file-upload.php

<?php
require('configuration/connection.php');
header('Content-Type: application/json; charset=utf-8');
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: PUT, GET, POST");

/*
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! WARNING: Do not modify this file! Any changes may cause errors !!  
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

*******************************************************************
* This script was developed by Imdadullah Babu                    *
* Website: https://imdos.in                                       *  
* Organization: Pen Programmer (https://penprogrammer.com)        *
*******************************************************************
*/

// Check if the request is a POST request
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_POST['fileDestination'])) {
        if (isset($_POST['fileValidation'])) {
            $response = [];
            $allowedExtensions = explode(',', $_POST['fileValidation']);

            // Begin a database transaction
            $conn->autocommit(false); // disable autocommit

            try {
                // Loop through all the FILES available in the request
                foreach ($_FILES as $key => $fileData) {
                    // Get the file extension from the uploaded file
                    $fileExt = pathinfo($fileData['name'], PATHINFO_EXTENSION);
                    // Create a filename with the combination of the current date and some random numbers
                    $fileName = date('Ymd') . rand(11111, 99999) . '.' . $fileExt;

                    // Check the extension against the validation array
                    if (in_array($fileExt, $allowedExtensions)) {
                        // Create a directory if it does not already exist
                        if (!is_dir('uploads/' . strtolower($_POST['fileDestination']))) {
                            mkdir('uploads/' . strtolower($_POST['fileDestination']), 0777, true);
                        }
                        // Prepare the destination of the file
                        $destination = 'uploads/' . strtolower($_POST['fileDestination']) . '/' . $fileName;
                        // Add the key of the file with the destination path
                        $response[$key] = $destination;
                        // Move the uploaded file to the destination
                        move_uploaded_file($fileData['tmp_name'], $destination);
                    } else {
                        // Rollback the transaction in case of validation failure
                        $conn->rollback();
                        http_response_code(400); // Bad Request
                        echo json_encode(['status' => 'error', 'message' => 'File must be in ' . $_POST['fileValidation']]);
                        return;
                    }
                }

                http_response_code(201); // File uploaded
                echo json_encode($response);
            } catch (Exception $e) {
                // Rollback the transaction on any exception
                $conn->rollback();
                http_response_code(500); // Internal Server Error
                echo json_encode(['status' => 'error', 'message' => 'Internal Server Error: ' . $e->getMessage()]);
            } finally {
                // Enable autocommit after the try-catch block
                $conn->autocommit(true);
            }
        } else {
            // Return an error if the 'validation' parameter is missing
            http_response_code(400); // Bad Request
            echo json_encode(['status' => 'error', 'message' => 'Missing required parameter: fileValidation']);
        }
    } else {
        // Return an error if the 'data' parameter is missing
        http_response_code(400); // Bad Request
        echo json_encode(['status' => 'error', 'message' => 'Missing required parameter: fileDestination']);
    }
} else {
    // Return an error if the request method is not POST
    http_response_code(405); // Method Not Allowed
    echo json_encode(['status' => 'error', 'message' => 'Invalid request method']);
}