-
Notifications
You must be signed in to change notification settings - Fork 0
/
upload.php
100 lines (79 loc) · 3.26 KB
/
upload.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
<?php
require("scripts/db.inc.php");
$target_dir = "uploads/";
$target_file = $target_dir . basename($_FILES["fileToUpload"]["name"]);
$fileName = basename($_FILES["fileToUpload"]["name"]);
$uploadOk = 1;
$imageFileType = pathinfo($target_file,PATHINFO_EXTENSION);
// Check if image file is a actual image or fake image
if(isset($_POST["submit"])) {
$check = getimagesize($_FILES["fileToUpload"]["tmp_name"]);
if($check !== false) {
echo "File is an image - " . $check["mime"] . ".";
$uploadOk = 1;
} else {
echo "File is not an image.";
$uploadOk = 0;
}
}
// Check if file already exists
if (file_exists($target_file)) {
echo "Sorry, file already exists.";
$uploadOk = 0;
}
// Check file size
if ($_FILES["fileToUpload"]["size"] > 500000) {
echo "Sorry, your file is too large.";
$uploadOk = 0;
}
// Allow certain file formats
if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg"
&& $imageFileType != "gif" ) {
echo "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";
$uploadOk = 0;
}
// Check if $uploadOk is set to 0 by an error
if ($uploadOk == 0) {
echo "Sorry, your file was not uploaded.";
// if everything is ok, try to upload file
} else {
if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file)) {
echo "The file ". basename( $_FILES["fileToUpload"]["name"]). " has been uploaded.<br>";
$db = ConnectToDB();
/* Posts */
$title = $_POST['title'];
$date = $_POST['date'];
$blog = $_POST['blog'];
$class = intval($_POST["class"]);
$description = $_POST['description'];
try {
$db->begin_transaction();
$db->query("INSERT INTO team VALUES(NULL);");
$result = $db->query("SELECT * FROM team ORDER BY team_id DESC LIMIT 1;");
$team;
if ($result->num_rows > 0) {
while ($row = $result->fetch_assoc()) {
$team = $row["team_id"];
}
}
for($i = 1; $i < 5; $i++){
$teamMember = $_POST['team'.$i];
if($_POST['team'.$i] != null){
$db->query("INSERT INTO teamuser VALUES('$teamMember', $team);");
}
}
$db->query("INSERT INTO project VALUES(NULL, $class, $team, '$title', '$description', '$date', '$fileName', '$blog');");
$db->commit();
echo "<script>
alert('File uploaded successfully');
window.location.href='show_gallery.php';
</script>";
}
catch(Exception $e) {
$db->rollback();
}
} else {
echo "Sorry, there was an error uploading your file.";
}
}
?>