TRex2003

<?

/**
 * PHP Upload Tool
 * Dateien hochladen, die dann mit Link
 * und Passwort wieder heruntergeladen
 * werden k�nnen. (todo)
 *
 * very quick, very dirty, very unsecure....
 *
**/

/**
 *
 * SQL:
 *
 * CREATE TABLE `fileupload`.`files` (
 *  `ID` INT NOT NULL AUTO_INCREMENT PRIMARY KEY ,
 *  `filename` VARCHAR( 160 ) NOT NULL ,
 *  `filemd5` VARCHAR( 40 ) NOT NULL ,
 *  `password` VARCHAR( 20 ) NOT NULL,
 *  UNIQUE (
 *      `filemd5`
 *  )
 * ) ENGINE = MYISAM ;
 *
**/


// config stuff

// where to save files
// do not forget trailing slash

$base_up_folder = '/var/fileupload/';

// db access

$db_host    = 'localhost';
$db_user    = 'fileupload';
$db_passwd  = 'af7whnj2';
$db_name    = 'fileupload';
$db_table   = 'files';

// other config

/* reserved */

// methods of mass destraction

// just check, if we want to do anything
if (isset($_FILES['file']) && (null != $_FILES['file']))
{

    $md5 = md5_file($_FILES['file']['tmp_name']);
    if (@mkdir($base_up_folder.$md5, 0700))
    {
        $db = new mysqli($db_host, $db_user, $db_passwd, $db_name);

        $upload_location = $base_up_folder.$md5.'/'. $db->real_escape_string( $_FILES['file']['name'] );

        if (move_uploaded_file($_FILES['file']['tmp_name'], $upload_location))
        {
            // file uploaded and moved to correct location, now create db entries
            $generated_pass = mt_rand(912453, mt_getrandmax()); // lowest value possible..just some random number

            $sql = 'INSERT INTO '.$db_table.' (filename, filemd5, password) VALUES ("'.$upload_location.'","'.$md5.'","'.$generated_pass.'")';

            $result = $db->query($sql);

            if ($result)
            {
                echo('Datei hochgeladen. Zum Herunterladen benutze diesen <a href="get.php?get='.$md5.'">Link</a> und dieses Passwort: '.$generated_pass);
            }
            else
            {
                echo("query fehlgeschlagen..<pre>".mysqli_error($db).'</pre>');
            }
        }
    }
    else
    {
        echo("<p>Program failure, exiting. Maybe the file is already uploaded.</p>");
    }

}
else
{
    echo("Incorrect Parameters, exiting.");
    var_dump($_POST);
}

?>