File "send-message-20260115111526.php"

Full Path: /home/quiczmwg/lightspringdigitals.com/dashboard-20260114051212-20260115034405/send-message-20260115111526.php
File size: 899 bytes
MIME-type: text/x-php
Charset: utf-8

<?php
session_start();
include "./include/head.php";

if (!isset($_SESSION['userid']) || !isset($_POST['product_id'])) {
    echo "unauthorized";
    exit();
}

$userid = $_SESSION['userid'];
$product_id = $_POST['product_id'];
$message = trim($_POST['message']);
$image_name = "";

if (!empty($_FILES['image']['name'])) {
    $upload_dir = "../dashboard/uploads/";
    if (!is_dir($upload_dir)) mkdir($upload_dir, 0777, true);

    $image_name = time() . "_" . basename($_FILES["image"]["name"]);
    $target_file = $upload_dir . $image_name;
    move_uploaded_file($_FILES["image"]["tmp_name"], $target_file);
}

$stmt = $conn->prepare("INSERT INTO product_messages (product_id, sender_role, sender_id, message, image) VALUES (?, 'seller', ?, ?, ?)");
$stmt->bind_param("ssss", $product_id, $userid, $message, $image_name);
if ($stmt->execute()) {
    echo "success";
} else {
    echo "error";
}