//680819-action.php
<?php
session_start();
if($_SESSION['image'] == $_GET['id'])
{
require("./connect.php");
$imgID = mysql_real_escape_string($_GET['id']);
$action = mysql_real_escape_string($_GET['a']);
switch($action)
{
case 0:
//DELETE
mysql_query("DELETE FROM tbl_680819 WHERE id = ".$imgID." LIMIT 1");
case 1:
//KEEP
mysql_query("UPDATE tbl_680819 SET status = 1 WHERE id = ".$imgID." LIMIT 1");
}
}
$_SESSION['url'] = true;
header("Location: " . $_SERVER['HTTP_REFERER']);
exit();
?>
//680819-image.php
<?php
require_once("./connect.php");
$imgID = mysql_real_escape_string($_GET['id']);
$type = "";
switch($_GET['type'])
{
case 1:
$type = "small";
break;
default:
$type = "large";
}
$query = mysql_query("SELECT ".$type."img FROM tbl_680819 WHERE id = '".$imgID."' LIMIT 1") or die (mysql_error());
if(mysql_num_rows($query)>0)
{
$row = mysql_fetch_assoc($query);
header("Content-type: image/jpeg");
print $row[$type.'img'];
exit ();
}
?>
//680819.php
<?php
//http://www.eksperten.dk/spm/680819
session_start();
require("./connect.php");
//Sletter alle pics som ikke er godkendt...
mysql_query("DELETE FROM tbl_680819 WHERE status = 0 AND datotid < ADDDATE(INTERVAL -1 HOUR)");
function resize( $filename, $newfilename, $maxw, $maxh, $ext )
{
$result = false;
switch($ext)
{
case "jpg":
case "jpeg":
case "jpe":
$srcim = imagecreatefromjpeg( $filename );
break;
case "gif":
$srcim = imagecreatefromgif( $filename );
break;
case "png":
$srcim = imagecreatefrompng( $filename );
break;
default:
return false;
}
$ow = imagesx( $srcim );
$oh = imagesy( $srcim );
$wscale = $maxw / $ow;
$hscale = $maxh / $oh;
$scale = ( $hscale < $wscale ? $hscale : $wscale );
$nw = round( $ow * $scale, 0 );
$nh = round( $oh * $scale, 0 );
$dstim = imagecreatetruecolor( $nw, $nh );
imagecopyresampled( $dstim, $srcim, 0, 0, 0, 0, $nw, $nh, $ow, $oh );
switch($ext)
{
case "jpg":
case "jpeg":
case "jpe":
$result = imagejpeg( $dstim, $newfilename, 85 );
break;
case "gif":
$result = imagegif( $dstim, $newfilename );
break;
case "png":
$result = imagepng( $dstim, $newfilename );
break;
default:
return false;
}
imagedestroy( $dstim );
imagedestroy( $srcim );
return $result;
}
$allowPics = array("jpg","jpeg","jpe","gif","png");
$errmsg = "";
$imgID = 0;
if(isset($_POST['uppic']))
{
if($_FILES['imagefile']['size'] > 1024000)
{
$errmsg = "Too large!";
}
else
{
$extension = strtolower(end(explode(".",$_FILES['imagefile']['name'])));
if(!in_array($extension,$allowPics))
{
$errmsg = "Wrong filetype!";
}
else
{
move_uploaded_file($_FILES['imagefile']['tmp_name'],"latest.img");
$image = mysql_real_escape_string(file_get_contents("latest.img"));
resize("latest.img","latest.img",110,110,$extension);
$resized = mysql_real_escape_string(file_get_contents("latest.img"));
mysql_query ("INSERT INTO tbl_680819 (extension,smallimg,largeimg,datotid) VALUES ('".$extension."','".$resized."','".$image."',now())") or die(mysql_error());
$imgID = mysql_insert_id();
$_SESSION['image'] = $imgID;
}
}
}
?>
<html>
<head>
<title>Upload an image to a database</title>
<?php
if(!empty($errmsg))
{
echo "<h3>Error: " . $errmsg . "</h3>";
}
if($imgID > 0)
{
echo "<a href=\"680819-image.php?id=".$imgID."\"><img src=\"680819-image.php?id=".$imgID."&type=1\"><a/><br>";
echo "<a href=\"680819-action.php?id=".$imgID."&a=1\">Accept</a> - <a href=\"680819-action.php?id=".$imgID."&a=0\">Delete</a><br>";
}
if($_SESSION['url'] === true)
{
echo "<input type=\"text\" size=\"50\" value=\"
http://www.codebreaker.dk/exp/680819-image.php?id=".$_SESSION['image']."\">\n"; $_SESSION['url'] = false;
$_SESSION['image'] = 0;
}
?>
<h2>Please upload a new picture</h2>
<form enctype="multipart/form-data" method="post">
Please choose an image to upload: <input type="file" name="imagefile"><br>
then: <input type="submit" name="uppic" value="Upload"></form><br>
</body>
</html>