📄 File: career_form_code.php

Path: //home2/outerorb/dev.outerorbittech.com/oot/career_form_code.php

Size: 7.53 KB

Permissions: 0644

<?php
// echo "<pre>";
// print_r($_FILES);
// echo "</pre>";
// exit;

include_once("include/main.inc.php");
$admin_res = getAdminDetails();
date_default_timezone_set('Asia/Kolkata');

$enq_date = date('Y-m-d H:i:s');
$referer = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '';
$ip = $_SERVER['REMOTE_ADDR'];

if (isset($_POST['apply_submit'])) {

    // Escape all inputs to prevent SQL injection
    $db = $GLOBALS['dbconn'];
    $position = mysqli_real_escape_string($db, $_POST['position'] ?? '');
    $name = mysqli_real_escape_string($db, $_POST['name'] ?? '');
    $mobile = mysqli_real_escape_string($db, $_POST['mobile'] ?? '');
    $email = mysqli_real_escape_string($db, $_POST['email'] ?? '');
    $father = mysqli_real_escape_string($db, $_POST['father'] ?? '');
    $aadhar = mysqli_real_escape_string($db, $_POST['aadhar'] ?? '');
    $address = mysqli_real_escape_string($db, $_POST['address'] ?? '');
    $pin = mysqli_real_escape_string($db, $_POST['pincode'] ?? '');
    $state = mysqli_real_escape_string($db, $_POST['state'] ?? '');
    $city = mysqli_real_escape_string($db, $_POST['city_name'] ?? '');
    $adult = mysqli_real_escape_string($db, $_POST['olderOrNot'] ?? '');
    $relocate = mysqli_real_escape_string($db, $_POST['willingOrNot'] ?? '');
    $education = mysqli_real_escape_string($db, $_POST['education'] ?? '');
    $degree = mysqli_real_escape_string($db, $_POST['certificate'] ?? '');
    $school = mysqli_real_escape_string($db, $_POST['Institute'] ?? '');
    $passing_year = mysqli_real_escape_string($db, $_POST['passingdate'] ?? '');
    $result = mysqli_real_escape_string($db, $_POST['result'] ?? '');
    $shift = mysqli_real_escape_string($db, $_POST['dayOrNight'] ?? '');
    $experience = mysqli_real_escape_string($db, $_POST['experience'] ?? '');
    $uan = mysqli_real_escape_string($db, $_POST['uan'] ?? '');
    $language = mysqli_real_escape_string($db, $_POST['language'] ?? '');
    $oot_emp = mysqli_real_escape_string($db, $_POST['outer'] ?? '');
    $university = mysqli_real_escape_string($db, $_POST['board'] ?? '');

    $pdf_name = '';
    if (isset($_FILES['resume']) && $_FILES['resume']['error'] === UPLOAD_ERR_OK) {

        $allowed_ext = ['pdf', 'doc', 'docx'];
        $file_tmp = $_FILES['resume']['tmp_name'];
        $file_name = basename($_FILES['resume']['name']);
        $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));

        if (!in_array($file_ext, $allowed_ext)) {
            die(json_encode([
                'message_response' => 'Only PDF/DOC/DOCX files allowed.',
                'status' => false
            ]));
        }


        $pdf_name = time() . "_" . preg_replace("/[^a-zA-Z0-9\.\-_]/", "", $file_name);

        $upload_dir = __DIR__ . "/resume/";
        if (!is_dir($upload_dir)) {
            mkdir($upload_dir, 0777, true);
        }

        if (move_uploaded_file($file_tmp, $upload_dir . $pdf_name)) {

        } else {
            die(json_encode([
                'message_response' => 'File move failed! Check folder permission (resume/ must be writable).',
                'status' => false
            ]));
        }
    }

    // =====================
    // Insert into database
    // =====================
    $sql_ens = "INSERT INTO tbl_careerEnq 
        SET position='$position',
            name='$name',
            mobile='$mobile',
            email='$email',
            father='$father',
            aadhar='$aadhar',
            address='$address',
            pin='$pin',
            state='$state',
            city='$city',
            adult='$adult',
            relocate='$relocate',
            education='$education',
            degree='$degree',
            university='$university',
            passing_year='$passing_year',
            result='$result',
            shift='$shift',
            experience='$experience',
            uan='$uan',
            language='$language',
            oot_emp='$oot_emp',
            resume='$pdf_name',
            school='$school',
            en_url='$referer',
            en_ip='$ip',
            en_date='$enq_date'";

    $qry = mysqli_query($db, $sql_ens);

    // Email content
    $subject = utf8_encode(COMPANY . ' - Career Lead from ' . site_url);

    $htmlContent = '<table border="0" width="100%">
        <tbody>
            <tr><td colspan="2"><strong>Dear Admin</strong></td></tr>
            <tr><td colspan="2">Enquiry Received with following info :</td></tr>
            <tr><td><strong>Post URL : </strong></td><td>' . $referer . '</td></tr>
            <tr><td><strong>Position : </strong></td><td>' . $position . '</td></tr>
            <tr><td><strong>Name : </strong></td><td>' . $name . '</td></tr>
            <tr><td><strong>Father Name : </strong></td><td>' . $father . '</td></tr>
            <tr><td><strong>Aadhaar no. : </strong></td><td>' . $aadhar . '</td></tr>
            <tr><td><strong>Email : </strong></td><td>' . $email . '</td></tr>
            <tr><td><strong>Contact No : </strong></td><td>' . $mobile . '</td></tr>
            <tr><td><strong>Address : </strong></td><td>' . $address . '</td></tr>
            <tr><td><strong>State : </strong></td><td>' . $state . '</td></tr>
            <tr><td><strong>City : </strong></td><td>' . $city . '</td></tr>
            <tr><td><strong>Pin code : </strong></td><td>' . $pin . '</td></tr>
            <tr><td><strong>Are you 18 years : </strong></td><td>' . $adult . '</td></tr>
            <tr><td><strong>Willing to relocate : </strong></td><td>' . $relocate . '</td></tr>
            <tr><td><strong>Education Background : </strong></td><td>' . $education . '</td></tr>
            <tr><td><strong>Name of Degree : </strong></td><td>' . $degree . '</td></tr>
            <tr><td><strong>Board/University : </strong></td><td>' . $university . '</td></tr>
            <tr><td><strong>Institute/School : </strong></td><td>' . $school . '</td></tr>
            <tr><td><strong>Year of Passing : </strong></td><td>' . $passing_year . '</td></tr>
            <tr><td><strong>Result : </strong></td><td>' . $result . '</td></tr>
            <tr><td><strong>Night shift : </strong></td><td>' . $shift . '</td></tr>
            <tr><td><strong>Experience : </strong></td><td>' . $experience . '</td></tr>
            <tr><td><strong>UAN/EPF : </strong></td><td>' . $uan . '</td></tr>
            <tr><td><strong>Language Certificate : </strong></td><td>' . $language . '</td></tr>
            <tr><td><strong>Worked with us before : </strong></td><td>' . $oot_emp . '</td></tr>
            <tr>
  <td><strong>Resume : </strong></td>
  <td><a href="' . site_url . '/resume/' . $pdf_name . '" target="_blank">View Resume</a></td>
</tr>
            
        </tbody>
    </table>';


     // $to = $admin_res['email'];
            // $to2 = $admin_res['cc'];
            $to3 = 'vishnu.kumaroot@gmail.com';
  
            // if($to!='')
            // {
            // $mailStatus =  smtp_mailer($to,$email,$name,$subject,$htmlContent);
            // }
            // if($to2!='')
            // {
            // $mailStatus =  smtp_mailer($to2,$email,$name,$subject,$htmlContent);
            // }

            $mailStatus = smtp_mailer($to3,$email,$name,$subject,$htmlContent);

    // Response
    header('Content-Type: application/json');
    if ($qry && $mailStatus == "Sent") {
        echo json_encode([
            'message_response' => 'Thank you for your enquiry. Our team will contact you soon.',
            'status' => true
        ]);
    } else {
        echo json_encode([
            'message_response' => 'Something Went Wrong!',
            'status' => false
        ]);
    }
    exit;
}
?>

← Back to Directory Edit File 🔒 Chmod