52 lines
950 B
PHP
52 lines
950 B
PHP
<?php
|
|
|
|
include("../../global.php");
|
|
session_start();
|
|
|
|
if (!isset($_SESSION["username"])) goto fail;
|
|
|
|
$out = $database -> query("SELECT username, admin, id FROM user WHERE BINARY username=\"" . $_SESSION["username"] . "\"");
|
|
|
|
if ($out -> num_rows != 1)
|
|
{
|
|
fail:
|
|
echo "nope";
|
|
header("Location: ../../../index.php");
|
|
return;
|
|
}
|
|
|
|
$status = 0;
|
|
$supported_formats = array("jpg", "jpeg", "png", "webp");
|
|
|
|
if (!isset($_FILES["file_upload"]))
|
|
{
|
|
$status = 1;
|
|
goto send;
|
|
}
|
|
|
|
if (!isset($_POST["name"]))
|
|
{
|
|
$status = 2;
|
|
goto send;
|
|
}
|
|
|
|
if (!in_array(strtolower(pathinfo($_FILES["file_upload"]["name"], PATHINFO_EXTENSION)), $supported_formats))
|
|
{
|
|
$status = 3;
|
|
goto send;
|
|
}
|
|
|
|
$res = $out -> fetch_assoc();
|
|
|
|
if (!$res["admin"])
|
|
{
|
|
if ($_FILES["file_upload"]["size"] > 5 * 1024 * 1024)
|
|
{
|
|
$status = 4;
|
|
goto send;
|
|
}
|
|
}
|
|
|
|
send:
|
|
header('Content-type: application/json');
|
|
echo json_encode(["status" => $status]); |