Database();
    $cat = new Category();
    $fm  = new Format();

    $catId = $db->link->escape_string($_POST['cat_id']);
    $catId = (int) $catId;

    
    $catName = $db->link->escape_string($_POST['cat_name']);
    
    $last_prod_id  = $db->link->escape_string($_POST['last_prod_id']);
    $last_prod_id  = (int) $last_prod_id;

    // $cat_name      = $db->link->escape_string($_POST['ctName']);

    $catCheck       = $cat->checkCatAvailability($catName, $catId);

    // var_dump($catCheck);exit;

    if(!$catCheck) {
        exit;
    }

    function token_product_by_cat() {
        $token= bin2hex(random_bytes(32));
        $_SESSION["token_product_by_cat"] = $token;
        return $token;
    }

    $product= new Product();

    // $query= "SELECT * FROM tbl_product where type=2 ORDER BY productId ASC LIMIT 4";

    $getNpd= $product->getMoreProdByCatAjax($last_prod_id, $catId, 8, $catName);
    
    if($getNpd) {
        while($result= $getNpd->fetch_assoc()) {

?>
<div class="item">
    <div class="dress-item-img-container">
        <a href="preview.php?proid=<?php echo $result['productId']; ?>"><img src="admin/<?php echo $result['image']; ?>" alt=""></a>
    </div>
    <div class="dress-bottom-item">
        <div class="first-child">
            <b><?php echo $fm->shorten_30($result['productName']); ?></b>
        </div>
        <div class="last-child">
            <a href="preview.php?proid=<?php echo $result['productId']; ?>">Rs. <?php echo $result['price']; ?></a>
            <!-- <a href="#"><i class="fa fa-shopping-cart"></i> </a> -->
            <a href="preview.php?proid=<?php echo $result['productId']; ?>" class="btn-2">View product</a>
        </div>
    </div>
</div>

<?php 
            $last_prod_id= $result['productId'];
        }

        echo "<input type='hidden' id='uniq-id' value='{$last_prod_id}'>";
        echo "<input type='hidden' id='uniq-token' value='". token_product_by_cat() ."'>";
    }

?>