FM / public

/home/u764571690/domains/savitrfoundation.com/public_html/

/home/u764571690/domains/savitrfoundation.com/public_html

Name	Size	Mode	Actions
admin/	-	0755	rm
ajax/	-	0755	rm
api/	-	0755	rm
assets/	-	0755	rm
cache/	-	0755	rm
certificate_view/	-	0755	rm
css/	-	0755	rm
documents_upload/	-	0755	rm
F2/	-	0755	rm
finger data/	-	0755	rm
functions/	-	0755	rm
hts-cache/	-	0755	rm
js/	-	0755	rm
logs/	-	0755	rm
pages/	-	0755	rm
privacy policy/	-	0755	rm
savitrfoundation/	-	0755	rm
scholar/	-	0755	rm
terms and conditions/	-	0755	rm
tmp/	-	0755	rm
uploads/	-	0755	rm
.htaccess	3583	0644	edit dl rm
.htaccess.htaccess	9223	0644	edit dl rm
.user.ini	623	0644	edit dl rm
ads.txt	58	0644	edit dl rm
application.php	41647	0644	edit dl rm
backblue.gif	4243	0644	edit dl rm
careers.php	18402	0644	edit dl rm
fade.gif	828	0644	edit dl rm
how to apply.php	44852	0644	edit dl rm
hts-log.txt	2738	0644	edit dl rm
index.php	50	0644	edit dl rm
ngo_account_open.php	27984	0644	edit dl rm
our_scholars.php	11882	0644	edit dl rm
php.ini	617	0644	edit dl rm
reupload_document.php	6038	0644	edit dl rm
robots.txt	291	0644	edit dl rm
scholarshipapply.php	219769	0644	edit dl rm
scholarshipportal.php	89993	0644	edit dl rm
sendmail.php	2720	0644	edit dl rm
sitemap.xml	3743	0644	edit dl rm
submit-internship-application.php	8856	0644	edit dl rm
sw.js	156	0644	edit dl rm
upload_document_main.php	6121	0644	edit dl rm

Edit: /home/u764571690/domains/savitrfoundation.com/public_html/submit-internship-application.php (8856B)

<?php
// Handle internship application form submission
// This handler works exactly like the admin panel's add_intern_ajax.php

// Increase memory limit and execution time for large file uploads
ini_set('memory_limit', '512M');
ini_set('max_execution_time', 600);
ini_set('display_errors', 0);
ini_set('log_errors', 1);

// Check if request is coming from the same site
if (!isset($_SERVER['HTTP_REFERER'])) {
    echo json_encode(['status' => 'error', 'message' => 'No Direct Access Allowed']);
    exit;
}

try {
    // Include database connection
    include_once $_SERVER['DOCUMENT_ROOT'].'/admin/ajax/db_con.php';
    date_default_timezone_set('Asia/Kolkata');
    mysqli_set_charset($con, 'utf8');

// Check if this is a POST request
    if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
        echo json_encode(['status' => 'error', 'message' => 'Invalid request method']);
        exit;
    }

// Check if we have any POST data
    if (empty($_POST) && empty($_FILES)) {
        echo json_encode(['status' => 'error', 'message' => 'No data received. If you uploaded very large files, they may still be processing. Please wait or try again.']);
        exit;
    }

// Check if user has already applied with the same email or mobile number
    $email = isset($_POST['email']) ? mysqli_real_escape_string($con, $_POST['email']) : '';
    $contact_number = isset($_POST['contact_number']) ? mysqli_real_escape_string($con, $_POST['contact_number']) : '';

if (!empty($email) || !empty($contact_number)) {
        $check_query = "SELECT application_id FROM interns WHERE ";
        $conditions = array();
        
        if (!empty($email)) {
            $conditions[] = "email = '$email'";
        }
        
        if (!empty($contact_number)) {
            $conditions[] = "contact_number = '$contact_number'";
        }
        
        if (!empty($conditions)) {
            $check_query .= implode(' OR ', $conditions);
            
            $check_result = mysqli_query($con, $check_query);
            
            if ($check_result && mysqli_num_rows($check_result) > 0) {
                $existing_record = mysqli_fetch_assoc($check_result);
                echo json_encode([
                    'status' => 'error', 
                    'message' => 'You have already applied with internship. Your Application ID is: ' . $existing_record['application_id']
                ]);
                exit;
            }
        }
    }

// Handle file uploads
    $upload_dir = './uploads/interns/';
    if (!is_dir($upload_dir)) {
        if (!mkdir($upload_dir, 0755, true)) {
            echo json_encode(['status' => 'error', 'message' => 'Failed to create upload directory']);
            exit;
        }
    }
    
    $data = array();
    
    // Personal Details - with proper checking
    $data['full_name'] = isset($_POST['full_name']) ? mysqli_real_escape_string($con, $_POST['full_name']) : '';
    $data['father_name'] = isset($_POST['father_name']) ? mysqli_real_escape_string($con, $_POST['father_name']) : '';
    $data['mother_name'] = isset($_POST['mother_name']) ? mysqli_real_escape_string($con, $_POST['mother_name']) : '';
    $data['dob'] = isset($_POST['dob']) ? mysqli_real_escape_string($con, $_POST['dob']) : '';
    $data['gender'] = isset($_POST['gender']) ? mysqli_real_escape_string($con, $_POST['gender']) : '';
    $data['contact_number'] = isset($_POST['contact_number']) ? mysqli_real_escape_string($con, $_POST['contact_number']) : '';
    $data['email'] = isset($_POST['email']) ? mysqli_real_escape_string($con, $_POST['email']) : '';
    $data['address'] = isset($_POST['address']) ? mysqli_real_escape_string($con, $_POST['address']) : '';
    
    // Academic Details - with proper checking
    $data['college_name'] = isset($_POST['college_name']) ? mysqli_real_escape_string($con, $_POST['college_name']) : '';
    $data['course_name'] = isset($_POST['course_name']) ? mysqli_real_escape_string($con, $_POST['course_name']) : '';
    $data['department'] = isset($_POST['department']) ? mysqli_real_escape_string($con, $_POST['department']) : '';
    $data['year_semester'] = isset($_POST['year_semester']) ? mysqli_real_escape_string($con, $_POST['year_semester']) : '';
    $data['enrollment_no'] = isset($_POST['enrollment_no']) ? mysqli_real_escape_string($con, $_POST['enrollment_no']) : '';
    $data['division_batch'] = isset($_POST['division_batch']) ? mysqli_real_escape_string($con, $_POST['division_batch']) : '';
    
    // Internship Details - with proper checking
    $data['internship_type'] = isset($_POST['internship_type']) ? mysqli_real_escape_string($con, $_POST['internship_type']) : 'Online';
    $data['domain'] = isset($_POST['domain']) ? mysqli_real_escape_string($con, $_POST['domain']) : '';
    $data['duration'] = isset($_POST['duration']) ? mysqli_real_escape_string($con, $_POST['duration']) : '';
    $data['mentor_name'] = isset($_POST['mentor_name']) ? mysqli_real_escape_string($con, $_POST['mentor_name']) : '';
    $data['start_date'] = isset($_POST['start_date']) ? mysqli_real_escape_string($con, $_POST['start_date']) : '';
    $data['end_date'] = isset($_POST['end_date']) ? mysqli_real_escape_string($con, $_POST['end_date']) : '';
    $data['location'] = isset($_POST['location']) ? mysqli_real_escape_string($con, $_POST['location']) : '';
    
    // Generate application ID
    $year = date('Y');
    // Get the next auto-increment ID
    $result = mysqli_query($con, "SHOW TABLE STATUS LIKE 'interns'");
    $row = mysqli_fetch_array($result);
    $next_id = $row['Auto_increment'];
    $data['application_id'] = 'SAV' . $year . str_pad($next_id, 6, '0', STR_PAD_LEFT);
    
    // Set default status values
    $data['approval_status'] = 'Pending';
    $data['certificate_status'] = 'Not Issued';
    
    // Create intern-specific upload directory
    $intern_upload_dir = $upload_dir . $data['application_id'] . '/';
    if (!is_dir($intern_upload_dir)) {
        if (!mkdir($intern_upload_dir, 0755, true)) {
            echo json_encode(['status' => 'error', 'message' => 'Failed to create intern upload directory']);
            exit;
        }
    }
    
    // Handle file uploads without size checking
    // Process each file upload
    $fileFields = [
        'photo' => 'photo',
        'college_id_card' => 'college_id_card',
        'aadhar_card' => 'aadhar_front_photo',
        'resume' => 'resume',
        'photo_upload' => 'aadhar_back_photo'
    ];
    
    foreach ($fileFields as $formField => $dbField) {
        if (isset($_FILES[$formField]) && $_FILES[$formField]['error'] == 0) {
            // Check if it's a valid image file
            $allowedTypes = ['image/jpeg', 'image/jpg', 'image/png', 'image/gif'];
            $fileType = mime_content_type($_FILES[$formField]['tmp_name']);
            
            if (!in_array($fileType, $allowedTypes)) {
                echo json_encode([
                    'status' => 'error', 
                    'message' => 'File ' . $formField . ' is not a valid image. Please upload JPG, PNG, or GIF files only.'
                ]);
                exit;
            }
            
            // Generate unique filename and move file
            $fileExtension = pathinfo($_FILES[$formField]['name'], PATHINFO_EXTENSION);
            $fileName = time() . '_' . $formField . '_' . uniqid() . '.' . $fileExtension;
            $uploadPath = $intern_upload_dir . $fileName;
            
            if (move_uploaded_file($_FILES[$formField]['tmp_name'], $uploadPath)) {
                $data[$dbField] = $fileName;
            } else {
                echo json_encode([
                    'status' => 'error', 
                    'message' => 'Failed to upload file ' . $formField . '. Please try again.'
                ]);
                exit;
            }
        }
    }
    
    // Insert the record using the same function as the admin panel
    $result = insertarray("interns", $data);
    
    if (is_numeric($result) && $result > 0) {
        // Return success with the actual application ID
        echo json_encode([
            'status' => 'success',
            'application_id' => $data['application_id'],
            'message' => 'Application submitted successfully'
        ]);
    } else {
        echo json_encode([
            'status' => 'error',
            'message' => 'Error adding record: ' . $result
        ]);
    }
} catch (Exception $e) {
    // Catch any PHP errors and return as JSON
    echo json_encode([
        'status' => 'error',
        'message' => 'An error occurred while processing your request: ' . $e->getMessage()
    ]);
}
?>

cmd: