OverLord Shell

<?php
error_reporting(0);
session_start();

if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}
require_once("db/conn.php");
$target_dir="uploads/resume/";
 $resume=$_FILES['resume']['name'];
if(!empty($resume)){
	$ftype=$_FILES['resume']['type'];
	if($_FILES['resume']['error']==1){echo "Image upload error.";exit;}
	else{
		if($_FILES['resume']['size'] < 2*1024*1024){
			
				$ext=explode('.',basename($resume));
				$ext=end($ext);
				$file_name=date('YmdHis').".".$ext;
			
		}else{echo "Image size error. Max size is 2 MB.";exit;}
	}
}else{$file_name=$_POST['old_resume'];}



$edu_id= htmlentities(str_replace("'"," "," ".$_POST['edu_id']." "),ENT_QUOTES);
$course= htmlentities(str_replace("'"," "," ".$_POST['course']." "),ENT_QUOTES);
$specialization= htmlentities(str_replace("'"," "," ".$_POST['specialization']." "),ENT_QUOTES);
$college= htmlentities(str_replace("'"," "," ".$_POST['college']." "),ENT_QUOTES);
$course_type= htmlentities(str_replace("'"," "," ".$_POST['course_type']." "),ENT_QUOTES);
$passing_year= htmlentities(str_replace("'"," "," ".$_POST['passing_year']." "),ENT_QUOTES);
$skill= htmlentities(str_replace("'"," "," ".$_POST['skill']." "),ENT_QUOTES);
$job_description= htmlentities(str_replace("'"," "," ".$_POST['job_description']." "),ENT_QUOTES);
$data = array(
        'resume' => $file_name,
		'higher_edu' => $edu_id,
        'course' => $course,
        'specialization' => $specialization,
        'college' => $college,
        'course_type' => $course_type,
        'passing_year' => $passing_year,
        'skill' => $skill,
        'job_description' => $job_description, 
		'modifyedon' => date('Y-m-d H:i:s')
	);
	
	//print_r($data);exit;
	$insertresult = dbRowUpdate('busdir_mst_jobprofile', $data,'company_id = '.$_SESSION['company_id'].'');

   // dbRowUpdate('busdir_mst_jobprofile', $data);
	 $insertresultarr = explode("-",$insertresult);
	
	
	if($insertresultarr[0]=='success'){
		if(!empty($resume)){
		
         @move_uploaded_file($_FILES['resume']['tmp_name'], $target_dir.$file_name);
		}
        echo "success";
        
    }
?>