Coder Forum

PHP Quellcode

<?PHP
// Variablen auslesen
while (list($key,$val)=each($_GET))  {
	 ${$key} = $val; }
 
include("setup.inc");
$sizea = 100000;
$nick3 = "tristar";
 
  if ($acti == "save") {
    $errortext='';
    IF($photo[error]){
      // No files uploaded
      $errortext= "keine BILD ausgewählt";
    }ELSE{
      // Check file size.
      IF($photo['size']>$session->config->max_photo_size){
        // Uploaded file is too large
        $errortext=STR_REPLACE('{SIZE}', $sitzea, "zu groß");
      }ELSE{
        // Store file
        $tmp_name=MD5($session_id.MICROTIME().RAND(-TIME(), TIME()));
	  $tmp_fullname='pics/'.$tmp_name;
        MOVE_UPLOADED_FILE($photo['tmp_name'], $tmp_fullname);
        // Check file mime type
        $type_ok=FALSE;
        $allowed_types=ARRAY('jpg'  =>  '.jpg',
                             'jpeg' =>  '.jpeg',
                             'gif'  =>  '.gif',
                             'ief'  =>  '.ief',
                             'png'  =>  '.png',
                             'tiff' =>  '.tiff',
                             'bmp'  =>  '.bmp',
                             'wbmp' =>  '.wbmp');
        IF(FUNCTION_EXISTS('getimagesize')){
          $imgdata=GETIMAGESIZE($tmp_fullname);
          IF(EMPTY($imgdata) || EMPTY($imgdata['mime'])){
            $imgdata=NULL;
          }
        }ELSE{
          $imgdata=NULL;
        }
        FOREACH($allowed_types AS $chk_type=>$extension){
          IF(!EMPTY($imgdata)){
            $type_ok=   !EMPTY($imgdata[0])
                     && !EMPTY($imgdata[1])
                     && FALSE!==STRPOS(STRTOLOWER($imgdata['mime']), $chk_type);
          }ELSE{
            $type_ok=FALSE!==STRPOS(STRTOLOWER($photo['type']), $chk_type);
          }
          IF($type_ok){
            RENAME($tmp_fullname, $tmp_fullname.$extension);
            $tmp_name.=$extension;
            BREAK;
          }
        }
        IF(!$type_ok){
          // File is not an image or has non-supported format
          $errortext=$lng['notanimage'];
          UNLINK($tmp_fullname);
        }ELSE{
 
          // Image is OK
                    // Update user's profile
          //$user->updateUser($session, $profile_user_id, 'photo = "'.$tmp_name.'"');
                  $comment = str_replace("(b)", "<b>", $comment);
			$comment = str_replace("(/b)", "</b>", $comment);
			$comment = str_replace("(i)", "<i>", $comment);
			$comment = str_replace("(/i)", "</i>", $comment);
			$comment = str_replace("[b]", "<b>", $comment);
			$comment = str_replace("[/b]", "</b>", $comment);
			$comment = str_replace("[i]", "<i>", $comment);
			$comment = str_replace("[/i]", "</i>", $comment);
			echo "llll";
	    		$eintrag = "INSERT INTO icc_galerie (nick, pic, comment, usid) VALUES ('$nick3','$tmp_name' ,'$comment','$usid3')"; 
	    		mysql_query($eintrag)or die(mysql_error());
 
REQUIRE("see.inc.php");
BREAK;
 
	    		} 
        }
 
        }
 
        }
 
        echo $tmp_fullname;
 
  REQUIRE("upload.tpl.php");
 
?>

PHP Quellcode

<FORM name="photo_upload" action="main.php" method="post" enctype="multipart/form-data">
      					    <INPUT type="hidden" name="s" value="<?=$s?>">
      					    <INPUT type="hidden" name="include" value="<?=$include?>">
							<input type="hidden" name="acti" value="save" />
<INPUT type="file" name="photo" SIZE="40">

PHP Quellcode

23 $tmp_fullname='pics\'.$tmp_name;
24 MOVE_UPLOADED_FILE($photo['tmp_name'], $tmp_fullname);

PHP Quellcode

/* Offset */
DEFINE("OFFSET","./");
 
/* Path to directory that contains images */
DEFINE('IMAGEPATH',OFFSET.'images');