Файл: modules/share/add_screen.php
Строк: 48
<?php
$locate = 'in_share';
if(!isset($user) ||
!isset($_GET['file_id']) ||
$db->query("SELECT * FROM `share_files` WHERE `id` = '". abs(intval($_GET['file_id'])) ."'")->rowCount() == 0 ||
$db->query("SELECT `user_id` FROM `share_files` WHERE `id` = '". abs(intval($_GET['file_id'])) ."'")->fetchColumn() != $user['id'] || $user['level'] < 4)
{
header('location: /');
exit;
}
$file = $db->query("SELECT * FROM `share_files` WHERE `id` = '". abs(intval($_GET['file_id'])) ."'")->fetch();
if(isset($_GET['act']) && $_GET['act'] == 'upload')
{
if($_FILES['screen']['tmp_name'])
{
$screenp = pathinfo($_FILES['screen']['name']);
$screen_dir = ROOT .'/files/preview/';
if (!in_array($screenp['extension'], explode(';', $system['files_types'])))
{
header('location: /share/file/'. $file['id']);
exit;
}
move_uploaded_file($_FILES['screen']['tmp_name'], $screen_dir . $file['path_name'] .'.png');
header('location: /share/file/'. $file['id']);
exit;
}
}
$title = $lang->word('screenshot_add');
require_once(SYS.'/view/header.php');
$tpl->div('title', $lang->word('screenshot_add'));
echo '<div class="menu">
<form action="/share/add_screen?file_id='.$file['id'].'&act=upload" method="post" enctype="multipart/form-data">
<b>'.$lang->word('screenshot').'</b>:<br/>
<input type="file" name="screen" /><br/>
<input type="submit" value="'. $lang->word('upload') .'" />
</form>
</div>';
echo '<div class="block">
'.NAV.' <a href="/share/file/'. $file['id'] .'">'. $lang->word('back').'</a><br/>
'.img('share.png').' <a href="/share">'. $lang->word('share').'</a><br/>
'.img('home.png').' <a href="/">'. $lang->word('home').'</a><br/>
</div>';
require_once(SYS.'/view/footer.php');
?>