OverLord Shell

<?php
error_reporting(0);
session_start();


if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}
require_once("db/conn.php");
$target_dir="uploads/jobprofile/";
$photo=$_FILES['photo']['name'];
if(!empty($photo)){
	$ftype=$_FILES['photo']['type'];
	if($_FILES['photo']['error']==1){echo "Image upload error.";exit;}
	else{
		if($_FILES['photo']['size'] < 2*1024*1024){
			if($ftype=="image/jpeg" || $ftype=="image/pjpeg" || $ftype=="image/gif" || $ftype=="image/png"){
				$ext=explode('.',basename($photo));
				$ext=end($ext);
				$file_name=date('YmdHis').".".$ext;
			}else{echo "Image type error. Only JPG, PNG and GIF allowed.";exit;}
		}else{echo "Image size error. Max size is 2 MB.";exit;}
	}
}else{$file_name=$_POST['old_photo'];}



$profesionalbk= htmlentities(str_replace("'"," "," ".$_POST['profesionalbk']." "),ENT_QUOTES);
$industry= htmlentities(str_replace("'"," "," ".$_POST['industry']." "),ENT_QUOTES);
$farea= htmlentities(str_replace("'"," "," ".$_POST['farea']." "),ENT_QUOTES);
$wklocation= htmlentities(str_replace("'"," "," ".$_POST['wklocation']." "),ENT_QUOTES);
$wkexp= htmlentities(str_replace("'"," "," ".$_POST['wkexp']." "),ENT_QUOTES);
$jobcategory= htmlentities(str_replace("'"," "," ".$_POST['jobcategory']." "),ENT_QUOTES);
$relocated= htmlentities(str_replace("'"," "," ".$_POST['relocated']." "),ENT_QUOTES);
$ctc= htmlentities(str_replace("'"," "," ".$_POST['ctc']." "),ENT_QUOTES);
$dob= htmlentities(str_replace("'"," "," ".$_POST['dob']." "),ENT_QUOTES);
$gender= htmlentities(str_replace("'"," "," ".$_POST['gender']." "),ENT_QUOTES);
$maritalstatus= htmlentities(str_replace("'"," "," ".$_POST['maritalstatus']." "),ENT_QUOTES);
$keyword= htmlentities(str_replace("'"," "," ".$_POST['keyword']." "),ENT_QUOTES); 
$data = array(
        'photo' => $file_name,
		'profesionalbk' => $profesionalbk,
        'industry' => $industry,
        'farea' => $farea,
        'wklocation' => $wklocation,
        'wkexp' => $wkexp,
        'jobcategory' => $jobcategory,
        'relocated' => $relocated,
        'ctc' => $ctc,
        'dob' => $dob,
        'gender' => $gender,
		'maritalstatus' => $maritalstatus	,
        'keyword' => $keyword, 
		'modifyedon' => date('Y-m-d H:i:s')
	);
	
	//print_r($data);exit;
	$insertresult = dbRowUpdate('busdir_mst_jobprofile', $data,'company_id = '.$_SESSION['company_id'].'');

   // dbRowUpdate('busdir_mst_jobprofile', $data);
	$insertresultarr = explode("-",$insertresult);
	
	
	if($insertresultarr[0]=='success'){
        @move_uploaded_file($_FILES['photo']['tmp_name'], $target_dir.$file_name);
        echo "success";
        
    }
?>