invisio v2.0

<?php
include('../../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

if ($connection) {
    ///ถอด xapi
    $password = 'sd32f43q5we';
    $xapi = 'CXgvsdf542sdfg';
    $encryptedMessage = mysqli_real_escape_string($connection, $_POST['encryptedMessage']);

if (decryptMessage($encryptedMessage, $password) == $xapi) {
        $job_id = mysqli_real_escape_string($connection, $_POST['job_id']);
        
        $date = explode('/', $_POST['announcement_date']);
        $announcement_date = date('Y-m-d', strtotime($date['0'] ."-" . $date['1'] . "-" . $date['2']));

$company_name = mysqli_real_escape_string($connection, $_POST['company_name']);
        $job_title = mysqli_real_escape_string($connection, $_POST['job_title']);
        $salary = mysqli_real_escape_string($connection, $_POST['salary']);
        $job_location = mysqli_real_escape_string($connection, $_POST['job_location']);
        $position_period = mysqli_real_escape_string($connection, $_POST['position_period']);
        $qualifications = mysqli_real_escape_string($connection, $_POST['qualifications']);
        $job_description = mysqli_real_escape_string($connection, $_POST['job_description']);
        $benefits = mysqli_real_escape_string($connection, $_POST['benefits']);
        $contact = mysqli_real_escape_string($connection, $_POST['contact']);
        $member_id = mysqli_real_escape_string($connection, $_POST['member_id']);
        $temp_id = explode(".", $member_id);
        $member_id = bigsara_decode($temp_id[0], $temp_id[1]);

$sql_update = "UPDATE tbl_job SET  
        create_user_id = '$member_id',
        announcement_date ='$announcement_date',
        company_name = '$company_name',
        job_title = '$job_title',
        salary = '$salary',
        job_location = '$job_location',
        position_period = '$position_period',
        qualifications = '$qualifications',
        job_description = '$job_description',
        contact = '$contact',
        benefits = '$benefits'
        WHERE job_id = '$job_id'";

$res_update = mysqli_query($connection, $sql_update) or die($connection->error);

if ($res_update) {
            $arr['result'] = 1;
        } else {
            $arr['result'] = 0;
            $arr['message'] = "sql Err.";
        }
    } else {
        $arr['result'] = 0;
        $arr['message'] = "xapi is valid";
    }
} else {
    $arr['result'] = 9;
    $arr['message'] = "Connection Error";
}

echo json_encode($arr);