invisio v2.0

<?php
include('../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

// $member_id = mysqli_real_escape_string($connection, $_POST['member_id']);

$member_id = mysqli_real_escape_string($connection, $_POST['member_id']);
$temp_id = explode(".", $member_id);
$member_id = bigsara_decode($temp_id[0], $temp_id[1]);

$register_type = mysqli_real_escape_string($connection, $_POST['register_type']);
$register_level = mysqli_real_escape_string($connection, $_POST['register_level']);

if ($register_level == 'g9k1s') {
    $level = '1';
} elseif ($register_level == 'kki22') {
    $level = '2';
} elseif ($register_level == 'x9fkq') {
    $level = '3';
}

$table_detail = "";
if ($register_type == 1) {
    $table_detail = "tbl_member_detail_employer";
} // ทั่วไป 
else if ($register_type == 2) {
    $table_detail = "tbl_member_detail_company";
} // สมาชิกสามัญ
else if ($register_type == 3) {
    $table_detail = "tbl_member_detail_agency";
} // วิสมาชิกสามัญ
else if ($register_type == 4) {
    $table_detail = "tbl_member_detail_worker";
} // กิติมาศักดิ์

$sql_doc = "SELECT * FROM tbl_member_document WHERE member_id = '$member_id' ORDER BY document_list_order ASC";
// $sql_doc = "SELECT * FROM tbl_member_document WHERE member_id = '$member_id' ORDER BY document_list_order ASC";
$res_doc = mysqli_query($connection, $sql_doc);
$num_list = mysqli_num_rows($rs);

// $sql = "SELECT * FROM tbl_register_document WHERE register_type = '$level' AND member_type = '$register_type' ORDER BY list_order ASC";
// $rs = mysqli_query($connection, $sql);
// $num_list = mysqli_num_rows($rs);

<div class="btn badge-warning btn-xs p-1 mb-2 " onclick="AddDocument('<?php echo $member_id ?>')">แนบเอกสารเพิ่มเติม</div>

<div class="row mb-3">
    <?php while ($row_doc = mysqli_fetch_assoc($res_doc)) {

<div class="col-3 mb-3">
            <div class="card text-left">
                <img class="card-img-top" src="holder.js/100px180/" alt="">
                <div class="card-body">

<?php
                    $file_type = explode('.', $row_doc['document_file_name']);
                    if (strtolower($file_type[1]) == 'pdf') {
                    ?>
                        <div style="position:relative; width:200px">
                            <button type="button" class="btn btn-danger btn-sm text-white" onclick="DeleteApp('<?php echo $row_doc['document_id']; ?>')" style="position:absolute; top:0; right:0;">X</button>
                            <a href="../../../main/upload/join/file/<?php echo $row_doc['document_file_name']; ?>" target="_blank">
                                <img src="../../../main/upload/join/file/pdf_icon.jpg" alt="" width="200px">
                            </a>
                        </div>
                    <?php } else { ?>
                        <div style="position:relative; width:200px">
                            <button type="button" class="btn btn-danger btn-sm text-white" onclick="DeleteApp('<?php echo $row_doc['document_id']; ?>')" style="position:absolute; top:0; right:0;">X</button>
                            <a href="../../../main/upload/join/file/<?php echo $row_doc['document_file_name']; ?>" target="_blank">
                                <img src="../../../main/upload/join/file/<?php echo $row_doc['document_file_name']; ?>" alt="" width="200px">
                            </a>
                        </div>
                    <?php } ?>
                </div>
            </div>
        </div>
    <?php } ?>
</div>