Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.54.1.lve.el8.x86_64

PHP Version:

7.3.33

User:

u435171512

Directory:

/home/u435171512/domains/demo.sigmacomputers.in/public_html/tmrda_0/catalog/model/account/vendor

Free Space:

3.51 TB

🔧 Quick Actions

✏️ Editing: lts_review.php

<?php
class ModelAccountVendorLtsReview extends Model {
	public function addReview($product_id, $data,$vendor_info) {
	// echo '<pre>'; print_r( $vendor_info);die;
		$this->db->query("INSERT INTO " . DB_PREFIX . "review SET author = '" . $this->db->escape($data['name']) . "', customer_id = '" . (int)$this->customer->getId() . "', product_id = '" . (int)$product_id . "', text = '" . $this->db->escape($data['text']) . "', rating = '" . (int)$data['rating'] . "', date_added = NOW()");;

$review_id = $this->db->getLastId();
     
		$this->db->query("INSERT INTO ". DB_PREFIX ."lts_review SET review_id= '". (int)$review_id ."', product_id = '". (int)(int)$product_id  ."', vendor_id='". (int)$vendor_info['vendor_id'] ."'");

$this->cache->delete('product');

return $review_id; 
	}

public function editReview($review_id, $vendor_id, $data) {
		$this->db->query("UPDATE " . DB_PREFIX . "review SET author = '" . $this->db->escape($data['author']) . "', product_id = '" . (int)$data['product_id'] . "', text = '" . $this->db->escape(strip_tags($data['text'])) . "', rating = '" . (int)$data['rating'] . "', status = '" . (int)$data['status'] . "', date_added = '" . $this->db->escape($data['date_added']) . "', date_modified = NOW() WHERE review_id = '" . (int)$review_id . "'");

$this->db->query("UPDATE " . DB_PREFIX . "lts_review SET review_id= '". (int)$review_id ."', product_id = '". (int)$data['product_id'] ."' WHERE review_id = '". (int)$review_id ."' AND vendor_id='". (int)$data['vendor_id'] ."' ");

$this->cache->delete('product');
	}

public function deleteReview($review_id, $vendor_id) {
		$this->db->query("DELETE FROM " . DB_PREFIX . "review WHERE review_id = '" . (int)$review_id . "'");
		$this->db->query("DELETE FROM " . DB_PREFIX . "lts_review WHERE review_id = '" . (int)$review_id . "' AND vendor_id='". (int)$vendor_id ."'");

$this->cache->delete('product');
	}

public function getReview($review_id, $vendor_id) {

$query = $this->db->query("SELECT DISTINCT *, (SELECT pd.name FROM " . DB_PREFIX . "product_description pd WHERE pd.product_id = r.product_id AND pd.language_id = '" . (int)$this->config->get('config_language_id') . "') AS product FROM " . DB_PREFIX . "review r RIGHT JOIN ". DB_PREFIX ."lts_review lr ON (lr.review_id = r.review_id) WHERE r.review_id = '" . (int)$review_id . "' AND lr.vendor_id='". (int)$vendor_id ."' ");

return $query->row;
	}

public function getReviews($data = array()) {
		$sql = "SELECT r.review_id, pd.name, r.author, r.rating, r.status, r.date_added FROM " . DB_PREFIX . "review r LEFT JOIN " . DB_PREFIX . "product_description pd ON (r.product_id = pd.product_id) RIGHT JOIN ". DB_PREFIX ."lts_review lr ON(lr.review_id = r.review_id) WHERE lr.vendor_id='". (int)$data['vendor_id'] ."' AND  pd.language_id = '" . (int)$this->config->get('config_language_id') . "'";

if (!empty($data['filter_product'])) {
			$sql .= " AND pd.name LIKE '" . $this->db->escape($data['filter_product']) . "%'";
		}

if (!empty($data['filter_author'])) {
			$sql .= " AND r.author LIKE '" . $this->db->escape($data['filter_author']) . "%'";
		}

if (isset($data['filter_status']) && $data['filter_status'] !== '') {
			$sql .= " AND r.status = '" . (int)$data['filter_status'] . "'";
		}

if (!empty($data['filter_date_added'])) {
			$sql .= " AND DATE(r.date_added) = DATE('" . $this->db->escape($data['filter_date_added']) . "')";
		}

$sort_data = array(
			'pd.name',
			'r.author',
			'r.rating',
			'r.status',
			'r.date_added'
		);

if (isset($data['sort']) && in_array($data['sort'], $sort_data)) {
			$sql .= " ORDER BY " . $data['sort'];
		} else {
			$sql .= " ORDER BY r.date_added";
		}

if (isset($data['order']) && ($data['order'] == 'DESC')) {
			$sql .= " DESC";
		} else {
			$sql .= " ASC";
		}

if (isset($data['start']) || isset($data['limit'])) {
			if ($data['start'] < 0) {
				$data['start'] = 0;
			}

if ($data['limit'] < 1) {
				$data['limit'] = 20;
			}

$sql .= " LIMIT " . (int)$data['start'] . "," . (int)$data['limit'];
		}

$query = $this->db->query($sql);

return $query->rows;
	}

public function getTotalReviews($data = array()) {
		
		$sql = "SELECT COUNT(*) AS total FROM " . DB_PREFIX . "review r LEFT JOIN " . DB_PREFIX . "product_description pd ON (r.product_id = pd.product_id) RIGHT JOIN ". DB_PREFIX ."lts_review lr ON (lr.review_id = r.review_id) WHERE pd.language_id = '" . (int)$this->config->get('config_language_id') . "' AND lr.vendor_id='". (int)$data['vendor_id'] ."'";

if (!empty($data['filter_product'])) {
			$sql .= " AND pd.name LIKE '" . $this->db->escape($data['filter_product']) . "%'";
		}

if (!empty($data['filter_author'])) {
			$sql .= " AND r.author LIKE '" . $this->db->escape($data['filter_author']) . "%'";
		}

if (isset($data['filter_status']) && $data['filter_status'] !== '') {
			$sql .= " AND r.status = '" . (int)$data['filter_status'] . "'";
		}

if (!empty($data['filter_date_added'])) {
			$sql .= " AND DATE(r.date_added) = DATE('" . $this->db->escape($data['filter_date_added']) . "')";
		}

$query = $this->db->query($sql);

return $query->row['total'];
	}

public function getTotalReviewsAwaitingApproval() {
		$query = $this->db->query("SELECT COUNT(*) AS total FROM " . DB_PREFIX . "review WHERE status = '0'");

return $query->row['total'];
	}
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: lts_review.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation