Untitled

<?php
    require_once 'login.php';
    require_once 'error.php';
    require_once 'table.php';

    echo <<<_END
        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css">
        <html class="container"><head><title>CS174 HW5</title></head><body>
        <h4><blockquote>Assignment #5 - PHP + MySQL</blockquote></h4>
        <form class="container" action="hw5.php" method="post" enctype="multipart/form-data"><pre>
        <h6>Name:</h6> <input type="text" name="name">
        <h6>File:</h6> <input type="file" name="filename" size="20">


        <input class="btn" type="submit" value="Upload">
</pre></form>
</body></html>
_END;


    if ($flag) {
        create_table();
    }

    if ($_FILES && isset($_POST['name'])) {
        $filename = $_FILES['filename']['name'];
        if ($_FILES['filename']['type'] == 'text/plain') {
            $name = get_post($conn, 'name');
            $filename = strtolower(preg_replace("/[^A-Za-z0-9.]/", "", $filename));
            move_uploaded_file($_FILES['filename']['tmp_name'], $filename);
            $content = preg_replace("/[^A-Za-z0-9.]/", "", file_get_contents($filename));

            $query = "INSERT INTO info VALUES" .
                "(NULL, '$name', '$content')";
            $result = $conn->query($query);

            if (!$result) die(mysqli_fatal_error());
        } else {
            die(mysqli_fatal_error());
        }
    }

    $result->close();
    $conn->close();

    function get_post($conn, $var) {
        return $conn->real_escape_string($_POST[$var]);
    }