Shell File Manager

<?php
session_start();
//if (isset($_SESSION['ID'])) {
//    header("Location:index.php");
//    exit();
//}
// Include database connectivity

include_once('../../include/config.php');

$role=$_GET['role'];
$url_session=$_GET['session'];
$admin_id=$_GET['admin_id'];
$id=$_GET['id'];
if ($url_session == $_SESSION['session']){
	


  if (isset($_POST['delete_admin'])) {

    $sql = "DELETE FROM admins WHERE admin_id=$id";
    $query_run = mysqli_query($connection, $sql);
   
    if($query_run)
    {
        $_SESSION['status_remove'] = "Successfully ";
        $_SESSION['status_code_remove'] = "success";
        $_SESSION['body_remove_remove'] = "Admin Account  Will Be  Deleted ";
        $_SESSION['button_remove'] = "Ok";
        header("Location:admins.php?admin_id=$admin_id&role=$role&session=$url_session");   
    }
    else
    {
        $_SESSION['status'] = "Something Wrong!!";
        $_SESSION['status_code'] = "error";
        $_SESSION['body'] = "Admin Account  was not Deleted ";
        $_SESSION['button'] = "Try Again ";
        header("Location:admins.php?admin_id=$admin_id&role=$role&session=$url_session");  
       
    }
  }


  if (isset($_POST['update_admin'])) {

    $username = $_POST['username'];
    $email = $_POST['email'];
    $role_up = $_POST['role_up'];
    $image = $_POST['image'];
    $password = md5($_POST['password']);
    $cpassword = md5($_POST['cpassword']);

    if ($password == $cpassword) {


    $sql_update = "UPDATE admins set username='$username', email='$email' , password='$password' , role='$role_up' , image='$image' WHERE admin_id=$id";
    $query_run_update = mysqli_query($connection, $sql_update);

    print_r($sql_update);
   
    if($query_run_update)
    {
        $_SESSION['status'] = "Successfully ";
        $_SESSION['status_code'] = "success";
        $_SESSION['body'] = "Admin Account was Updated ";
        $_SESSION['button'] = "Ok";
        header("Location:admins.php?admin_id=$admin_id&role=$role&session=$url_session");   
    }
    else
    {
        $_SESSION['status'] = "Something Wrong!!";
        $_SESSION['status_code'] = "error";
        $_SESSION['body'] = "Admin Account was not Updated ";
        $_SESSION['button'] = "Try Again ";
  header("Location:admins.php?admin_id=$admin_id&role=$role&session=$url_session");  
       
    }
  }
}





	
 

   


        


          
      
                    



         






  ?>
  
  
  
  <?php 
  }else{
    include 'login_error.php';
  
    
  }
  
  ?>