Файл: portfolio/upload.php
Строк: 32
<? //by rine(Andrey Arapov) & BEPDuKT(Aleksey Ivanov) site: dizkod.ruphp
header("Cache-Control: no-store, no-cache, must-revalidate");
$path=1;
include_once('../config/config.php');
include_once('../config/function.php');
Base::$site = $url;
$user=new Users();
$user->sess();
$access=$user->access();
if($access==1){
$name=Base::filter($_POST['name']);
$opis=Base::filter($_POST['opis']);
$stat=Base::filter($_POST['stat']);
$prace=Base::filter($_POST['prace']);
$catigory=Base::filter($_POST['catigory']);
$time=date("H:i:s");
$filess=mysql_fetch_assoc(mysql_query("SELECT * FROM `prace` ORDER BY `id` DESC LIMIT 1 "));
$files=$filess[id]+1;
if (@eregi('.jpe?g$',$_FILES['file']['name'])){
@chmod("files/".$files.".jpg",0777);
copy($_FILES['file']['tmp_name'], "files/".$files.".jpg");
if(mysql_query("INSERT INTO `prace` VALUES('0','$name','$opis','$stat','$prace','$catigory','$time','".$files.".jpg')") or die(mysql_error())){
Base::head();
echo 'Добавление прошло успешно!';
Base::foot();
exit;
}else{
Base::head();
echo 'Ошибка добавления!';
Base::foot();
}
}
elseif (@eregi('.png$',$_FILES['file']['name'])){
@chmod("files/".$files.".png",0777);
copy($_FILES['file']['tmp_name'], "files/".$files.".png");
if(mysql_query("INSERT INTO `prace` VALUES('0','$name','$opis','$stat','$prace','$catigory','$time','".$files.".png')") or die(mysql_error())){
Base::head();
echo 'Добавление прошло успешно!';
Base::foot();
exit;
}else{
Base::head();
echo 'Ошибка добавления!';
Base::foot();
}
}
elseif (@eregi('.gif$',$_FILES['file']['name'])){
@chmod("files/".$files.".gif",0777);
copy($_FILES['file']['tmp_name'], "files/".$files.".gif");
if(mysql_query("INSERT INTO `prace` VALUES('0','$name','$opis','$stat','$prace','$catigory','$time','".$files.".gif')") or die(mysql_error())){
Base::head();
echo 'Добавление прошло успешно!';
Base::foot();
exit;
}else{
Base::head();
echo 'Ошибка добавления!';
Base::foot();
}
}
}
?>