OverLord Shell

<?php 
/*
@Purpose: edit product into database
@Author: Rajahree
@CreatedOn: 15 April 2016
@ModifiedOn: 15 April 2016
*/
error_reporting(0);
session_start();
if(!isset($_SESSION['company_id']) || !isset($_SESSION['company_name'])){session_destroy();echo "login.php";exit;}
if(!in_array($_SESSION['loggedin_user'],array('admin','company'))){echo "404.php";exit;}
if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}
require_once("../db/conn.php");

if(!empty($_FILES['catlog']['name']))
{
	$uploadcatlog = uploadFile('catlog',"../uploads/product_catlog",'jpg,jpeg,gif,png,pdf,txt,doc');
	if(!empty($uploadfile[1])){	echo $uploadfile[1];exit;}
}

$data = array(
    'product_name' => $_POST['product_name'],
    'catid' => $_POST['catid'],
    'subcatid' => $_POST['subcatid'],
    'price' => $_POST['price'],
    'discounted_price' => $_POST['discounted_price'],
    'description' => htmlentities($_POST['description'],ENT_QUOTES),
    'createdby' => $_SESSION['company_id'],
    'createdon' => time()
);

$editresult = dbRowUpdate('busdir_product', $data,'product_id = '.$_POST['product_id'].'');
echo $editresult;

$selr->free();
$connection->close();
?>