invisio v2.0

<?php

include('../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

if ($connection) {
    
    $payment_id = mysqli_real_escape_string($connection, $_POST["payment_id"]);
    $transfer_date = datePickerValue(mysqli_real_escape_string($connection, $_POST["transfer_date"]));
    $transfer_time_h = mysqli_real_escape_string($connection, $_POST["transfer_time_h"]);
    $transfer_time_m = mysqli_real_escape_string($connection, $_POST["transfer_time_m"]);
    $transfer_time = $transfer_time_h.":".$transfer_time_m.":00";

if ($_FILES['slip_image']["name"] != "") {

$file = explode(".", $_FILES['slip_image']['name']);
        $file_num = count($file) - 1;
        $file_surname = $file[$file_num];
        $filename_images = date("dmYhis") . rand(11, 99) . "." . $file_surname;
        $target_file = "../../upload/" . $filename_images;

if (move_uploaded_file($_FILES["slip_image"]["tmp_name"], $target_file)) {

$slip_image = ",slip_image = '$filename_images'";
        } else {

$slip_image = "";
        }
    }

$update = "UPDATE `tbl_member_payment` 
        SET `transfer_date` = '$transfer_date'
        , `transfer_time` = '$transfer_time'
        $slip_image
        WHERE `payment_id` = '$payment_id'";

$rs_update = mysqli_query($connection, $update) or die($connection->error);

if ($rs_update) {
        $result = 1;
    } else {

$result = 0;
    }
} else {
    $status = 9;
}

$arr['result'] = $result;
echo json_encode($arr);
mysqli_close($connection);