");
//print_r($_GET);
//print_r($_POST);
//print_r($_POST["part_type_dropdown"]);
//print_r($GLOBALS);
//print_r($_SERVER);
//print_r($_SESSION);
//print_r($_FILES);
//echo 'GET[name] = ' . htmlspecialchars($_GET["name"]) . '!';
//print ("");
$statement = "show databases";
//db_table($db, $statement);
if(!isset($_SESSION['email']))
{
echo "
You must sign in to upload files
";
goto exit_page;
}
if(isset($_SESSION['email']) && isset($_POST['upload']) && $_FILES['userfile']['size'] > 0)
{
$fileName = $_FILES['userfile']['name'];
$tmpName = $_FILES['userfile']['tmp_name'];
$fileSize = $_FILES['userfile']['size'];
$fileType = $_FILES['userfile']['type'];
$email = $_SESSION['email'];
$fp = fopen($tmpName, 'r');
$content = fread($fp, filesize($tmpName));
//$content = addslashes($content);
fclose($fp);
if(!get_magic_quotes_gpc())
{
$fileName = addslashes($fileName);
}
$statement = "INSERT INTO upload (email, name, size, type, content ) " .
"VALUES (?, ?, ?, ?, ?)";
$prepared_array = array($email, $fileName, $fileSize, $fileType, $content);
$stmt = $db->prepare($statement);
$count = $stmt->execute($prepared_array);
$tmpSize = filesize($tmpName);
//echo "
Temp File: $tmpName
";
echo "
Temp Size: $tmpSize
";
echo "
File $fileName uploaded
";
$statement = "select name, size, type from upload where email = '$email'";
db_table($db, $statement, "t01", NULL);
}
else
{
echo "File could not be uploaded
";
if(isset($_FILES['userfile'])){
$error_code = array(
0=>"There is no error, the file uploaded with success",
1=>"The uploaded file exceeds the upload_max_filesize directive in php.ini",
2=>"The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form",
3=>"The uploaded file was only partially uploaded",
4=>"No file was uploaded",
6=>"Missing a temporary folder"
);
echo "Error: " . $error_code[$_FILES['userfile']['error']] . "
";
}
}
$db = NULL;
exit_page:
pineapple_script_end();
pineapple_html_end();
}
catch (PDOException $e)
{
print ("
$e");
}
?>