// ===========================
// Handle Upload & Delete Ajax Request
// ===========================
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$action = $_POST['action'] ?? '';
$cuid = intval($_POST['cuid']);
if ($action === 'upload') {
$image = $_FILES['image'];
$allowed = ['image/jpeg', 'image/png', 'image/jpg', 'image/gif'];
$maxSize = 10 * 10485760 * 10485760; // 10MB
if ($image['error'] === UPLOAD_ERR_OK
&& in_array($image['type'], $allowed)
&& $image['size'] <= $maxSize) {
$ext = pathinfo($image['name'], PATHINFO_EXTENSION);
$newName = 'popup_' . $cuid . '_' . time() . '.' . $ext;
$uploadPath = $uploadDir . $newName;
if (move_uploaded_file($image['tmp_name'], $uploadPath)) {
// hapus gambar lama jika ada
$res = mysqli_query($conn, "SELECT image FROM popup WHERE cuid = $cuid");
$row = mysqli_fetch_assoc($res);
if ($row && !empty($row['image']) && file_exists($uploadDir . $row['image'])) {
unlink($uploadDir . $row['image']);
}
mysqli_query($conn, "UPDATE popup SET image = '$newName' WHERE cuid = $cuid");
echo 'success';
} else {
echo 'error';
}
} else {
echo 'error';
}
exit;
}
if ($action === 'delete') {
$res = mysqli_query($conn, "SELECT image FROM popup WHERE cuid = $cuid");
$row = mysqli_fetch_assoc($res);
if ($row && !empty($row['image'])) {
$filePath = $uploadDir . $row['image'];
if (file_exists($filePath)) unlink($filePath);
mysqli_query($conn, "UPDATE popup SET image = '' WHERE cuid = $cuid");
}
echo 'success';
exit;
}
}
?>
<?php echo $s0['instansi']; ?>