query("SELECT * FROM local_tours WHERE id = $id")->fetch_assoc(); $gallery = $conn->query("SELECT * FROM local_tour_gallery WHERE tour_id = $id"); if ($_SERVER['REQUEST_METHOD'] == 'POST') { $title = sanitize($conn, $_POST['title']); $location = sanitize($conn, $_POST['location']); $description = sanitize($conn, $_POST['description']); $price = (float)$_POST['price']; $update_fields = [ "title = '$title'", "location = '$location'", "description = '$description'", "price = $price" ]; if (!empty($_FILES['main_image']['name'])) { $main_image = time() . '_' . $_FILES['main_image']['name']; move_uploaded_file($_FILES['main_image']['tmp_name'], "../uploads/" . $main_image); $update_fields[] = "main_image = '$main_image'"; } $sql = "UPDATE local_tours SET " . implode(', ', $update_fields) . " WHERE id = $id"; if ($conn->query($sql)) { // Handle Gallery if (!empty($_FILES['gallery']['name'][0])) { foreach ($_FILES['gallery']['tmp_name'] as $key => $tmp_name) { $img_name = time() . '_' . $_FILES['gallery']['name'][$key]; move_uploaded_file($tmp_name, "../uploads/" . $img_name); $conn->query("INSERT INTO local_tour_gallery (tour_id, image) VALUES ($id, '$img_name')"); } } echo ""; } } ?>