1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
|
<?php
foreach($_FILES as $files => $_file){
$_POST[$files]="";
if($_file['Photo']!=""){
$pathinfo=pathinfo($_file['Photo']);
$file_name_array = explode(".", basename($_file['Photo']));
$filename = $file_name_array[count($file_name_array)-2];
$_POST[$files]=$file_prefix.$filename.$file_suffix.$date_stamp.".".$pathinfo['extension'];
}
}
if (isset($_POST['MM_insert'])) {
$upload_error_codes=array("",
"The uploaded file exceeds the upload_max_filesize directive in php.ini.","",
"The uploaded file was only partially uploaded.",
"No file was uploaded.","Missing a temporary folder.",
"Failed to write file to disk.","File upload stopped by extension.");
$allowed_ext_string="";
$allowed_extensions=explode(",",$allowed_ext_string);
$upload_status = "";
$allowed_size = 5+0;
$success_page = "";
$thumbs_dir = "";
$resize_image = "yes";
$resize_width = 800+0;
$resize_height = 600+0;
$thumb_width = +0;
$thumb_height = +0;
$make_thumbs = "";
$thumb_prefix = "";
$thumb_suffix = "";
$file_prefix = "";
$file_suffix = "";
$append_date_stamp = "";
$date_stamp=($append_date_stamp=="1")?date(time()):"";
$haulted = false;
$upload_folder="../Photos";
//Check for restrictions
//Check if upload folder exists
if(!file_exists($upload_folder)){die("Upload folder doesn't exist");}
if(!is_writable($upload_folder)){die("Upload folder is not writable");}
if($make_thumbs == "yes" && !file_exists($thumbs_dir)){die("Thumbnails folder doesn't exist");}
if($make_thumbs == "yes" && !is_writable($thumbs_dir)){die("Thumbnails folder is not writable");}
foreach($_FILES as $files => $_file){
//Check if it's not empty
if($_file['name']!=""){
$pathinfo = pathinfo($_file['name']);
//If allowed extension or no extension restriction
if(!in_array(strtolower($pathinfo['extension']),$allowed_extensions) && $allowed_ext_string!=""){
die(strtoupper($pathinfo['extension'])." files are not allowed.
<br>No files have been uploaded.");
}
if($_file['size']>$allowed_size*1048576 && $allowed_size!=0){
die("The file size of ".basename($_file['name'])." is ".round($_file['size']/1048576,2)."MB,
which is larger than allowed ".$allowed_size."MB.<br>No files have been uploaded.");
}
}
}
//All checks passed, attempt to upload
foreach($_FILES as $files => $_file){
//Check if it's not empty
if($_file['name']!=""){
$pathinfo = pathinfo($_file['name']);
$file_name_array = explode(".", basename($_file['name']));
$filename = $file_name_array[count($file_name_array)-2];
$target = $upload_folder;
$file_uploaded = false;
$target = $target."/".$file_prefix.$filename.$file_suffix.$date_stamp.".".$pathinfo['extension'];
//if image
if(strtolower($pathinfo['extension'])=="jpeg" || strtolower($pathinfo['extension'])=="jpg"){
//if needs resizing or a thumbnail
if(($resize_image == "yes" && ($resize_width!="" || $resize_height!="")) || ($make_thumbs == "yes" && ($thumb_width!="" || $thumb_height!=""))){
$src = imagecreatefromjpeg($_file['tmp_name']);
list($width,$height)=getimagesize($_file['tmp_name']);
//if needs thumbnail
if ($make_thumbs == "yes" && ($thumb_width!="" || $thumb_height!="")){
$thumb_newwidth=($thumb_width!=0)?$thumb_width:(($width/$height)*$thumb_height);
$thumb_newheight=($thumb_height!=0)?$thumb_height:(($height/$width)*$thumb_width);
$tmp=imagecreatetruecolor($thumb_newwidth,$thumb_newheight);
imagecopyresampled($tmp,$src,0,0,0,0,$thumb_newwidth,$thumb_newheight,$width,$height);
$thumb_name=$thumb_prefix.$filename.$thumb_suffix.$date_stamp.".".$pathinfo['extension'];
if(imagejpeg($tmp,$thumbs_dir."/".$thumb_name,100)){
$upload_status=$upload_status."Thumbnail for ".basename($_file['name'])." was created successfully.<br>";
}else{
die($upload_status."There was a problem creating a thumbnail for ". basename($_file['name']).".
Upload was interrupted.<br>");
}
}
//if needs resizing
if($resize_image == "yes" && ($resize_width!="" || $resize_height!="")){
$newwidth=($resize_width!=0)?$resize_width:(($width/$height)*$resize_height);
$newheight=($resize_height!=0)?$resize_height:(($height/$width)*$resize_width);
$tmp=imagecreatetruecolor($newwidth,$newheight);
imagecopyresampled($tmp,$src,0,0,0,0,$newwidth,$newheight,$width,$height);
if(imagejpeg($tmp,$target,100)){
$upload_status=$upload_status.basename($_file['name'])." was successfully resized.<br>";
$file_uploaded=true;
}else{
die($upload_status.basename($_file['name'])." could not be resized. Upload was interrupted.<br>");
}
}
}
}
if(!$file_uploaded){
if(move_uploaded_file($_file['tmp_name'], $target)){
$upload_status=$upload_status.basename($_file['name'])." was uploaded successfully.<br>";
}else{
$haulted=true;
}
}
//Cleanup
if(isset($src)){imagedestroy($src);unset($src);}
if(isset($tmp)){imagedestroy($tmp);unset($tmp);}
if($haulted){die($upload_status."There was a problem uploading ". basename($_file['name']).".
Error: ".$upload_error_codes[basename($_file['error'])].". Upload was interrupted.<br>");}
}
}
if($success_page!="" && $upload_status!=""){
header("Location: ".$success_page);
}
}
?>
<?php require_once('../Connections/floor.php'); ?>
<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
$theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
$insertSQL = sprintf("INSERT INTO photos (CatID, PhotoName, Photo) VALUES (%s, %s, %s)",
GetSQLValueString($_POST['CatID'], "text"),
GetSQLValueString($_POST['PhotoName'], "text"),
GetSQLValueString($_POST['Photo'], "text"));
mysql_select_db($database_floor, $floor);
$Result1 = mysql_query($insertSQL, $floor) or die(mysql_error());
$insertGoTo = "index.php";
if (isset($_SERVER['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $_SERVER['QUERY_STRING'];
}
header(sprintf("Location: %s", $insertGoTo));
}
mysql_select_db($database_floor, $floor);
$query_Recordset1 = "SELECT * FROM category";
$Recordset1 = mysql_query($query_Recordset1, $floor) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
?>
|
