bypass

<?php
 session_start();
if(isset($_SESSION['Admin']))
{
    // $db=mysqli_connect("localhost","root","","behniwal") or die('Unable To connect');
    include "connection.php";
?>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=Edge">
    <meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
    <title>Add Latest Projects</title>
    
    <link rel="icon" href="favicon.ico" type="image/x-icon">

<link href="https://fonts.googleapis.com/css?family=Roboto:400,700&subset=latin,cyrillic-ext" rel="stylesheet" type="text/css">
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet" type="text/css">

<link href="admin_plugins/bootstrap/css/bootstrap.css" rel="stylesheet">

<link href="admin_plugins/node-waves/waves.css" rel="stylesheet" />

<link href="admin_plugins/animate-css/animate.css" rel="stylesheet" />

<link href="admin_plugins/morrisjs/morris.css" rel="stylesheet" />

<link href="admin_css/style.css" rel="stylesheet">

<link href="admin_css/themes/all-themes.css" rel="stylesheet" />
   
    <style>
       .container{
            justify-content: center;
            margin-top:20px;
        }
        #cn{
           
            border:1px solid silver;
            border-radius: 5px;
            text-justify: center;
            width:400px;
            height:430px;
            box-shadow:3px 3px 5px 6px #ccc; 
            margin-top:80px;

}
.form-group{
    font-size: 14px;
    font-family:Cambria, Cochin, Georgia, Times, 'Times New Roman', serif;
    
    
}
.l{
   font-size:medium; 
}
#h{
    padding:10px;
}
.btn{
    cursor:pointer;
    width:140px;
    margin-left:110px;
    font-weight:200px;
    margin-top:20px;
}
.btn:hover{
    color:orangered;
}
h6{
    font-family:cursive;
    color:red;
}
h5{
    color:green;
}
    </style>
</head>

<body class="theme-red">
  
    <?php
        include "admin_header.php";
    ?>
  
  <section >
        <div class="container">
            
            <div class="container" id="cn">
                <div class="form-group ">
                
                    <center><h2 id="h">Add Latest Projects</h2></center><hr>
                </div>
   
            <?php
            include 'connection.php';
            if(isset ($_POST['submit']))
            {
                            
                        $type = $_POST['type'];
                        
                        $tf = "projectimage/latest_projects/".basename($_FILES['FileToUpload']['name']);
                        $image = $tf;
                    
                    
                        $query2 = "INSERT INTO `latest_project`(`type`,`image`) VALUES('$type','$image')";
                        $flag = "";

if($_FILES['FileToUpload']['name'] != "" )
                    {
                        $fileType = pathinfo($tf,PATHINFO_EXTENSION);
                        $check = getimagesize($_FILES['FileToUpload']['tmp_name']);

if($check == true) 
                            {
                                $flag = 1;
                            }	
                        else
                            {
                                echo "<h6> File is not an Image</h6>";
                                $flag = 0;
                            }
                        if($fileType != "jpg" && $fileType != "JPG" && $fileType != "JPG" && $fileType != "png" && $fileType != "jpeg" && $fileType != "gif" && $fileType != "jfif")
                            {
                                echo "<h6>This Type of File is Not allowed</h6>";
                                $flag = 0;
                            }
                        else
                            {
                                $flag = 1;
                            }
                        if(file_exists($tf))
                            {
                                echo "<h6>File is Already Exists.....!!!</h6>";
                                $flag = 0;
                            }
                        else
                            {
                                $flag = 1;
                            }
                        if($flag == 1)
                            {
                                    move_uploaded_file($_FILES['FileToUpload']['tmp_name'], $tf) or die( "Could not Move file!");
                                    mysqli_query($db,$query2) or die("Failed to load data in database");
                                    echo "<h5>Successfully Submit</h5>";
                            }
                        else
                            {
                                echo "</br> <h6>Failed to Upload file....!!!!</h6>";
                            }
                    }
                    else
                        {
                            echo "<h6> No file Selected....<h6>";
                        }
                }
                            
                ?>	
     		
    
                <div class="form-group" >

<p>
                        <label>Choose Type:</label><br>
                        <input list="latest_projects" name="type" placeholder="Select-Any-Type" required>
                        <datalist id="latest_projects">
                        <option value="Bed">Bed</option>
                        <option value="Sofa">Sofa</option>
                        <option value="Kitchen">kitchen</option>
                        <option value="Cupboard">Cupboard</option>
                        <option value="Construction">Construction</option>
                        <option value="Land_and_Plot">Land & Plot</option>
                        <option value="Kothi">Kothi</option>
                        <option value="Farm_Products">Farm Products</option>
                        </datalist>
                    </p>
                    <br>

<div class="form-group">
                        <label for="file">Image</label>
                        <input type="file" name="FileToUpload"class="form-control l" >
                    </div>
                  
                   
                     <br><input type="submit" class="btn  col-md-4 offset-md-4" id="submit" name="submit">
                   
                    </form>
                    
                </div>
            </div>
        </div>
    </section>

<script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js" integrity="sha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49" crossorigin="anonymous"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js" integrity="sha384-ChfqqxuZUCnJSK3+MXmPNIyE6ZbWh2IMqE241rYiqJxyMiZ6OW/JmZQ5stwEULTy" crossorigin="anonymous"></script>
    
    
    <script src="admin_plugins/jquery/jquery.min.js"></script>

<script src="admin_plugins/bootstrap/js/bootstrap.js"></script>

<script src="admin_plugins/bootstrap-select/js/bootstrap-select.js"></script>

<script src="admin_plugins/jquery-slimscroll/jquery.slimscroll.js"></script>

<script src="admin_plugins/node-waves/waves.js"></script>

<script src="admin_plugins/jquery-countto/jquery.countTo.js"></script>

<script src="admin_plugins/raphael/raphael.min.js"></script>
    <script src="admin_plugins/morrisjs/morris.js"></script>

<script src="admin_plugins/chartjs/Chart.bundle.js"></script>

<script src="admin_plugins/flot-charts/jquery.flot.js"></script>
    <script src="admin_plugins/flot-charts/jquery.flot.resize.js"></script>
    <script src="admin_plugins/flot-charts/jquery.flot.pie.js"></script>
    <script src="admin_plugins/flot-charts/jquery.flot.categories.js"></script>
    <script src="admin_plugins/flot-charts/jquery.flot.time.js"></script>

<script src="admin_plugins/jquery-sparkline/jquery.sparkline.js"></script>

<script src="admin_js/admin.js"></script>
    <script src="admin_js/pages/index.js"></script>

<script src="admin_js/demo.js"></script>
</body>

</html>
               					
<?php
}
else
{
	echo "<br>";
}
?>