invisio v2.0

<?php

include('../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

$payment_id = mysqli_real_escape_string($connection, $_POST["payment_id"]);
$transfer_date = datePickerValue(mysqli_real_escape_string($connection, $_POST["transfer_date"]));
$transfer_time_h = mysqli_real_escape_string($connection, $_POST["transfer_time_h"]);
$transfer_time_m = mysqli_real_escape_string($connection, $_POST["transfer_time_m"]);
$transfer_time = $transfer_time_h . ":" . $transfer_time_m . ":00";
$ch_payment_status = mysqli_real_escape_string($connection, $_POST['ch_payment_status']);
$payment_remark = trim(mysqli_real_escape_string($connection, $_POST['payment_remark']));

if (!empty($_FILES["slip_image"]) && $_FILES["slip_image"]["name"] != "") {

$file = explode(".", $_FILES["slip_image"]['name']);
    $file_surname = end($file);
    $filename_images = md5(date("dmYhis") . rand(1000, 9999)) . "." . $file_surname;
    $target_file = "../../../main/upload/slip/" . $filename_images;

if (move_uploaded_file($_FILES["slip_image"]["tmp_name"], $target_file)) {
        $slip = ",`slip_image` = '$filename_images'";
    } else {
        //$status = 0;
    }
} else {
    $slip = "";
}

$sql = "UPDATE `tbl_member_payment` SET `payment_type` = '2' $slip ,`approve_result` = '$ch_payment_status' , `transfer_date` = '$transfer_date', `transfer_time` = '$transfer_time', `payment_remark` = '$payment_remark' WHERE `tbl_member_payment`.`payment_id` = '$payment_id'";
$rs = mysqli_query($connection, $sql);
if ($rs) {
    $sql_renew = "UPDATE `tbl_member_renew` SET `payment_status` = '$ch_payment_status' WHERE `payment_id` = '$payment_id'";
    $rs_renew = mysqli_query($connection, $sql_renew);
    if ($rs_renew) {
        $status = 1;
    } else {
        $status = 0;
    }
} else {
    $status = 0;
}

$arr['status'] = $status;

echo json_encode($arr);