product.php controller