<?php
include("head.php");


if(isset($_POST['submit']))
{
$link = rand(0000000000, 9);

$data = addslashes(fread(fopen($form_data, "r"), filesize($form_data)));
 	$result=MYSQL_QUERY("INSERT INTO uploads (description, data,filename,filesize,filetype,username,link) ". "VALUES ('$form_description','$data','$form_data_name','$form_data_size','$form_data_type','$link',".$_COOKIE['username'].")");


header("location: downloads.php");


 }


?>
<div id="upload" method="post" align="center">
<form action=" "  enctype="multipart/form-data">
<input type="hidden" name="MAX_FILE_SIZE" value="1000000">
<table border="1">
<tr></tr>

<td align="right"><input name="form_data" type="file" /></td>
<td align="right"><input type="submit" name="submit" value="Upload"></td>
<tr></tr>
</form>
</div>