$img - $time - $size Tags: ";
$tags = explode(" ", $tags);
foreach($tags as $tag){
echo "$tag "; // For future use - catagorize by tag
}
echo "
";
}
$result->free();
}
}
function tag(){
if(!empty($_GET['tag'])){ // Show list of pictures according to one tag - maybe multiple tags in the future
echo "
";
}
$result->free();
}
}
function search(){
if(!empty($_GET['search'])){ // Show list of pictures according to search term
$search = sanitize($_GET['search']);
$search = explode(" ", $search);
echo "
Pictures found using search terms: ";
foreach ($search as $searches){
echo $searches." ";
}
echo ":
";
}
if(isset($_POST['submit'])){
if(!isset($_POST['username']) || !isset($_POST['comment']) || !isset($_POST['tags'])) die("Please fill in the form completly");
require('dbsettings.php');
$location = 'Pictures';
$extensions = array('png', 'gif', 'jpg', 'jpeg');
$short = substr(number_format(time() * mt_rand(),0,'',''),0,10);
$short = base_convert($short, 10, 36);
$upusername = $_POST['username'];
$upcomment = $_POST['comment'];
$tags = $_POST['tags'];
$name = $_FILES["file"]["name"];
$type = $_FILES["file"]["type"];
$size = ($_FILES["file"]["size"] / 1024); // get size of file in Kb
$name = cln_file_name($name);
$type = sanitize($type);
$size = sanitize($size);
$upcomment = comment($upcomment);
$tags = sanitize($tags);
$upusername = sanitize($upusername);
//$notspace = array("\,", ".", "/", "\\", ":", "-", "_", "+", "=", "~", "#", "&", "");
//$tags = preg_replace($notspace, " ", $tags);
$size = round($size, 2)." Kb";
$time = date("d/j/y - g:i:s a");
$file_ext = pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION);
if(!in_array($file_ext, $extensions))die("Wrong or no file extension"); // stop the upload if it's wrong
$name = $short.".".$file_ext;
if (($_FILES["file"]["size"] < 4000000000)){
if ($_FILES["file"]["error"] > 0){
echo "Return Code: " . $_FILES["file"]["error"] . " ";
}else{
if (file_exists("Pictures/" . $name)){
echo $name." already exists. ";
}else{
if(preg_match('/php/i', $name) || preg_match('/phtml/i', $name) || preg_match('/htaccess/i', $name)){
echo $name." is not allowed, sorry about that...";
}else{
// Somehow bump one of the images from the recently upload table and add new image in its place
$sql = "SELECT `name` FROM `recentpics` WHERE `id` = '1'";
if($result = $db->query($sql)){
$row = $result->fetch_assoc();
if ($row){
$rpics = explode('-', $row['name']);
$rpics = $rpics[1].'-'.$name;
$sql = "DELETE FROM `recentpics` WHERE `id` = 1";
if($result = $db->query($sql)){
$sql = "INSERT INTO `recentpics` (id, name) VALUES ('1', '$rpics')";
if($result = $db->query($sql)){
$sql="INSERT INTO `share` (name, location, type, size, time, comment, username, tags) VALUES ('$name', '$location', '$type', '$size', '$time', '$upcomment', '$upusername', '$tags')";
if($result = $db->query($sql)){
move_uploaded_file($_FILES["file"]["tmp_name"], "Pictures/" . $name);
$donefile = 'Pictures/'.$name;
genthumb($name);
echo "Stored at: ". $name."";
}elseif(!$result = $db->query($sql)){
echo 'There was a problem trying to upload your file - [' . $db->error . ']';
}else{
echo "There was a problem trying to upload your file - Could be a server error";
}
}elseif(!$result = $db->query($sql)){
echo 'There was a problem trying to upload your file - [ '.$db->error.' ]';
}else{
echo "There was a problem trying to upload your file - Could be a server error";
}
}elseif(!$result = $db->query($sql)){
echo 'There was a problem trying to upload your file - [ '.$db->error.' ]';
}else{
echo "There was a problem trying to upload your file - Could be a server error";
}
}
}elseif(!$result = $db->query($sql)){
echo 'There was a problem trying to upload your file - [ '.$db->error.' ]';
}else{
echo "There was a problem trying to upload your file - Could be a server error";
}
}
}
}
}else{
die("File too big!");
}
}
}
?>