Mini Shell

Current File : /home/serb/public_html/file-upload2.php
<?php
 session_start();
 include("lib/globals.php");
 include("lib/common.php");
 include("lib/functions.php");
 include"lib/SimpleImage.php";

$upload_dir = 'avtar';  
 
if (!empty($_FILES)) {
     
     $allowed =  array('gif','png' ,'jpg','jpeg');
	$filename = $_FILES['file']['name'];
	$ext = pathinfo($filename, PATHINFO_EXTENSION);
	if(!in_array($ext,$allowed) ) {
		?>
		<script language="javascript">
            alert('Error');
            location.href="agency-account.php";
        </script>
    <? 	
		
	}
	else
	{
	
	
	
		$tempFile = $_FILES['file']['tmp_name'];                    
		  // using DIRECTORY_SEPARATOR constant is a good practice, it makes your code portable.
		$targetPath = dirname( __FILE__ ) . DIRECTORY_SEPARATOR . $upload_dir . DIRECTORY_SEPARATOR;  
		 // Adding timestamp with image's name so that files with same name can be uploaded easily.
		$mainFile =  $targetPath.time().'-'. $_FILES['file']['name'];  
		 $actual_image_name=time().'-'. $_FILES['file']['name'];
		move_uploaded_file($tempFile,$mainFile);
		
		$image1= new SimpleImage();
		$image1->load('avtar/'.$actual_image_name);
		$image1->resizeToWidth(100);
		$image1->resizeToHeight(120);
		$image1->save('thumbs_pic/'.$actual_image_name);
		
		$image2= new SimpleImage();
		$image2->load('avtar/'.$actual_image_name);
		$image2->resizeToWidth(250);
		$image2->resizeToHeight(350);
		$image2->save('thubigg/'.$actual_image_name);
		
		
		/*$sql_postid="SELECT * FROM escort_details WHERE user_id='".$_SESSION['userid']."'";
		$res_postid=execute_query($sql_postid);
		$row_postid=mysql_fetch_array($res_postid);
		$pid=$row_postid['id'];*/
		
		$sql_q="INSERT INTO escort_photo(id,postid,userid,picture)VALUES('','".$_GET['pid']."','".$_SESSION['userid']."','$actual_image_name')";
		execute_query($sql_q);
		
		$update_dt="Update escort_details SET updatedate='$date' where id='".$_POST['pid']."'";
		execute_query($update_dt);
     
	}

}
?>
./BlackJoker Mini Shell 1.0