ENGO150/FabrikaHradekTour
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

uploading image to user_content dir

Browse Source
This commit is contained in:
Václav Šmejkal 2024-05-24 18:34:11 +02:00
parent fd462ce88d
commit a139e6ca48
Signed by: ENGO150
GPG Key ID: 4A57E86482968843
1 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
res/forum/api/upload_picture.php
View File

@ -30,7 +30,9 @@ if (!isset($_POST["name"]))
goto send;
}
if (!in_array(strtolower(pathinfo($_FILES["file_upload"]["name"], PATHINFO_EXTENSION)), $supported_formats))
$file_format = strtolower(pathinfo($_FILES["file_upload"]["name"], PATHINFO_EXTENSION));
if (!in_array($file_format, $supported_formats))
{
$status = 3;
goto send;
@ -47,6 +49,23 @@ if (!$res["admin"])
}
}
$user_id = $res["id"];
$dir = "../../../user_content/" . $user_id;
if (!(file_exists($dir) && is_dir($dir)))
{
mkdir($dir);
}
$safe_name = mysqli_real_escape_string($database, $_POST["name"]);
$safe_desc = isset($_POST["desc"]) ? mysqli_real_escape_string($database, $_POST["desc"]) : null;
$photo_id = count(glob($dir . "/*"));
$database -> query("INSERT INTO post (title, description, author, photo_id) VALUES (\"" . $safe_name . "\", " . ($safe_desc == null ? "NULL" : "\"" . $safe_desc . "\"") . ", " . $user_id . ", " . $photo_id . ")");
move_uploaded_file($_FILES["file_upload"]["tmp_name"], $dir . "/" . $photo_id . "." . $file_format);
send:
header('Content-type: application/json');
echo json_encode(["status" => $status]);