5) {
$ok = false;
}
//checks if the form has been submitted
if($ok && isset($_FILES['upload']))
{
//reads the name of the file the user submitted for uploading
$image=$_FILES['upload']['name'];
//if it is not empty
if ($image)
{
//get the original name of the file from the clients machine
$filename = stripslashes($_FILES['upload']['name']);
//get the extension of the file in a lower case format
$extension = getExtension($filename);
$extension = strtolower($extension);
//if it is not a known extension, we will suppose it is an error and will not upload the file,
//otherwise we will do more tests
if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif"))
{
//print error message
echo '
Unknown extension!
';
$errors=1;
}
else
{
if (isset($_POST['name']) ) {
$name = makesafe($_POST['name']);
} else {
$name = "";
}
if (isset($_POST['title']) ) {
$title = makesafe($_POST['title']);
} else {
$title = "";
}
if (isset($_POST['description']) ) {
$tags = makesafe($_POST['description']);
} else {
$tags = "";
}
$q = "select count(*) as c from momae where ip = '".$ip."' and title ='".$title."' AND name = '".$name."' AND description = '".$description."' limit 1";
$res = mysql_query($q);
$row = mysql_fetch_assoc($res);
$ok = true;
if ($row['c'] > 0) {
$ok = false;
}
if ($ok) {
$q = "insert into momae (name, title, description, exif, flag, moment, ip) VALUES ('".$name."','".$title."','".$description."','".$exif."','".$flag."', NOW(), '".$ip."' ) ";
$debug .= $q;
mysql_query($q);
$id = mysql_insert_id();
$debug .= "IDLAST:".$id;
//get the size of the image in bytes
//$_FILES['image']['tmp_name'] is the temporary filename of the file
//in which the uploaded file was stored on the server
$size=filesize($_FILES['upload']['tmp_name']);
//compare the size with the maxim size we defined and print error if bigger
if ($size > MAX_SIZE*1024)
{
echo '
You have exceeded the size limit!
';
$errors=1;
}
//we will give an unique name, for example the time in unix time format
$image_name= "U".time().'.'.$extension;
//the new name will be containing the full path where will be stored (images folder)
$newname="uploads/upload".$id.".jpg"; // $image_name;
//we verify if the image has been uploaded, and print error instead
$copied = copy($_FILES['upload']['tmp_name'], $newname);
$lat = 0;
$lon = 0;
if (!$copied) {
echo '
