1337r00t

<?php
################
$host = "localhost"; # DB-Host
$username = ""; #DB-Username
$password = ""; #DB_Password
$dbname = ""; # DB_Name
$connecting = new mysqli($servername, $username, $password, $dbname);
if ($connecting->connect_error) {
    die("Errot : " . $connecting->connect_error);
}
###############
if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST"){
    $path = "uploads/audio/"; # مكان رفع الملفات الصوتية
    $valid = array("mp3", "ogg"); # الصيغ المقبولة
    $audio = $_FILES['audio']['name'];
    $size = $_FILES['audio']['size'];
    if(strlen($audio)){
        list($txt, $ext) = explode(".", $audio);
        if(in_array($ext,$valid)){
            $aud = $txt.".".$ext;
            $tmp = $_FILES['audio']['tmp_name'];
            if(move_uploaded_file($tmp, $path.$aud)){ # عملية شرط اذا تم الرفع او لا
                $anti_sqli = $connecting->prepare("INSERT INTO audio (url) VALUES (?)");
                $anti_sqli->bind_param("ss", $url_audio);
                $url_audio = (isset($_SERVER['HTTPS']) ? "https" : "http") . "://".$_SERVER[HTTP_HOST]."".$_SERVER[REQUEST_URI]."$path$audio";
                $anti_sqli->close();
                echo "success"; # تم رفع الملف
            }else{
                echo "failed"; # لم يتم رفع الملف الصوتي
            }
        }
    }
}
$connecting->close();
?>