Tiny File Manager

Back Back Up Advanced Editor

<?php
//$conn = new mysqli('localhost', 'root', '', 'fsib24');

if ($conn->connect_error) {
    die("connection failed :" . $conn->connect_error);
}

$br_sql = '';
if (isset($_POST['br_search_btn'])) {

$br_zone_name = $conn->real_escape_string($_POST['br_zone_name']);
    $br_name = $conn->real_escape_string($_POST['br_name']);

$br_sql = "select * from location where type='branch'";

if ((!empty($br_zone_name)) and (empty($br_name))) {
        $br_sql .= " and zone_name ='" . $br_zone_name . "'";
    } else if ((!empty($br_zone_name)) and (!empty($br_name))) {
        $br_sql .= " and br_name ='" . $br_name . "' and br_name ='" . $br_name . "'";
    } else if ((empty($br_zone_name)) and (!empty($br_name))) {
        $br_sql .= " and br_name ='" . $br_name . "'";
    }
    
    // print_r($br_sql);

}

$atm_sql = '';
if (isset($_POST['atm_search_btn'])) {

// for atm division is zone
    $atm_zone_name = $conn->real_escape_string($_POST['atm_zone_name']);
    $atm_name = $conn->real_escape_string($_POST['atm_name']);

$atm_sql = "select * from location where type='atm'";

if ((!empty($atm_zone_name)) and (empty($atm_name))) {
        $atm_sql .= " and zone_name ='" . $atm_zone_name . "'";
    } else if ((!empty($atm_zone_name)) and (!empty($atm_name))) {
        $atm_sql .= " and br_name ='" . $atm_name . "' and zone_name ='" . $atm_zone_name . "'";
    } else if ((empty($atm_zone_name)) and (!empty($atm_name))) {
        $atm_sql .= " and br_name ='" . $atm_name . "'";
    }
    // $result=$conn->query($atm_sql);
    // print_r($atm_sql);
}

$crm_sql = '';
if (isset($_POST['search_btn'])) {

// for atm division is zone
    $zone_name = $conn->real_escape_string($_POST['zone_name']);
    $crm_name = $conn->real_escape_string($_POST['crm_name']);

$crm_sql = "select * from location where type='CRM'";

if ((!empty($zone_name)) and (empty($crm_name))) {
        $crm_sql .= " and zone_name ='" . $zone_name . "'";
    } else if ((!empty($zone_name)) and (!empty($crm_name))) {
        $crm_sql .= " and br_name ='" . $crm_name . "' and zone_name ='" . $zone_name . "'";
    } else if ((empty($zone_name)) and (!empty($crm_name))) {
        $crm_sql .= " and br_name ='" . $crm_name . "'";
    }
    
}