<?
if($logged[username]){
if(!$_POST['upload']){ ?>
<form method="post" enctype="multipart/form-data">
Title:
<input name="title" type="text" id="title" size="25" maxlength="50">
<br />
Description:
<textarea name="description" cols="25" rows="3"></textarea>
<br>
Flash
:
<input type="file" name="data">
<br />
Has a thumbnail:
<input type="checkbox" name="thumbnail" value="checkbox" />
<br />
Thumbnail*
<input name="thumb" type="file" id="thumb" />
<br />
Width:
<input name="width" type="text" id="width" size="5" />
<br />
Height:
<input name="height" type="text" id="height" size="5" />
<br />
<input type="submit" name="upload" value="Upload File">
* Thumbnail must be 50x50
</form>
<? }
if($_POST['upload']){
$title = safe($_POST['title']);
$author = $logged[username];
$text = safe($_POST['description']);
$checkbox = $_POST['thumbnail'];
$width =safe($_POST['width']);
$height =safe($_POST['height']);
if($width == NULL)
{
die('Please go back and fill out the Width of your flash');
}
if($height == NULL)
{
die('Please go back and fill out the height of your flash');
}
if($checkbox== "checkbox"){
$checkbox= "yes";
}
else{
$checkbox= "no";
}
if (!isset($_FILES['data']['name']) || $_FILES['data']['name'] == '' ) {
die('No input file specified. Please go back and select a file to upload.');
}
if ($text ==NULL) {
die(' Please go back and enter a description.');
}
$max_filesize = 5242880;
$filetype = 'application/x-shockwave-flash';
$upload_path = '/flash/';
if ( !is_dir ($_SERVER['DOCUMENT_ROOT'] . $upload_path) ) {
exit ( 'Directory '.$upload_path.' does not exist!' );
}
if ($_FILES['data']['size'] > $max_filesize) {
die('Your filesize is too large. Please make your filesize smaller than 5 Megabytes.');
}
if ($_FILES['data']['type'] != $filetype) {
die('Sorry, your file was not of the ' . $filetype . ' mimetype (yours was ' . $_FILES['data']['type'] . ').');
}
$size = $_FILES['data']['size'];
$copy_to = $_SERVER['DOCUMENT_ROOT'] . $upload_path . $_FILES['data']['name'];
$copy_over = $_SERVER['DOCUMENT_ROOT'] . $upload_path . $_FILES['thumb']['name'];
$link = $upload_path . $_FILES['data']['name'];
$image = $upload_path . $_FILES['thumb']['name'];
$upload = move_uploaded_file($_FILES['data']['tmp_name'], $copy_to);
$upload = move_uploaded_file($_FILES['thumb']['tmp_name'], $copy_over);
$sql = "INSERT INTO TABLE (title, author, text, size, link, image, box, w, h) VALUES ('$title', '$author', '$text', '$size', '$link', '$image', '$checkbox', '$width', '$height' )";
$upload = mysql_query($sql)
or die(mysql_error());
$flash = mysql_fetch_array(mysql_query("SELECT * FROM TABLE WHERE username='$author'"));
$flash = $flash['flashes'];
$newflash = ($flash + 1);
$update = mysql_query("UPDATE TABLE SET flashes=$newflash WHERE username='$author'");
if (!$upload) {
die('Sorry, your file could not be uploaded.');
}else{ echo " Congradulations, Your flash has been uploaded";
}
}}else{
echo" You Must Be Logged In To Upload";}
?>