HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux host 6.8.0-107-generic #107-Ubuntu SMP PREEMPT_DYNAMIC Fri Mar 13 19:51:50 UTC 2026 x86_64
User: w230 (1248)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /var/www/w230/html/election/admin/add_candidate.php
<?php
include('../config/connect.php');
session_start();
if (!isset($_SESSION['admin'])) {
    header("Location: login.php");
    exit;
}

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $name = $_POST['name'];
    $number = $_POST['number'];

    // upload รูป
    $img = $_FILES['photo']['name'];
    $tmp = $_FILES['photo']['tmp_name'];
    move_uploaded_file($tmp, "../assets/img/$img");

    $sql = "INSERT INTO candidates (name, photo, number) VALUES ('$name', '$img', '$number')";
    mysqli_query($conn, $sql);
    header("Location: candidate_list.php");
}
?>
<!DOCTYPE html>
<html lang="th">
<head>
    <meta charset="UTF-8">
    <title>เพิ่มผู้สมัคร</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
</head>
<body class="bg-light">
<div class="container mt-5">
    <h3>เพิ่มผู้สมัคร</h3>
    <form method="post" enctype="multipart/form-data">
        <div class="mb-3">
            <label class="form-label">ชื่อผู้สมัคร</label>
            <input type="text" name="name" class="form-control" required>
        </div>
        <div class="mb-3">
            <label class="form-label">หมายเลข</label>
            <input type="number" name="number" class="form-control" required>
        </div>
        <div class="mb-3">
            <label class="form-label">รูปภาพ</label>
            <input type="file" name="photo" class="form-control" accept="image/*" required>
        </div>
        <button class="btn btn-primary">บันทึก</button>
        <a href="candidate_list.php" class="btn btn-secondary">ยกเลิก</a>
    </form>
</div>
</body>
</html>