invisio v2.0

<?php
session_start();
include('../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

if ($connection) {

$text = '';

$admin_id = mysqli_real_escape_string($connection, $_POST['admin_id']);
    $username = mysqli_real_escape_string($connection, $_POST['username']);
    $admin_name = mysqli_real_escape_string($connection, $_POST['admin_name']);
    $password = mysqli_real_escape_string($connection, $_POST['password']);
    $menu_access = $_POST['menu_access'];
    $temp_id = explode(".", $update_user_id);
    $update_user_id = bigsara_decode($temp_id[0], $temp_id[1]);

$randomNumber = rand(5, 10);
    $secure_text = randomCode($randomNumber);
    $secure_pointer = rand(0, 9);

if ($password != '') {
        $temp_password = md5($password);
        $my_password = stringInsert($temp_password, $secure_text, $secure_pointer);
        $up_password = "password = '$my_password'";
    }

foreach ($menu_access as $access) {
        $text .= ($text == '') ? $access : ",$access";
    }

$sql_insert = "UPDATE tbl_admin SET
    username = '$username',
    admin_name = '$admin_name',
    $up_password
    WHERE  admin_id = '$admin_id' ";

$res_insert = mysqli_query($connection, $sql_insert) or die($connection->error);

if ($res_insert) {
        $arr['result'] = 1;
    } else {
        $arr['result'] = 0;
    }
} else {
    $arr['result'] = 9;
}

mysqli_close($connection);
echo json_encode($arr);