Mini Shell

<?php

    include '../db/database.php';
    include 'function_date.php';
    $trainID = $_POST['trainID'];
      
    $traindate= $_POST['date'];
    $endtraindate= $_POST['enddate'];
    $subjecttrain = $_POST['subjecttrain'];
    $placetrain = $_POST['placetrain'];
    $traindate1 = mydate($traindate);
    $endtraindate1 = mydate($endtraindate);
  
        //ถ้าอัพเดทอัพโหลดรูปประจำตัว
    if (is_uploaded_file($_FILES['imagetrain1']['tmp_name'])) {
        //ลบรูปเดิมก่อน
        $sql_img1 = "SELECT imagetrain1 FROM train WHERE trainID='$trainID'";
        $result_img1 = mysqli_query($link, $sql_img1);
        $img_name1 = mysqli_fetch_row($result_img1);
        @unlink('./dist/img/train/'.$img_name1[0]);
        
        $new_image_name1 = 'news_'.uniqid().".".pathinfo(basename($_FILES['imagetrain1']['name']), PATHINFO_EXTENSION);
        $image_upload_path1 = "./dist/img/train/".$new_image_name1;
        move_uploaded_file($_FILES['imagetrain1']['tmp_name'],$image_upload_path1);
        
        $sql = "UPDATE `train` SET `imagetrain1`='$new_image_name1' WHERE (`trainID`='$trainID')";
        mysqli_query($link, $sql);
    }
    
      //ถ้าอัพเดทอัพโหลดรูปประจำตัว
    if (is_uploaded_file($_FILES['imagetrain2']['tmp_name'])) {
        //ลบรูปเดิมก่อน
        $sql_img2 = "SELECT imagetrain2 FROM train WHERE trainID='$trainID'";
        $result_img2 = mysqli_query($link, $sql_img2);
        $img_name2 = mysqli_fetch_row($result_img2);
        @unlink('./dist/img/train/'.$img_name2[0]);
        
        $new_image_name2 = 'news_'.uniqid().".".pathinfo(basename($_FILES['imagetrain2']['name']), PATHINFO_EXTENSION);
        $image_upload_path2 = "./dist/img/train/".$new_image_name2;
        move_uploaded_file($_FILES['imagetrain2']['tmp_name'],$image_upload_path2);
        
        $sql = "UPDATE `train` SET `imagetrain2`='$new_image_name2' WHERE (`trainID`='$trainID')";
        mysqli_query($link, $sql);
    }
    
    
    
        $sql = "UPDATE `train` SET `traindate`='$traindate1', `endtraindate`='$endtraindate1', `subjecttrain`='$subjecttrain', `placetrain`='$placetrain' where `trainID`='$trainID'";
        $result = mysqli_query($link, $sql);   
    
   
    if($result){
       echo "<script>window.location='javascript:history.back(-1)'</script>";
    } else {
     echo "<script language=\"JavaScript\">";
     echo "alert('ไม่สามารถแก้ไขข้อมูลได้กลับไปแก้ไขข้อมูลอีกครั้ง');window.location='javascript:history.back(-1)';";
     echo "</script>";
    }