<?php @session_start(); ?>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<?php
	require('../conn.php');
	if(!empty($_POST['number']) AND !empty($_POST['passw1'])){


    if($_POST['number'] == $_POST['passw1']){
      				//=======================//
      				$c_select = $_POST['c_select'];
      				$c_title = $_POST['c_title'];
      				$c_detail = $_POST['c_detail'];
              $c_from = $_POST['c_from'];
              $c_to = $_POST['c_to'];
              $c_ip = $_SERVER['REMOTE_ADDR'];
      				$c_date = date("Y-m-d H:i:s");
      				//=======================//

      				//======== File =========//
      				if(trim($_FILES["c_file"]["tmp_name"]) != "")
      					{
      						$rand = substr(str_shuffle('ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz9876543210'),0,6);
      						$fileType = $_FILES["c_file"]["type"];
      						copy($_FILES["c_file"]["tmp_name"],"../img/file/to_contact/".$rand.$_FILES["c_file"]["name"]);
      						$new_file = $rand.$_FILES["c_file"]["name"];
      					}
      				//====== End File =======//


      			$sql = "INSERT INTO tb_contact VALUES ('','$c_select','$c_title','$c_detail','$c_from','$c_to','$new_file','$c_ip','$c_date')";
      			$objQuery = $obj_con->query($sql);

      			if($objQuery){
      				echo "<script>window.top.window.showResult_ct('1');</script>";
      			}else{
      				echo "<script>window.top.window.showResult_ct('2');</script>";
      			}

      }else{
        echo "<script>window.top.window.showResult_ct('3');</script>";
      }


			//========================//
		}else{ ?>
	<script language="JavaScript">window.location.href = "../index.php";</script>
<?php } ?>