$cmd=$_GET['cmd']; $event="Add"; $pawn_id=$_GET['pawn_id']; $authorized = "Y"; if ($link): $error_flag = "N"; $sql = "select member_id, pawn_name, psn_name, image_name, internal_image_name, show_image_flag from pawn where pawn_id = $pawn_id"; $result = mysqli_query($link, $sql ); $row = mysqli_fetch_assoc($result); $psn_name = $row['psn_name']; $pawn_name = $row['pawn_name']; $image_name = stripslashes($row['image_name']); $show_image_flag = $row['show_image_flag']; $internal_image_name = $row['internal_image_name']; if ( $row['member_id'] == $login_id ) { if ( $cmd == "upload") { if (empty($_FILES["file"])) { $error_flag = "Y"; $error_message = "Image file to be uploaded was not chosen."; } else { $myFile = $_FILES["file"]; if ($myFile["error"] !== UPLOAD_ERR_OK) { $error_flag = "Y"; if ( $_FILES["file"]["error"] == 4 ) { $error_message = "Please choose image file to be uploaded."; } else { $error_message = "Oops! File error: ".$_FILES["file"]["error"]; } } else { if ($_FILES["file"]["size"] <= 1024000) { $upload_name = preg_replace("/[^A-Z0-9._-]/i", "_", $myFile["name"]); $parts = pathinfo($upload_name); $extension = $parts["extension"]; $internal_image_name = $psn_name . "." . $extension; move_uploaded_file($_FILES["file"]["tmp_name"], "upload/" . $internal_image_name); $image_name = $_FILES["file"]["name"]; $success_message = "Image file " . $image_name . " was successfully uploaded."; $internal_image_name = $internal_image_name; } else { $error_flag = "Y"; $error_message = "File size cannot exceed 1M."; } } } if ( $error_flag == "N" ) { $db_image_name = addslashes($image_name); $sql = "update pawn set image_name = '$db_image_name', internal_image_name = '$internal_image_name', show_image_flag = 'Y', last_update_date = CURDATE() where pawn_id = $pawn_id"; $result = mysqli_query($link, $sql ); $show_image_flag = "Y"; $refresh_image_flag="Y"; } } if ( $cmd == "set_external" ) { if (!isset ($_POST['external_url']) || $_POST['external_url'] == "") { $error_flag = "Y"; $error_message = "External URL cannot be empty. Please enter valid URL."; } else { $p_internal_image_name = $_POST['external_url']; $sql = "update pawn set image_name = 'EXTERNAL', internal_image_name = '$p_internal_image_name', show_image_flag = 'Y', last_update_date = CURDATE() where pawn_id = $pawn_id"; $result = mysqli_query($link, $sql ); if(!$result) { $error_flag = "Y"; $error_message = mysqli_error($link); } else { $success_message = "External URL " . $internal_image_name . " saved."; $show_image_flag = "Y"; $image_name = "EXTERNAL"; $internal_image_name = $p_internal_image_name; $refresh_image_flag="Y"; } } } } else { if ( $login_id != 0 ): $error_message = "You are not authorized to perform this action."; $error_flag = "Y"; $authorized = "N"; endif; } if ($image_name == "EXTERNAL") { $image_url = $internal_image_name; $image_url_disp = $internal_image_name; } else { $image_url_disp = $upload_directory . $internal_image_name; $image_url = $upload_directory . $internal_image_name; //. "?" . Date("U"); $internal_image_name = ""; } endif;?>
icon.Restrictions - Read carefully before uploading: