Файл: users/includes/album/image_upload.php
Строк: 122
<?php
/**
* @package JohnCMS
* @link http://johncms.com
* @copyright Copyright (C) 2008-2011 JohnCMS Community
* @license LICENSE.txt (see attached file)
* @version VERSION.txt (see attached file)
* @author http://johncms.com/about
*/
defined('_IN_JOHNCMS') or die('Error: restricted access');
require('../incfiles/head.php');
/*
-----------------------------------------------------------------
Выгрузка фотографии
-----------------------------------------------------------------
*/
if ($al && $user['id'] == $user_id && empty($ban) || $rights >= 7) {
$req_a = mysql_query("SELECT * FROM `cms_album_cat` WHERE `id` = '$al' AND `user_id` = '" . $user['id'] . "'");
if (!mysql_num_rows($req_a)) {
// Если альбома не существует, завершаем скрипт
echo functions::display_error($lng['error_wrong_data']);
require('../incfiles/end.php');
exit;
}
$res_a = mysql_fetch_assoc($req_a);
require('../incfiles/lib/class.upload.php');
echo '<div class="phdr"><a href="album.php?act=show&al=' . $al . '&user=' . $user['id'] . '"><b>' . $lng['photo_album'] . '</b></a> | ' . $lng_profile['upload_photo'] . '</div>';
if (isset($_POST['submit'])) {
$handle = new upload($_FILES['imagefile']);
if ($handle->uploaded) {
// Обрабатываем фото
$handle->file_new_name_body = 'img_' . time();
$handle->allowed = array(
'image/jpeg',
'image/gif',
'image/png'
);
$handle->file_max_size = 1024 * $set['flsz'];
$handle->image_resize = true;
$handle->image_x = 640;
$handle->image_y = 480;
$handle->image_ratio_no_zoom_in = true;
$handle->image_convert = 'jpg';
// Поставить в зависимость от настроек в Админке
//$handle->image_text = $set['homeurl'];
//$handle->image_text_x = 0;
//$handle->image_text_y = 0;
//$handle->image_text_font = 3;
//$handle->image_text_background = '#AAAAAA';
//$handle->image_text_background_percent = 50;
//$handle->image_text_padding = 1;
$handle->process('../files/users/album/' . $user['id'] . '/');
$img_name = $handle->file_dst_name;
if ($handle->processed) {
// Обрабатываем превьюшку
$handle->file_new_name_body = 'tmb_' . time();
$handle->image_resize = true;
$handle->image_x = 80;
$handle->image_y = 80;
$handle->image_ratio_no_zoom_in = true;
$handle->image_convert = 'jpg';
$handle->process('../files/users/album/' . $user['id'] . '/');
$tmb_name = $handle->file_dst_name;
if ($handle->processed) {
$description = isset($_POST['description']) ? trim($_POST['description']) : '';
$description = mb_substr($description, 0, 500);
mysql_query("INSERT INTO `cms_album_files` SET
`album_id` = '$al',
`user_id` = '" . $user['id'] . "',
`img_name` = '" . mysql_real_escape_string($img_name) . "',
`tmb_name` = '" . mysql_real_escape_string($tmb_name) . "',
`description` = '" . mysql_real_escape_string($description) . "',
`time` = '" . time() . "',
`access` = '" . $res_a['access'] . "'
");
echo '<div class="gmenu"><p>' . $lng_profile['photo_uploaded'] . '<br />' .
'<a href="album.php?act=show&al=' . $al . '&user=' . $user['id'] . '">' . $lng['continue'] . '</a></p></div>' .
'<div class="phdr"><a href="profile.php?user=' . $user['id'] . '">' . $lng['profile'] . '</a></div>';
} else {
echo functions::display_error($handle->error);
}
} else {
echo functions::display_error($handle->error);
}
$handle->clean();
}
} else {
echo '<form enctype="multipart/form-data" method="post" action="album.php?act=image_upload&al=' . $al . '&user=' . $user['id'] . '">' .
'<div class="menu"><p><h3>' . $lng_profile['select_image'] . '</h3>' .
'<input type="file" name="imagefile" value="" /></p>' .
'<p><h3>' . $lng['description'] . '</h3>' .
'<textarea name="description" rows="' . $set_user['field_h'] . '"></textarea><br />' .
'<small>' . $lng['not_mandatory_field'] . ', max. 500</small></p>' .
'<input type="hidden" name="MAX_FILE_SIZE" value="' . (1024 * $set['flsz']) . '" />' .
'<p><input type="submit" name="submit" value="' . $lng_profile['upload'] . '" /></p>' .
'</div></form>' .
'<div class="phdr"><small>' . $lng_profile['select_image_help'] . ' ' . $set['flsz'] . 'kb.<br />' . $lng_profile['select_image_help_5'] . '</small></div>' .
'<p><a href="album.php?act=show&al=' . $al . '&user=' . $user['id'] . '">' . $lng['back'] . '</a></p>';
}
}