invisio v2.0

<?php

include('../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

if (!empty($_FILES["slip_image"]) && $_FILES["slip_image"]["name"] != "") {

$file = explode(".", $_FILES["slip_image"]['name']);
    $file_surname = end($file);
    $filename_images = md5(date("dmYhis") . rand(1000, 9999)) . "." . $file_surname;
    $target_file = "../../../upload/slip/" . $filename_images;

if (move_uploaded_file($_FILES["slip_image"]["tmp_name"], $target_file)) {

$payment_id = mysqli_real_escape_string($connection, $_POST["payment_id"]);
        $transfer_date = datePickerValue(mysqli_real_escape_string($connection, $_POST["transfer_date"]));
        $transfer_time_h = mysqli_real_escape_string($connection, $_POST["transfer_time_h"]);
        $transfer_time_m = mysqli_real_escape_string($connection, $_POST["transfer_time_m"]);
        $transfer_time = $transfer_time_h.":".$transfer_time_m.":00";
        $payment_remark = mysqli_real_escape_string($connection, $_POST['payment_remark']);

$sql = "UPDATE `tbl_member_payment` SET `payment_type` = '2', `slip_image` = '$filename_images', `transfer_date` = '$transfer_date', `transfer_time` = '$transfer_time', `payment_remark` = '$payment_remark' WHERE `tbl_member_payment`.`payment_id` = '$payment_id'";
        $rs = mysqli_query($connection, $sql);
        if ($rs) {

// $member_id = mysqli_real_escape_string($connection, $_POST['member_id']);
            // $sql_level = "SELECT register_level FROM tbl_member WHERE member_id = '$member_id'";
            // $res_level = mysqli_query($connection, $sql_level);
            // $row_level = mysqli_fetch_assoc($res_level);

// $arr['level'] = $row_level['register_level'];

$status = 1;
        } else {
            $status = 0;
        }

} else {
        $status = 0;
    }

} else {
    $status = 0;
}

$arr['status'] = $status;

echo json_encode($arr);