invisio v2.0

<?php
session_start();
include('../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

if ($connection) {

$law_id = mysqli_real_escape_string($connection, $_POST['law_id']);
    $law_title = mysqli_real_escape_string($connection, $_POST['law_title']);
    $law_description = mysqli_real_escape_string($connection, $_POST['law_description']);
    $law_link = mysqli_real_escape_string($connection, $_POST['law_link']);
    $date = explode('/', $_POST['announce_date']);
    $announce_date = date('Y-m-d', strtotime($date['0'] ."-" . $date['1'] . "-" . $date['2']));

$sql_insert = "UPDATE tbl_law SET
    law_title = '$law_title'
    ,law_description = '$law_description'
    ,law_link = '$law_link'
    ,announce_date = '$announce_date'
    WHERE law_id = '$law_id'
    ";
    $res_insert = mysqli_query($connection, $sql_insert) or die($connection->error);

if ($res_insert) {

if (isset($_FILES['law_file'])) {
            $file_count = count($_FILES['law_file']);
            for ($i = 0; $i < $file_count; $i++) {

$file = explode(".", $_FILES['law_file']['name'][$i]);
                $file_num = count($file) - 1;
                $file_surname = $file[$file_num];
                $filename_images = md5(date('mds') . rand(111, 999) . date("hsid") . rand(111, 999)) . "." . $file_surname;
                $target_file = "../../../files/law_files/" . $filename_images;

if (move_uploaded_file($_FILES["law_file"]["tmp_name"][$i], $target_file)) {

$document_id = getRandomID(10, 'tbl_law_document', 'document_id');
                    $list_order = list_order('tbl_law_document', 'document_list_order', "WHERE law_id = '$law_id'");

$update = "INSERT INTO tbl_law_document SET
                                document_id = '$document_id'
                                ,law_id = '$law_id'
                                ,document_file_name = '$filename_images'
                                ,document_list_order = '$list_order'";

$rs_update = mysqli_query($connection, $update) or die($connection->error);

if ($rs_update) {

$result = 1;
                    } else {

$result = 0;
                    }
                } else {

$result = 0;
                }
            }
        }

$arr['result'] = 1;
    } else {
        $arr['result'] = 0;
    }
} else {
    $arr['result'] = 9;
}

mysqli_close($connection);
echo json_encode($arr);