Untitled

<?php

session_start();

if (!$_SESSION["logged"]) {
    header("Location: index.php");
    exit;
}

include_once "./php/config.php";

$empty = $size = $image = true;

if (!isset($_FILES['uploader'])) {
    $empty = false;
    exit;
}

if ($_FILES['uploader']['size'] > 10485760) {
    $size = false;
    exit;
}

$is_img = getimagesize($_FILES['userfile']['tmp_name']);

if (!$is_img) {
    $image = false;
    exit;
}

$sql = "INSERT INTO gallery VALUES(':date',':name',':file')";

$stmt = $db->prepare($sql);

$date = date("Y-m-d");
$name = addslashes($_FILES['uploader']['name']);
$file = addslashes(file_get_contents($_FILES['uploader']['tmp_name']));

$stmt->bindValue(':date', $date);
$stmt->bindValue(':name', $name);
$stmt->bindValue(':file', $file);

$stmt->execute();

?>

<!DOCTYPE html>
<html lang="en">

<head>

    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">

    <link rel="stylesheet" href="css/Administration.css">

    <title>Irpiniart | Pannello di Controllo</title>

    <!-- JQuery -->

    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>

</head>

<body>

<a id="log-out" href="login/logout.php">Esci</a>

<div id="container">

    <img src="resources/Upload.png" width="64px"/>

    <?php if (!$empty) {
        ?>

        <div id="error-container">

            <p>Nessun file selezionato!</p>

        </div>

        <?php
    }
    ?>

    <?php if (!$size) {
        ?>

        <div id="error-container">

            <p>Dimensioni file superiori a 10mb!</p>

        </div>

        <?php
    }
    ?>

    <?php if (!$image) {
        ?>

        <div id="error-container">

            <p>Il file non è un'immagine!</p>

        </div>

        <?php
    }
    ?>

    <form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post" enctype="multipart/form-data">

        <label for="file-upload" id="file">Seleziona immagine...</label>

        <br>

        <input id="file-upload" type="file" name="uploader" accept=".png, .jpg, .jpeg" required/>

        <br>
        <br>

        <input class="btn-disabled" type="submit" value="Invia" disabled/>

    </form>

</div>

<script src="js/SelectImage.js"></script>

</body>

</html>