include_once "_inc_global.php";
include_once "_inc_header.php";
//-------- security --------
if(!$gID)exit("login required");
if(!$gAdmin && ($optupload2=="no" && $optupload2=="no"))exit("login required");
if(!$gLoggedIn && $optupload2=="no")exit("login required");
//---------allowed extensions.
$allowed_img_ext=',.gif,.jpg,.jpeg,.png,.GIF,.JPG,.JPEG,.PNG,';
$allowed_txt_ext=',.htm,.html,.txt,.js,.css,.htm,.html,.txt,.js,.css,.HTM,.HTML,.TXT,.JS,.CSS,.HTM,.HTML,.TXT,.JS,.CSS,';
//$tmpdir=$gPath.$dirlink;
/*
wrtb("gID=".$gID);
wrtb("gLoginDir=".$gLoginDir);
wrtb("gLoginPath=".$gLoginPath);
wrtb("gLoggedIn=".$gLoggedIn);
wrtb("gPath=".$gPath);
wrtb("dirlink=".$dirlink);
*/
if($gLoggedIn){
$tmpdir=$gPath.$dirlink;
}else{
$tmpdir=$gLoginPath;
}
$tmpdir = _rep($tmpdir,"/NFTs","");
if(_in($dirdisplay,"/NFTs")){
$dirdisplay = "/".$gID;
}
function ext_allowed($ext,$exts){
if(!strstr($ext,'.'))return false;
if(_in($exts,",".$ext.","))return true;
return false;}
?>
Uploading...
UPLOAD TO:
//----------------- process uploads -------------------------
$anyfileloaded=false;
$newfileloaded=false;
if(isset($_POST['Submit'])){
echo "
";
//---process the local files----
for($i=0;$i10000){
$w=($imginfo[0]/$imginfo[1])*5000;
$h=($imginfo[1]/$imginfo[0])*5000;
resize($tmpdir.$newname,$tmpdir.$newname,$w,$h,$ext);
}
resize($tmpdir.$newname,$tmpdir.$thumbname,100,80,$ext);
?>
$newfileloaded=true;
$anyfileloaded=true;
}
//if uploads are allowed when not logged in then we only permit images to be uploaded
if(ext_allowed($ext,$allowed_txt_ext)){
if(!$gLoggedIn || "TURNOFF"=="TURNOFF"){
$msg="only images allowed";
}else{
$typ="txt";
$newname=getNewName($tmpuser,$name);
$rslt=@move_uploaded_file($_FILES['file']['tmp_name'][$i],"$tmpdir"."$newname");
?>
$newfileloaded=true;
$anyfileloaded=true;
}
}
if(!$newfileloaded){
?>
File 1: Failed! - (File: , Type: , Size: ).
}
} else {
echo "Invalid filename detected.";
}
}
}
}
if($anyfileloaded && $gLoggedIn){
refreshMenu();
}
?>