Advertisement
Guest User

Untitled

a guest
Apr 3rd, 2014
116
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.77 KB | None | 0 0
  1. <form action="#" method="get" enctype="multipart/form-data">
  2. <label for="file">Filename:</label><br />
  3. <input type="text" name="type" placeholder="Type"><br />
  4. <input type="file" name="file"><br />
  5. <input type="submit" name="submit" value="Submit">
  6. </form>
  7. <?
  8. if($_GET['type']!="") {
  9. $type = $_GET['type'];
  10. $allowedExts = array("gif", "jpeg", "jpg", "png");
  11. if($_FILES["file"]["type"] == "image/gif") {
  12. $encryptfile = md5(substr($_FILES["file"]["name"], 0, -4));
  13. $filename = $encryptfile. ".gif";
  14. } else if($_FILES["file"]["type"] == "image/jpeg") {
  15. $encryptfile = md5(substr($_FILES["file"]["name"], 0, -5));
  16. $filename = $encryptfile. ".jpeg";
  17. } else if($_FILES["file"]["type"] == "image/jpg") {
  18. $encryptfile = md5(substr($_FILES["file"]["name"], 0, -4));
  19. $filename = $encryptfile. ".jpg";
  20. } else if($_FILES["file"]["type"] == "image/pjpeg") {
  21. $encryptfile = md5(substr($_FILES["file"]["name"], 0, -6));
  22. $filename = $encryptfile. ".pjpeg";
  23. } else if($_FILES["file"]["type"] == "image/x-png") {
  24. $encryptfile = md5(substr($_FILES["file"]["name"], 0, -6));
  25. $filename = $encryptfile. ".x-png";
  26. } else if($_FILES["file"]["type"] == "image/png") {
  27. $encryptfile = md5(substr($_FILES["file"]["name"], 0, -4));
  28. $filename = $encryptfile. ".png";
  29. }
  30. $temp = explode(".", $filename);
  31. $extension = end($temp);
  32. if ((($_FILES["file"]["type"] == "image/gif")
  33. || ($_FILES["file"]["type"] == "image/jpeg")
  34. || ($_FILES["file"]["type"] == "image/jpg")
  35. || ($_FILES["file"]["type"] == "image/pjpeg")
  36. || ($_FILES["file"]["type"] == "image/x-png")
  37. || ($_FILES["file"]["type"] == "image/png"))
  38. && ($_FILES["file"]["size"] < 2097152)
  39. && in_array($extension, $allowedExts))
  40. {
  41. if ($_FILES["file"]["error"] > 0) {
  42. echo '<a class="title" href="./upload.php">' .$_FILES["file"]["error"]. '</a>';
  43. } else {
  44. echo "Upload: " . $filename . "<br>";
  45. echo "Type: " . $_FILES["file"]["type"] . "<br>";
  46. echo "Size: " . ($_FILES["file"]["size"] / 1024) . " kB<br>";
  47. echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br>";
  48. if (!($stmt = $con->prepare("INSERT INTO `cat_images` (`title`,`path`) VALUES (?,?)")) || !is_object($stmt)) {
  49. die( "Error preparing: (" .$con->errno . ") " . $con->error);
  50. }
  51. $stmt->bind_param('ss', $type, $filename);
  52. if($stmt->execute()) {
  53. move_uploaded_file($_FILES["file"]["tmp_name"], "./assets/uploads" . $filename);
  54. echo "Stored in: " . "./assets/uploads/" . $filename . "<br />";
  55. echo '<a href="./">Home</a>';
  56. } else {
  57. echo 'SQL command could not be Executed, Contact a Staff Member';
  58. echo '<a href="./upload.php">Try Again</a>';
  59. }
  60. $stmt->close();
  61. }
  62. }
  63. }
  64. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement