Multi upload

if($_GET['action'] == upload){
$uploadDir = '../images/'; 
$allowedFileTypes = array('jpg','gif','png'); 
$thumbDir1 = '../images/'; 
$thumbDir2 = '../images/'; 
$thumbPrefix1 = 'f'; 
$thumbPrefix2 = 's'; 
$thumbHeight1 = 389; 
$thumbWidth1 = 550; 
$thumbHeight2 = 305; 
$thumbWidth2 = 431; 

//Funktioner som bruges:
function getExtension($filename){
return strtolower( pathinfo( $filename, PATHINFO_EXTENSION ) );
}

function resize( $filename, $newfilename, $maxw, $maxh, $quality=100 )
{
$extension = getExtension($filename);
switch($extension)
{
case 'jpeg':
case 'jpe':
case 'jpg':
$srcim = imagecreatefromjpeg( $filename );
break;
case 'gif':
$srcim = imagecreatefromgif( $filename );
break;
case 'png':
$srcim = imagecreatefrompng( $filename );
break;
default:
return false;
}
$ow = imagesx( $srcim );
$oh = imagesy( $srcim );
$wscale = $maxw / $ow;
$hscale = $maxh / $oh;
$scale = min( $hscale, $wscale );
$nw = round( $ow * $scale, 0 );
$nh = round( $oh * $scale, 0 );
$dstim = imagecreatetruecolor( $nw, $nh );
imagecopyresampled( $dstim, $srcim, 0, 0, 0, 0, $nw, $nh, $ow, $oh );
switch($extension)
{
case 'jpeg':
case 'jpe':
case 'jpg':
imagejpeg( $dstim, $newfilename, $quality );
break;
case 'gif':
imagegif( $dstim, $newfilename );
break;
case 'png':
$png_q = floor( abs( $quality / 10 - 9.9 ) );
imagepng( $dstim, $newfilename, $png_q );
break;
default:
return false;
}
imagedestroy( $dstim );
imagedestroy( $srcim );
return file_exists($newfilename);
}

if(isset($_POST['myUpload']))
{
if(is_uploaded_file($_FILES['myFile']['tmp_name']))
{
$extension = getExtension($_FILES['myFile']['name']);

if(in_array($extension,$allowedFileTypes))
{
if(move_uploaded_file($_FILES['myFile']['tmp_name'],$uploadDir . basename($_FILES['myFile']['name'])))
{
$resize1 = resize($uploadDir . basename($_FILES['myFile']['name']), $thumbDir1 . $thumbPrefix1 . basename($_FILES['myFile']['name']), $thumbWidth1, $thumbHeight1);
$resize2 = resize($uploadDir . basename($_FILES['myFile']['name']), $thumbDir2 . $thumbPrefix2 . basename($_FILES['myFile']['name']), $thumbWidth2, $thumbHeight2);
if($resize1 && $resize2){

if (isset($_POST["PHPSESSID"])) {
        session_id($_POST["PHPSESSID"]);
    } else if (isset($_GET["PHPSESSID"])) {
        session_id($_GET["PHPSESSID"]);
    }

    session_start();

    $POST_MAX_SIZE = ini_get('post_max_size');
    $unit = strtoupper(substr($POST_MAX_SIZE, -1));
    $multiplier = ($unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1)));

    if ((int)$_SERVER['CONTENT_LENGTH'] > $multiplier*(int)$POST_MAX_SIZE && $POST_MAX_SIZE) {
        header("HTTP/1.1 500 Internal Server Error"); // This will trigger an uploadError event in SWFUpload
        echo "POST exceeded maximum allowed size.";
        exit(0);
    }

    $save_path = getcwd() . "/uploads/";                // The path were we will save the file (getcwd() may not be reliable and should be tested in your environment)
    $upload_name = "Filedata";
    $max_file_size_in_bytes = 2147483647;                // 2GB in bytes
    $extension_whitelist = array("jpg", "gif", "png");    // Allowed file extensions
    $valid_chars_regex = '.A-Z0-9_ !@#$%^&()+={}\[\]\',~`-';                // Characters allowed in the file name (in a Regular Expression format)
    
    $MAX_FILENAME_LENGTH = 260;
    $file_name = "";
    $file_extension = "";
    $uploadErrors = array(
        0=>"There is no error, the file uploaded with success",
        1=>"The uploaded file exceeds the upload_max_filesize directive in php.ini",
        2=>"The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form",
        3=>"The uploaded file was only partially uploaded",
        4=>"No file was uploaded",
        6=>"Missing a temporary folder"
    );


    if (!isset($_FILES[$upload_name])) {
        HandleError("No upload found in \$_FILES for " . $upload_name);
        exit(0);
    } else if (isset($_FILES[$upload_name]["error"]) && $_FILES[$upload_name]["error"] != 0) {
        HandleError($uploadErrors[$_FILES[$upload_name]["error"]]);
        exit(0);
    } else if (!isset($_FILES[$upload_name]["tmp_name"]) || !@is_uploaded_file($_FILES[$upload_name]["tmp_name"])) {
        HandleError("Upload failed is_uploaded_file test.");
        exit(0);
    } else if (!isset($_FILES[$upload_name]['name'])) {
        HandleError("File has no name.");
        exit(0);
    }
    
    $file_size = @filesize($_FILES[$upload_name]["tmp_name"]);
    if (!$file_size || $file_size > $max_file_size_in_bytes) {
        HandleError("File exceeds the maximum allowed size");
        exit(0);
    }
    
    if ($file_size <= 0) {
        HandleError("File size outside allowed lower bound");
        exit(0);
    }


    $file_name = preg_replace('/[^'.$valid_chars_regex.']|\.+$/i', "", basename($_FILES[$upload_name]['name']));
    if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {
        HandleError("Invalid file name");
        exit(0);
    }


    if (file_exists($save_path . $file_name)) {
        HandleError("File with this name already exists");
        exit(0);
    }

    $path_info = pathinfo($_FILES[$upload_name]['name']);
    $file_extension = $path_info["extension"];
    $is_valid_extension = false;
    foreach ($extension_whitelist as $extension) {
        if (strcasecmp($file_extension, $extension) == 0) {
            $is_valid_extension = true;
            break;
        }
    }
    if (!$is_valid_extension) {
        HandleError("Invalid file extension");
        exit(0);
    }

    if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], $save_path.$file_name)) {
        HandleError("File could not be saved.");
        exit(0);
    }

    exit(0);


function HandleError($message) {
    echo $message;
}

$resize1 = resize($uploadDir . basename($_FILES['myFile']['name']), $thumbDir1 . $thumbPrefix1 . basename($_FILES['myFile']['name']), $thumbWidth1, $thumbHeight1);
$resize2 = resize($uploadDir . basename($_FILES['myFile']['name']), $thumbDir2 . $thumbPrefix2 . basename($_FILES['myFile']['name']), $thumbWidth2, $thumbHeight2);

if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], $save_path.$file_name)) {
        HandleError("File could not be saved.");
        exit(0);
    }

<?php
    if (isset($_POST["PHPSESSID"])) {
        session_id($_POST["PHPSESSID"]);
    } else if (isset($_GET["PHPSESSID"])) {
        session_id($_GET["PHPSESSID"]);
    }

    session_start();

    $POST_MAX_SIZE = ini_get('post_max_size');
    $unit = strtoupper(substr($POST_MAX_SIZE, -1));
    $multiplier = ($unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1)));

    if ((int)$_SERVER['CONTENT_LENGTH'] > $multiplier*(int)$POST_MAX_SIZE && $POST_MAX_SIZE) {
        header("HTTP/1.1 500 Internal Server Error"); // This will trigger an uploadError event in SWFUpload
        echo "POST exceeded maximum allowed size.";
        exit(0);
    }

    $uploadDir = '/uploads/'; 
    $allowedFileTypes = array('jpg','gif','png'); 
    $thumbDir1 = '/tumb1/'; 
    $thumbDir2 = '/tumb2/'; 
    $thumbDir3 = '/tumb3/'; 
    $thumbPrefix1 = 'f'; 
    $thumbPrefix2 = 's'; 
    $thumbPrefix2 = 's'; 
    $thumbHeight1 = 389; 
    $thumbWidth1 = 550; 
    $thumbHeight2 = 305; 
    $thumbWidth2 = 431; 
    $thumbHeight3 = 305; 
    $thumbWidth3 = 431; 
    
    $save_path = getcwd() . "/uploads/";                // The path were we will save the file (getcwd() may not be reliable and should be tested in your environment)
    $upload_name = "Filedata";
    $max_file_size_in_bytes = 2147483647;                // 2GB in bytes
    $extension_whitelist = array("jpg", "gif", "png");    // Allowed file extensions
    $valid_chars_regex = '.A-Z0-9_ !@#$%^&()+={}\[\]\',~`-';                // Characters allowed in the file name (in a Regular Expression format)
    
    $MAX_FILENAME_LENGTH = 260;
    $file_name = "";
    $file_extension = "";
    $uploadErrors = array(
        0=>"There is no error, the file uploaded with success",
        1=>"The uploaded file exceeds the upload_max_filesize directive in php.ini",
        2=>"The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form",
        3=>"The uploaded file was only partially uploaded",
        4=>"No file was uploaded",
        6=>"Missing a temporary folder"
    );


    if (!isset($_FILES[$upload_name])) {
        HandleError("No upload found in \$_FILES for " . $upload_name);
        exit(0);
    } else if (isset($_FILES[$upload_name]["error"]) && $_FILES[$upload_name]["error"] != 0) {
        HandleError($uploadErrors[$_FILES[$upload_name]["error"]]);
        exit(0);
    } else if (!isset($_FILES[$upload_name]["tmp_name"]) || !@is_uploaded_file($_FILES[$upload_name]["tmp_name"])) {
        HandleError("Upload failed is_uploaded_file test.");
        exit(0);
    } else if (!isset($_FILES[$upload_name]['name'])) {
        HandleError("File has no name.");
        exit(0);
    }
    
    $file_size = @filesize($_FILES[$upload_name]["tmp_name"]);
    if (!$file_size || $file_size > $max_file_size_in_bytes) {
        HandleError("File exceeds the maximum allowed size");
        exit(0);
    }
    
    if ($file_size <= 0) {
        HandleError("File size outside allowed lower bound");
        exit(0);
    }


    $file_name = preg_replace('/[^'.$valid_chars_regex.']|\.+$/i', "", basename($_FILES[$upload_name]['name']));
    if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {
        HandleError("Invalid file name");
        exit(0);
    }


    if (file_exists($save_path . $file_name)) {
        HandleError("File with this name already exists");
        exit(0);
    }

    $path_info = pathinfo($_FILES[$upload_name]['name']);
    $file_extension = $path_info["extension"];
    $is_valid_extension = false;
    foreach ($extension_whitelist as $extension) {
        if (strcasecmp($file_extension, $extension) == 0) {
            $is_valid_extension = true;
            break;
        }
    }
    if (!$is_valid_extension) {
        HandleError("Invalid file extension");
        exit(0);
    }

    if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], $save_path.$file_name)) {
        HandleError("File could not be saved.");
        exit(0);
    }

    $resize1 = resize($uploadDir . basename($_FILES[$upload_name]['name']), $thumbDir1 . $thumbPrefix1 . basename($_FILES[$upload_name]['name']), $thumbWidth1, $thumbHeight1);
    $resize2 = resize($uploadDir . basename($_FILES[$upload_name]['name']), $thumbDir2 . $thumbPrefix2 . basename($_FILES[$upload_name]['name']), $thumbWidth2, $thumbHeight2);
    $resize3 = resize($uploadDir . basename($_FILES[$upload_name]['name']), $thumbDir3 . $thumbPrefix3 . basename($_FILES[$upload_name]['name']), $thumbWidth3, $thumbHeight3);
    
    exit(0);


function HandleError($message) {
    echo $message;
}
?>

<?php
    if (isset($_POST["PHPSESSID"])) {
        session_id($_POST["PHPSESSID"]);
    } else if (isset($_GET["PHPSESSID"])) {
        session_id($_GET["PHPSESSID"]);
    }

    session_start();

    $POST_MAX_SIZE = ini_get('post_max_size');
    $unit = strtoupper(substr($POST_MAX_SIZE, -1));
    $multiplier = ($unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1)));

    if ((int)$_SERVER['CONTENT_LENGTH'] > $multiplier*(int)$POST_MAX_SIZE && $POST_MAX_SIZE) {
        header("HTTP/1.1 500 Internal Server Error"); // This will trigger an uploadError event in SWFUpload
        echo "POST exceeded maximum allowed size.";
        exit(0);
    }

    $save_path = getcwd() . "/uploads/";
    $extension_whitelist = array("jpg", "gif", "png", "mp3");    // Allowed file extensions
    $thumbDir1 = '/galleri/files/'; 
    $thumbDir2 = '/galleri/thumbs/thumbnails/'; 
    $thumbDir3 = '/galleri/thumbs/tab/'; 
    $thumbPrefix1 = 'f'; 
    $thumbPrefix2 = 's'; 
    $thumbPrefix2 = 's'; 
    $thumbHeight1 = 500; 
    $thumbWidth1 = 666; 
    $thumbHeight2 = 150; 
    $thumbWidth2 = 200; 
    $thumbHeight3 = 56; 
    $thumbWidth3 = 56; 
    
    $upload_name = "Filedata";
    $max_file_size_in_bytes = 2147483647;                // 2GB in bytes
    $valid_chars_regex = '.A-Z0-9_ !@#$%^&()+={}\[\]\',~`-';                // Characters allowed in the file name (in a Regular Expression format)
    
    $MAX_FILENAME_LENGTH = 260;
    $file_name = "";
    $file_extension = "";
    $uploadErrors = array(
        0=>"There is no error, the file uploaded with success",
        1=>"The uploaded file exceeds the upload_max_filesize directive in php.ini",
        2=>"The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form",
        3=>"The uploaded file was only partially uploaded",
        4=>"No file was uploaded",
        6=>"Missing a temporary folder"
    );


    if (!isset($_FILES[$upload_name])) {
        HandleError("No upload found in \$_FILES for " . $upload_name);
        exit(0);
    } else if (isset($_FILES[$upload_name]["error"]) && $_FILES[$upload_name]["error"] != 0) {
        HandleError($uploadErrors[$_FILES[$upload_name]["error"]]);
        exit(0);
    } else if (!isset($_FILES[$upload_name]["tmp_name"]) || !@is_uploaded_file($_FILES[$upload_name]["tmp_name"])) {
        HandleError("Upload failed is_uploaded_file test.");
        exit(0);
    } else if (!isset($_FILES[$upload_name]['name'])) {
        HandleError("File has no name.");
        exit(0);
    }
    
    $file_size = @filesize($_FILES[$upload_name]["tmp_name"]);
    if (!$file_size || $file_size > $max_file_size_in_bytes) {
        HandleError("File exceeds the maximum allowed size");
        exit(0);
    }
    
    if ($file_size <= 0) {
        HandleError("File size outside allowed lower bound");
        exit(0);
    }


    $file_name = preg_replace('/[^'.$valid_chars_regex.']|\.+$/i', "", basename($_FILES[$upload_name]['name']));
    if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {
        HandleError("Invalid file name");
        exit(0);
    }


    if (file_exists($save_path . $file_name)) {
        HandleError("File with this name already exists");
        exit(0);
    }

    $path_info = pathinfo($_FILES[$upload_name]['name']);
    $file_extension = $path_info["extension"];
    $is_valid_extension = false;
    foreach ($extension_whitelist as $extension) {
        if (strcasecmp($file_extension, $extension) == 0) {
            $is_valid_extension = true;
            break;
        }
    }
    if (!$is_valid_extension) {
        HandleError("Invalid file extension");
        exit(0);
    }

    if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], $save_path.$file_name)) {
        HandleError("File could not be saved.");
        exit(0);
    }

    $resize1 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir1 . $thumbPrefix1 . basename($_FILES[$upload_name]['name']), $thumbWidth1, $thumbHeight1);
    $resize2 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir2 . $thumbPrefix2 . basename($_FILES[$upload_name]['name']), $thumbWidth2, $thumbHeight2);
    $resize3 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir3 . $thumbPrefix3 . basename($_FILES[$upload_name]['name']), $thumbWidth3, $thumbHeight3);
    
exit(0);


function HandleError($message) {
    echo $message;
}
?>

<?php
    if (isset($_POST["PHPSESSID"])) {
        session_id($_POST["PHPSESSID"]);
    } else if (isset($_GET["PHPSESSID"])) {
        session_id($_GET["PHPSESSID"]);
    }

    session_start();

    $POST_MAX_SIZE = ini_get('post_max_size');
    $unit = strtoupper(substr($POST_MAX_SIZE, -1));
    $multiplier = ($unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1)));

    if ((int)$_SERVER['CONTENT_LENGTH'] > $multiplier*(int)$POST_MAX_SIZE && $POST_MAX_SIZE) {
        header("HTTP/1.1 500 Internal Server Error"); // This will trigger an uploadError event in SWFUpload
        echo "POST exceeded maximum allowed size.";
        exit(0);
    }

    $save_path = getcwd() . "/uploads/";
    $extension_whitelist = array("jpg", "gif", "png", "mp3");    // Allowed file extensions
    $thumbDir1 = '/galleri/files/'; 
    $thumbDir2 = '/galleri/thumbs/thumbnails/'; 
    $thumbDir3 = '/galleri/thumbs/tab/'; 
    $thumbPrefix1 = 'f'; 
    $thumbPrefix2 = 's'; 
    $thumbPrefix2 = 's'; 
    $thumbHeight1 = 500; 
    $thumbWidth1 = 666; 
    $thumbHeight2 = 150; 
    $thumbWidth2 = 200; 
    $thumbHeight3 = 56; 
    $thumbWidth3 = 56; 
    
    $upload_name = "Filedata";
    $max_file_size_in_bytes = 2147483647;                // 2GB in bytes
    $valid_chars_regex = '.A-Z0-9_ !@#$%^&()+={}\[\]\',~`-';                // Characters allowed in the file name (in a Regular Expression format)
    
    $MAX_FILENAME_LENGTH = 260;
    $file_name = "";
    $file_extension = "";
    $uploadErrors = array(
        0=>"There is no error, the file uploaded with success",
        1=>"The uploaded file exceeds the upload_max_filesize directive in php.ini",
        2=>"The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form",
        3=>"The uploaded file was only partially uploaded",
        4=>"No file was uploaded",
        6=>"Missing a temporary folder"
    );


    if (!isset($_FILES[$upload_name])) {
        HandleError("No upload found in \$_FILES for " . $upload_name);
        exit(0);
    } else if (isset($_FILES[$upload_name]["error"]) && $_FILES[$upload_name]["error"] != 0) {
        HandleError($uploadErrors[$_FILES[$upload_name]["error"]]);
        exit(0);
    } else if (!isset($_FILES[$upload_name]["tmp_name"]) || !@is_uploaded_file($_FILES[$upload_name]["tmp_name"])) {
        HandleError("Upload failed is_uploaded_file test.");
        exit(0);
    } else if (!isset($_FILES[$upload_name]['name'])) {
        HandleError("File has no name.");
        exit(0);
    }
    
    $file_size = @filesize($_FILES[$upload_name]["tmp_name"]);
    if (!$file_size || $file_size > $max_file_size_in_bytes) {
        HandleError("File exceeds the maximum allowed size");
        exit(0);
    }
    
    if ($file_size <= 0) {
        HandleError("File size outside allowed lower bound");
        exit(0);
    }


    $file_name = preg_replace('/[^'.$valid_chars_regex.']|\.+$/i', "", basename($_FILES[$upload_name]['name']));
    if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {
        HandleError("Invalid file name");
        exit(0);
    }


    if (file_exists($save_path . $file_name)) {
        HandleError("File with this name already exists");
        exit(0);
    }

    $path_info = pathinfo($_FILES[$upload_name]['name']);
    $file_extension = $path_info["extension"];
    $is_valid_extension = false;
    foreach ($extension_whitelist as $extension) {
        if (strcasecmp($file_extension, $extension) == 0) {
            $is_valid_extension = true;
            break;
        }
    }
    if (!$is_valid_extension) {
        HandleError("Invalid file extension");
        exit(0);
    }

    if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], $save_path.$file_name)) {
        HandleError("File could not be saved.");
        exit(0);
    }

    $resize1 = resize($save_path . basename($save_path.$file_name), $thumbDir1 . $thumbPrefix1 . basename($save_path.$file_name), $thumbWidth1, $thumbHeight1);
    $resize2 = resize($save_path . basename($save_path.$file_name), $thumbDir2 . $thumbPrefix2 . basename($save_path.$file_name), $thumbWidth2, $thumbHeight2);
    $resize3 = resize($save_path . basename($save_path.$file_name), $thumbDir3 . $thumbPrefix3 . basename($save_path.$file_name), $thumbWidth3, $thumbHeight3);
    
exit(0);


function HandleError($message) {
    echo $message;
}
?>

$resize1 = resize($save_path . basename($save_path.$file_name), $thumbDir1 . $thumbPrefix1 . basename($save_path.$file_name), $thumbWidth1, $thumbHeight1);

$resize1 = resize($save_path.$file_name, $thumbDir1 . $thumbPrefix1 . $file_name, $thumbWidth1, $thumbHeight1);

HandleError("RESIZE: ".$resize1);
exit(0);

$resize1 = resize($save_path.$file_name, $save_path . $thumbDir1 . $thumbPrefix1 . $file_name, $thumbWidth1, $thumbHeight1);

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Admin</title>
</head>

<body>
<?php
$rdr = new XMLReader();
$rdr->xmL(file_get_contents("smu/pic.xml"));
$n = 0;
while($rdr->read()){ 
switch ($rdr->nodeType) {
case XMLReader::TEXT:
$s = $rdr->value;
break;
case XMLReader::ELEMENT:
if($rdr->localName == 'billeder') {
$no = $rdr->getAttribute('no');
}
break;
case XMLReader::END_ELEMENT:
if($rdr->localName == 'navn') {
$navn = $s;
} else if($rdr->localName == 'billeder') {
if ($n==1) continue; //Hvor mange der må vises.
$nonow = ($no + 1);
$n++;
}
break;
}
}

if($_GET['action'] == upload){
$uploadDir = '../images/'; 
$allowedFileTypes = array('jpg','gif','png'); 
$thumbDir1 = '../images/'; 
$thumbDir2 = '../images/'; 
$thumbPrefix1 = 'f'; 
$thumbPrefix2 = 's'; 
$thumbHeight1 = 389; 
$thumbWidth1 = 550; 
$thumbHeight2 = 305; 
$thumbWidth2 = 431; 

//Funktioner som bruges:
function getExtension($filename){
return strtolower( pathinfo( $filename, PATHINFO_EXTENSION ) );
}

function resize( $filename, $newfilename, $maxw, $maxh, $quality=100 )
{
$extension = getExtension($filename);
switch($extension)
{
case 'jpeg':
case 'jpe':
case 'jpg':
$srcim = imagecreatefromjpeg( $filename );
break;
case 'gif':
$srcim = imagecreatefromgif( $filename );
break;
case 'png':
$srcim = imagecreatefrompng( $filename );
break;
default:
return false;
}
$ow = imagesx( $srcim );
$oh = imagesy( $srcim );
$wscale = $maxw / $ow;
$hscale = $maxh / $oh;
$scale = min( $hscale, $wscale );
$nw = round( $ow * $scale, 0 );
$nh = round( $oh * $scale, 0 );
$dstim = imagecreatetruecolor( $nw, $nh );
imagecopyresampled( $dstim, $srcim, 0, 0, 0, 0, $nw, $nh, $ow, $oh );
switch($extension)
{
case 'jpeg':
case 'jpe':
case 'jpg':
imagejpeg( $dstim, $newfilename, $quality );
break;
case 'gif':
imagegif( $dstim, $newfilename );
break;
case 'png':
$png_q = floor( abs( $quality / 10 - 9.9 ) );
imagepng( $dstim, $newfilename, $png_q );
break;
default:
return false;
}
imagedestroy( $dstim );
imagedestroy( $srcim );
return file_exists($newfilename);
}

if(isset($_POST['myUpload']))
{
if(is_uploaded_file($_FILES['myFile']['tmp_name']))
{
$extension = getExtension($_FILES['myFile']['name']);

if(in_array($extension,$allowedFileTypes))
{
if(move_uploaded_file($_FILES['myFile']['tmp_name'],$uploadDir . basename($_FILES['myFile']['name'])))
{
$resize1 = resize($uploadDir . basename($_FILES['myFile']['name']), $thumbDir1 . $thumbPrefix1 . basename($_FILES['myFile']['name']), $thumbWidth1, $thumbHeight1);
$resize2 = resize($uploadDir . basename($_FILES['myFile']['name']), $thumbDir2 . $thumbPrefix2 . basename($_FILES['myFile']['name']), $thumbWidth2, $thumbHeight2);
if($resize1 && $resize2){
echo '<h3 style="color:green;">File nu.('.basename($_FILES['myFile']['name']).') uploaded and resized succesfully</h3>';
echo '<form action="index.php?action=piceditor" method="post">
<table width=\"300\" border=\"0\">
  <tr>
    <td width=\"100\" align=\"right\">Billede fil:</td>
    <td><input name="no" type="text" id="no" value="'.$_POST[num].'" size="28" /><input name="num" type="hidden" id="num" value="'.$_POST[num].'" size="28" /></td>
  </tr>
  <tr>
    <td width=\"100\" align=\"right\">Giv billedet et navn:</td>
    <td><input name="pick" type="text" id="pick" value="'.basename($_FILES['myFile']['name']).'" size="28" /></td>
  </tr>
  <tr>
    <td width=\"100\" align=\"right\">Giv billedet et navn:</td>
    <td><input name="navn" type="text" id="navn" value="Filens navn" size="28" /></td>
  </tr>
  <tr>
    <td width=\"100\" align=\"right\"></td>
    <td><input type="submit" value="Gem"></td>
  </tr>
</table>
</form>';
echo '<h5>Thumb1</h5><img src="'.$thumbDir1 . $thumbPrefix1 . basename($_FILES['myFile']['name']).'" alt="thumb1" /><br />';
echo '<h5>Thumb2</h5><img src="'.$thumbDir2 . $thumbPrefix2 . basename($_FILES['myFile']['name']).'" alt="thumb2" /><br />';
}else{
echo '<h3 style="color:red;">File ('.basename($_FILES['myFile']['name']).') uploaded succesfully, but resize failed</h3>';
}
}
else
{
echo '<h3 style="color:red;">Error - unable to upload file: '.basename($_FILES['myFile']['name']).'</h3>';
}
}
else
{
echo '<h3 style="color:red;">Wrong filetype, allowed filetypes are: ('.implode(',',$allowedFileTypes).')</h3>';
}
}
else
{
echo '<h3 style="color:red;">No file selected<h3>';
}
}

echo '<font style=\"font-size:13px;font-weight:bold;\">Alt </font><font style=\"font-size:13px;color:#336699;font-weight:bold;\">blå tekst</font><font style=\"font-size:13px;font-weight:bold;\"> kan også redigeres.</font>';
echo '<form action="index.php?action=upload" method="post" enctype="multipart/form-data">';
echo '<table width=\"300\" border=\"0\">
  <tr>
    <td width=\"100\" align=\"right\">Fil nummer: </td>
    <td><input type="text" name="no" value="'.$nonow.'"><input type="hidden" name="num" value="'.$nonow.'"></td>
  </tr>
  <tr>
    <td width=\"100\" align=\"right\">Fil ('.implode(',',$allowedFileTypes).'): </td>
    <td><input type="file" name="myFile">';
echo '</td>
  </tr>
  <tr>
    <td width=\"100\" align=\"right\"></td>
    <td><input name="uploading" type="hidden" value="Upload file" id="uploading" size="28" /><input type="submit" name="myUpload" value="Upload file">';
echo '      </td>
  </tr>
</table>
  </label>
</form>';
}
else
echo "Denne filen kan kun ses af admin. <a href='java script:history.back()'>For at gå tilbage</a>";

?>
</body>

</html>

<?php
    if (isset($_POST["PHPSESSID"])) {
        session_id($_POST["PHPSESSID"]);
    } else if (isset($_GET["PHPSESSID"])) {
        session_id($_GET["PHPSESSID"]);
    }

    session_start();

    $POST_MAX_SIZE = ini_get('post_max_size');
    $unit = strtoupper(substr($POST_MAX_SIZE, -1));
    $multiplier = ($unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1)));

    if ((int)$_SERVER['CONTENT_LENGTH'] > $multiplier*(int)$POST_MAX_SIZE && $POST_MAX_SIZE) {
        header("HTTP/1.1 500 Internal Server Error"); // This will trigger an uploadError event in SWFUpload
        echo "POST exceeded maximum allowed size.";
        exit(0);
    }

    $save_path = getcwd() . "/uploads/";
    $extension_whitelist = array("jpg", "gif", "png", "mp3");    // Allowed file extensions
    $thumbDir1 = '/galleri/files/'; 
    $thumbDir2 = '/galleri/thumbs/thumbnails/'; 
    $thumbDir3 = '/galleri/thumbs/tab/'; 
    $thumbPrefix1 = 'f'; 
    $thumbPrefix2 = 's'; 
    $thumbPrefix2 = 's'; 
    $thumbHeight1 = 500; 
    $thumbWidth1 = 666; 
    $thumbHeight2 = 150; 
    $thumbWidth2 = 200; 
    $thumbHeight3 = 56; 
    $thumbWidth3 = 56; 
    
    $upload_name = "Filedata";
    $max_file_size_in_bytes = 2147483647;                // 2GB in bytes
    $valid_chars_regex = '.A-Z0-9_ !@#$%^&()+={}\[\]\',~`-';                // Characters allowed in the file name (in a Regular Expression format)
    
    $MAX_FILENAME_LENGTH = 260;
    $file_name = "";
    $file_extension = "";
    $uploadErrors = array(
        0=>"There is no error, the file uploaded with success",
        1=>"The uploaded file exceeds the upload_max_filesize directive in php.ini",
        2=>"The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form",
        3=>"The uploaded file was only partially uploaded",
        4=>"No file was uploaded",
        6=>"Missing a temporary folder"
    );

    //Funktioner som bruges:
function getExtension($filename){
return strtolower( pathinfo( $filename, PATHINFO_EXTENSION ) );
}

function resize( $filename, $newfilename, $maxw, $maxh, $quality=100 )
{
$extension = getExtension($filename);
switch($extension)
{
case 'jpeg':
case 'jpe':
case 'jpg':
$srcim = imagecreatefromjpeg( $filename );
break;
case 'gif':
$srcim = imagecreatefromgif( $filename );
break;
case 'png':
$srcim = imagecreatefrompng( $filename );
break;
default:
return false;
}
$ow = imagesx( $srcim );
$oh = imagesy( $srcim );
$wscale = $maxw / $ow;
$hscale = $maxh / $oh;
$scale = min( $hscale, $wscale );
$nw = round( $ow * $scale, 0 );
$nh = round( $oh * $scale, 0 );
$dstim = imagecreatetruecolor( $nw, $nh );
imagecopyresampled( $dstim, $srcim, 0, 0, 0, 0, $nw, $nh, $ow, $oh );
switch($extension)
{
case 'jpeg':
case 'jpe':
case 'jpg':
imagejpeg( $dstim, $newfilename, $quality );
break;
case 'gif':
imagegif( $dstim, $newfilename );
break;
case 'png':
$png_q = floor( abs( $quality / 10 - 9.9 ) );
imagepng( $dstim, $newfilename, $png_q );
break;
default:
return false;
}
imagedestroy( $dstim );
imagedestroy( $srcim );
return file_exists($newfilename);
}
    
    if (!isset($_FILES[$upload_name])) {
        HandleError("No upload found in \$_FILES for " . $upload_name);
        exit(0);
    } else if (isset($_FILES[$upload_name]["error"]) && $_FILES[$upload_name]["error"] != 0) {
        HandleError($uploadErrors[$_FILES[$upload_name]["error"]]);
        exit(0);
    } else if (!isset($_FILES[$upload_name]["tmp_name"]) || !@is_uploaded_file($_FILES[$upload_name]["tmp_name"])) {
        HandleError("Upload failed is_uploaded_file test.");
        exit(0);
    } else if (!isset($_FILES[$upload_name]['name'])) {
        HandleError("File has no name.");
        exit(0);
    }
    
    $file_size = @filesize($_FILES[$upload_name]["tmp_name"]);
    if (!$file_size || $file_size > $max_file_size_in_bytes) {
        HandleError("File exceeds the maximum allowed size");
        exit(0);
    }
    
    if ($file_size <= 0) {
        HandleError("File size outside allowed lower bound");
        exit(0);
    }


    $file_name = preg_replace('/[^'.$valid_chars_regex.']|\.+$/i', "", basename($_FILES[$upload_name]['name']));
    if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {
        HandleError("Invalid file name");
        exit(0);
    }


    if (file_exists($save_path . $file_name)) {
        HandleError("File with this name already exists");
        exit(0);
    }

    $path_info = pathinfo($_FILES[$upload_name]['name']);
    $file_extension = $path_info["extension"];
    $is_valid_extension = false;
    foreach ($extension_whitelist as $extension) {
        if (strcasecmp($file_extension, $extension) == 0) {
            $is_valid_extension = true;
            break;
        }
    }
    if (!$is_valid_extension) {
        HandleError("Invalid file extension");
        exit(0);
    }

    if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], $save_path.$file_name)) {
        HandleError("File could not be saved.");
        exit(0);
    }

    $resize1 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir1 . $thumbPrefix1 . basename($_FILES[$upload_name]['name']), $thumbWidth1, $thumbHeight1);
    $resize2 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir2 . $thumbPrefix2 . basename($_FILES[$upload_name]['name']), $thumbWidth2, $thumbHeight2);
    $resize3 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir3 . $thumbPrefix3 . basename($_FILES[$upload_name]['name']), $thumbWidth3, $thumbHeight3);
    HandleError("RESIZE: ".$resize1);
exit(0);


function HandleError($message) {
    echo $message;
}
?>

$resize1 = resize($save_path.$file_name, $save_path . $thumbDir1 . $thumbPrefix1 . $file_name, $thumbWidth1, $thumbHeight1);

<?php
    if (isset($_POST["PHPSESSID"])) {
        session_id($_POST["PHPSESSID"]);
    } else if (isset($_GET["PHPSESSID"])) {
        session_id($_GET["PHPSESSID"]);
    }

    session_start();

    $POST_MAX_SIZE = ini_get('post_max_size');
    $unit = strtoupper(substr($POST_MAX_SIZE, -1));
    $multiplier = ($unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1)));

    if ((int)$_SERVER['CONTENT_LENGTH'] > $multiplier*(int)$POST_MAX_SIZE && $POST_MAX_SIZE) {
        header("HTTP/1.1 500 Internal Server Error"); // This will trigger an uploadError event in SWFUpload
        echo "POST exceeded maximum allowed size.";
        exit(0);
    }

    $save_path = getcwd() . "/uploads/";
    $extension_whitelist = array("jpg", "gif", "png", "mp3");    // Allowed file extensions
    $thumbDir1 = '/galleri/files/'; 
    $thumbDir2 = '/galleri/thumbs/thumbnails/'; 
    $thumbDir3 = '/galleri/thumbs/tab/'; 
    $thumbPrefix1 = '1'; 
    $thumbPrefix2 = '2'; 
    $thumbPrefix2 = '3'; 
    $thumbHeight1 = 500; 
    $thumbWidth1 = 666; 
    $thumbHeight2 = 150; 
    $thumbWidth2 = 200; 
    $thumbHeight3 = 56; 
    $thumbWidth3 = 56; 
    
    $upload_name = "Filedata";
    $max_file_size_in_bytes = 2147483647;                // 2GB in bytes
    $valid_chars_regex = '.A-Z0-9_ !@#$%^&()+={}\[\]\',~`-';                // Characters allowed in the file name (in a Regular Expression format)
    
    $MAX_FILENAME_LENGTH = 260;
    $file_name = "";
    $file_extension = "";
    $uploadErrors = array(
        0=>"There is no error, the file uploaded with success",
        1=>"The uploaded file exceeds the upload_max_filesize directive in php.ini",
        2=>"The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form",
        3=>"The uploaded file was only partially uploaded",
        4=>"No file was uploaded",
        6=>"Missing a temporary folder"
    );

        
    
    if (!isset($_FILES[$upload_name])) {
        HandleError("No upload found in \$_FILES for " . $upload_name);
        exit(0);
    } else if (isset($_FILES[$upload_name]["error"]) && $_FILES[$upload_name]["error"] != 0) {
        HandleError($uploadErrors[$_FILES[$upload_name]["error"]]);
        exit(0);
    } else if (!isset($_FILES[$upload_name]["tmp_name"]) || !@is_uploaded_file($_FILES[$upload_name]["tmp_name"])) {
        HandleError("Upload failed is_uploaded_file test.");
        exit(0);
    } else if (!isset($_FILES[$upload_name]['name'])) {
        HandleError("File has no name.");
        exit(0);
    }
    
    $file_size = @filesize($_FILES[$upload_name]["tmp_name"]);
    if (!$file_size || $file_size > $max_file_size_in_bytes) {
        HandleError("File exceeds the maximum allowed size");
        exit(0);
    }
    
    if ($file_size <= 0) {
        HandleError("File size outside allowed lower bound");
        exit(0);
    }


    $file_name = preg_replace('/[^'.$valid_chars_regex.']|\.+$/i', "", basename($_FILES[$upload_name]['name']));
    if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {
        HandleError("Invalid file name");
        exit(0);
    }


    if (file_exists($save_path . $file_name)) {
        HandleError("File with this name already exists");
        exit(0);
    }

    $path_info = pathinfo($_FILES[$upload_name]['name']);
    $file_extension = $path_info["extension"];
    $is_valid_extension = false;
    foreach ($extension_whitelist as $extension) {
        if (strcasecmp($file_extension, $extension) == 0) {
            $is_valid_extension = true;
            break;
        }
    }
    if (!$is_valid_extension) {
        HandleError("Invalid file extension");
        exit(0);
    }

    if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], $save_path.$file_name)) {
        HandleError("File could not be saved.");
        exit(0);
    }

//Funktioner som bruges:
        function getExtension($filename){
        return strtolower( pathinfo( $filename, PATHINFO_EXTENSION ) );
        }
        
        function resize( $filename, $newfilename, $maxw, $maxh, $quality=100 )
        {
        $extension = getExtension($filename);
        switch($extension)
        {
        case 'jpeg':
        case 'jpe':
        case 'jpg':
        $srcim = imagecreatefromjpeg( $filename );
        break;
        case 'gif':
        $srcim = imagecreatefromgif( $filename );
        break;
        case 'png':
        $srcim = imagecreatefrompng( $filename );
        break;
        default:
        return false;
        }
        $ow = imagesx( $srcim );
        $oh = imagesy( $srcim );
        $wscale = $maxw / $ow;
        $hscale = $maxh / $oh;
        $scale = min( $hscale, $wscale );
        $nw = round( $ow * $scale, 0 );
        $nh = round( $oh * $scale, 0 );
        $dstim = imagecreatetruecolor( $nw, $nh );
        imagecopyresampled( $dstim, $srcim, 0, 0, 0, 0, $nw, $nh, $ow, $oh );
        switch($extension)
        {
        case 'jpeg':
        case 'jpe':
        case 'jpg':
        imagejpeg( $dstim, $newfilename, $quality );
        break;
        case 'gif':
        imagegif( $dstim, $newfilename );
        break;
        case 'png':
        $png_q = floor( abs( $quality / 10 - 9.9 ) );
        imagepng( $dstim, $newfilename, $png_q );
        break;
        default:
        return false;
        }
        imagedestroy( $dstim );
        imagedestroy( $srcim );
        return file_exists($newfilename);
        }


    $resize1 = resize($save_path.$file_name, $save_path . $thumbDir1 . $thumbPrefix1 . $file_name, $thumbWidth1, $thumbHeight1);
    $resize2 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir2 . $thumbPrefix2 . basename($_FILES[$upload_name]['name']), $thumbWidth2, $thumbHeight2);
    $resize3 = resize($save_path . basename($_FILES[$upload_name]['name']), $thumbDir3 . $thumbPrefix3 . basename($_FILES[$upload_name]['name']), $thumbWidth3, $thumbHeight3);
exit(0);


function HandleError($message) {
    echo $message;
}
?>