????????????????????
??????????????????
ÿØÿà
 JFIF 

  
 
  ÿÛ C      


!"$"$ÿÛ C
    
ÿÂ p 

" 

ÿÄ  

 

  
        
 ÿÄ 


 

           
ÿÚ 

   
ÕÔË®

(%	aA*‚XYD¡(J„¡E¢RE,P€XYae )(E¤²€B¤R¥	BQ¤¢ X«)X…€¤   
@  

adadasdasdasasdasdas


.....................................................................................................................................????????????????????
??????????????????
ÿØÿà
 JFIF 

  
 
  ÿÛ C      


!"$"$ÿÛ C
    
ÿÂ p 

" 

ÿÄ  

 

  
        
 ÿÄ 


 

           
ÿÚ 

   
ÕÔË®

(%	aA*‚XYD¡(J„¡E¢RE,P€XYae )(E¤²€B¤R¥	BQ¤¢ X«)X…€¤   
@  

adadasdasdasasdasdas


.....................................................................................................................................<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);

include('session.php');

// Database Connection
$conn = mysqli_connect("localhost", "xceljsr_db", "xcel@123#$", "xceljsr_db");

// Check Connection
if (!$conn) {
    die("ERROR: Database connection failed. " . mysqli_connect_error());
}

// Validate Session
if (!isset($_SESSION['userid']) || empty($_SESSION['userid'])) {
    die("ERROR: Invalid session. Please login again.");
}

// Added By
$addedby = mysqli_real_escape_string($conn, $_SESSION['userid']);

// Generate Admission Number
$counter_sql = "SELECT counter FROM admission_counter WHERE id = 1";
$counter_result = mysqli_query($conn, $counter_sql);

if (!$counter_result) {
    die("ERROR: Unable to fetch admission counter.");
}

$counter_row = mysqli_fetch_assoc($counter_result);

if (!$counter_row) {
    die("ERROR: Admission counter record not found.");
}

$admission_no = $counter_row['counter'];

// Update Counter
$update_counter = mysqli_query($conn, "UPDATE admission_counter SET counter = counter + 1 WHERE id = 1");

if (!$update_counter) {
    die("ERROR: Unable to update admission counter.");
}

// ---------------- PERSONAL DETAILS ----------------
$student_name = mysqli_real_escape_string($conn, $_POST['student_name']);
$dob = !empty($_POST['dob']) ? mysqli_real_escape_string($conn, $_POST['dob']) : NULL;
$fathers_name = mysqli_real_escape_string($conn, $_POST['fathers_name']);
$blood_group = mysqli_real_escape_string($conn, $_POST['blood_group']);
$nationality = mysqli_real_escape_string($conn, $_POST['nationality']);
$marital_status = mysqli_real_escape_string($conn, $_POST['marital_status']);
$qualification = mysqli_real_escape_string($conn, $_POST['qualification']);
$aadhar_no = mysqli_real_escape_string($conn, $_POST['aadhar_no']);
$language = mysqli_real_escape_string($conn, $_POST['language']);

// ---------------- CONTACT DETAILS ----------------
$present_address = mysqli_real_escape_string($conn, $_POST['present_address']);
$permanent_address = mysqli_real_escape_string($conn, $_POST['permanent_address']);
$trade = mysqli_real_escape_string($conn, $_POST['trade']);
$contact_personal = mysqli_real_escape_string($conn, $_POST['contact_personal']);
$contact_home = mysqli_real_escape_string($conn, $_POST['contact_home']);
$email_id = mysqli_real_escape_string($conn, $_POST['email_id']);

// ---------------- COURSE DETAILS ----------------
$course = mysqli_real_escape_string($conn, $_POST['course']);
$duration = mysqli_real_escape_string($conn, $_POST['duration']);
$course_fee_amount = !empty($_POST['course_fee_amount']) ? floatval($_POST['course_fee_amount']) : 0;
$discount = !empty($_POST['discount']) ? floatval($_POST['discount']) : 0;
$payable_amount = !empty($_POST['payable_amount']) ? floatval($_POST['payable_amount']) : 0;

// ---------------- PHOTO UPLOAD ----------------
$photo_name = "";

if (isset($_FILES['photo']) && $_FILES['photo']['error'] == 0) {

    $upload_dir = "uploads/photos/";

    // Create Folder If Not Exists
    if (!file_exists($upload_dir)) {
        mkdir($upload_dir, 0777, true);
    }

    $file_tmp = $_FILES['photo']['tmp_name'];
    $file_name = $_FILES['photo']['name'];
    $file_size = $_FILES['photo']['size'];
    $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));

    $allowed_ext = ['jpg', 'jpeg', 'png'];

    // Validate Extension
    if (!in_array($file_ext, $allowed_ext)) {
        die("ERROR: Only JPG, JPEG & PNG files are allowed.");
    }

    // Validate File Size (2MB Max)
    if ($file_size > 2 * 1024 * 1024) {
        die("ERROR: Photo size should be less than 2MB.");
    }

    // Generate Unique File Name
    $photo_name = "student_" . $admission_no . "_" . time() . "." . $file_ext;

    $upload_path = $upload_dir . $photo_name;

    // Upload File
    if (move_uploaded_file($file_tmp, $upload_path)) {

    // Verify image
		if (!getimagesize($upload_path)) {
			unlink($upload_path);
			die("ERROR: Invalid or corrupt image uploaded.");
		}
	} else {
		die("ERROR: Failed to upload photo.");
	}
}

// ---------------- INSERT QUERY ----------------
$sql = "INSERT INTO admission (
    admission_no,
    student_name,
    dob,
    fathers_name,
    blood_group,
    nationality,
    marital_status,
    qualification,
    aadhar_no,
    language,
    present_address,
    permanent_address,
    trade,
    contact_personal,
    contact_home,
    email_id,
    course,
    duration,
    course_fee_amount,
    discount,
    payable_amount,
    addedby,
    photo
) VALUES (
    '$admission_no',
    '$student_name',
    " . ($dob ? "'$dob'" : "NULL") . ",
    '$fathers_name',
    '$blood_group',
    '$nationality',
    '$marital_status',
    '$qualification',
    '$aadhar_no',
    '$language',
    '$present_address',
    '$permanent_address',
    '$trade',
    '$contact_personal',
    '$contact_home',
    '$email_id',
    '$course',
    '$duration',
    '$course_fee_amount',
    '$discount',
    '$payable_amount',
    '$addedby',
    '$photo_name'
)";

// Execute Query
if (mysqli_query($conn, $sql)) {

    echo '
    <script>
        alert("Admission Created Successfully! Admission No: ' . $admission_no . '");
        window.location.href = "admission.php";
    </script>
    ';

} else {

    echo "ERROR: Unable to execute query.<br>";
    echo mysqli_error($conn);
}

// Close Connection
mysqli_close($conn);
?>