FM / admin

/var/www/vhosts/m-auto.co/httpdocs/admin/

/var/www/vhosts/m-auto.co/httpdocs/admin

Name	Size	Mode	Actions
assets/	-	0755	rm
includes/	-	0755	rm
7-6-2026.zip	10206	0644	edit dl rm
about_edit.php	3899	0644	edit dl rm
about_process.php	1367	0644	edit dl rm
auth.php	684	0644	edit dl rm
bookings.php	5367	0644	edit dl rm
booking_delete.php	924	0644	edit dl rm
branches.php	2470	0644	edit dl rm
branch_delete.php	1290	0644	edit dl rm
branch_form.php	4694	0644	edit dl rm
branch_process.php	1233	0644	edit dl rm
brands.php	2578	0644	edit dl rm
brand_delete.php	1327	0644	edit dl rm
brand_form.php	2369	0644	edit dl rm
brand_process.php	1660	0644	edit dl rm
cars.php	6946	0644	edit dl rm
car_delete.php	2886	0644	edit dl rm
car_form.php	40348	0644	edit dl rm
car_image_actions.php	5142	0644	edit dl rm
car_process.php	10426	0644	edit dl rm
categories.php	2167	0644	edit dl rm
category_delete.php	746	0644	edit dl rm
category_form.php	1607	0644	edit dl rm
category_process.php	943	0644	edit dl rm
dashboard.php	4965	0644	edit dl rm
index.php	2713	0644	edit dl rm
login_process.php	1532	0644	edit dl rm
logout.php	100	0644	edit dl rm
news.php	3448	0644	edit dl rm
news_delete.php	771	0644	edit dl rm
news_form.php	6769	0644	edit dl rm
news_process.php	2527	0644	edit dl rm
offers.php	2810	0644	edit dl rm
offer_delete.php	1327	0644	edit dl rm
offer_form.php	4573	0644	edit dl rm
offer_process.php	2115	0644	edit dl rm
settings.php	5217	0644	edit dl rm
settings_process.php	692	0644	edit dl rm
slider.php	3529	0644	edit dl rm
slider_delete.php	1345	0644	edit dl rm
slider_form.php	4529	0644	edit dl rm
slider_process.php	1983	0644	edit dl rm
themes.php	4703	0644	edit dl rm
theme_delete.php	1332	0644	edit dl rm
theme_form.php	1522	0644	edit dl rm
theme_process.php	1785	0644	edit dl rm
users.php	4480	0644	edit dl rm
user_delete.php	1055	0644	edit dl rm
user_form.php	5463	0644	edit dl rm
user_process.php	3193	0644	edit dl rm
videos.php	4942	0644	edit dl rm
video_delete.php	1717	0644	edit dl rm
video_form.php	7181	0644	edit dl rm
video_process.php	3336	0644	edit dl rm

Edit: /var/www/vhosts/m-auto.co/httpdocs/admin/news_process.php (2527B)

<?php
include 'auth.php';
include '../includes/db.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $id = $_POST['id'] ?? null;
    $title = $_POST['title'];
    $content = $_POST['content'];

// Image handling
    $image = null;
    if (isset($_FILES['image']) && $_FILES['image']['error'] == 0) {
        $target_dir = "../uploads/news/";
        if (!is_dir($target_dir)) {
            mkdir($target_dir, 0777, true);
        }
        $image = uniqid() . '-' . basename($_FILES['image']['name']);
        $target_file = $target_dir . $image;
        move_uploaded_file($_FILES['image']['tmp_name'], $target_file);
    }

// Video handling
    $video_type = $_POST['video_type'] ?? 'none';
    $video_url = $_POST['video_url'] ?? '';
    $video_file = $_POST['current_video_file'] ?? null;

if ($video_type === 'file' && isset($_FILES['video_file']) && $_FILES['video_file']['error'] == 0) {
        $target_dir = "../uploads/news/";
        if (!is_dir($target_dir)) {
            mkdir($target_dir, 0777, true);
        }
        $video_file = uniqid() . '-' . basename($_FILES['video_file']['name']);
        $target_file = $target_dir . $video_file;
        move_uploaded_file($_FILES['video_file']['tmp_name'], $target_file);
    }

// Clean up fields based on selected video type
    if ($video_type === 'none') {
        $video_url = null;
        $video_file = null;
    } elseif ($video_type === 'url') {
        $video_file = null;
    } elseif ($video_type === 'file') {
        $video_url = null;
    }

if ($id) {
        // Update existing article
        if ($image) {
            $stmt = $conn->prepare("UPDATE news SET title = ?, content = ?, image = ?, video_type = ?, video_url = ?, video_file = ? WHERE id = ?");
            $stmt->bind_param("ssssssi", $title, $content, $image, $video_type, $video_url, $video_file, $id);
        } else {
            $stmt = $conn->prepare("UPDATE news SET title = ?, content = ?, video_type = ?, video_url = ?, video_file = ? WHERE id = ?");
            $stmt->bind_param("sssssi", $title, $content, $video_type, $video_url, $video_file, $id);
        }
        $stmt->execute();
    } else {
        // Insert new article
        $stmt = $conn->prepare("INSERT INTO news (title, content, image, video_type, video_url, video_file) VALUES (?, ?, ?, ?, ?, ?)");
        $stmt->bind_param("ssssss", $title, $content, $image, $video_type, $video_url, $video_file);
        $stmt->execute();
    }

header("Location: news.php");
    exit;
}
?>

cmd: