write.php

<?php
include("logincheck.php");
if( ! $islogin ) exit;
include("dbcon.php");
$title = "";
$content = "";
$upfile = "";
$writer = $useremail;
if( isset( $_POST['title'] ) ) {
	$title = $_POST['title'];
}
if( isset( $_POST['content'] ) ) {
	$content = $_POST['content'];
}
if( isset($_FILES['upfile']) ) {
	$folder = "upfile/";
	$file = $folder . basename($_FILES["upfile"]["name"]);
	if( move_uploaded_file($_FILES["upfile"]["tmp_name"],$file) ) {
		$upfile = $file;
	}
}
if( $title && $content && $writer){
	$sql = "insert into blog set ";
	$sql .= "title='{$title}'";
	$sql .= ",content='{$content}'";
	$sql .= ",upfile='{$upfile}'";
	$sql .= ",writer='{$writer}'";
	$sql .= ",wdate=now()";
	$sql .= ",udate=now()";
	$db->query($sql);
}
?>
<script type="text/javascript">
	location.replace("/home/");
</script>