li.message { } '; $css.= "\n".'a:link { color: #FFFF00; } '; $css.= "\n".'a:visited { color: #FFCC00; } '; $css.= "\n".'a:hover { color: #FF8000; } '; $css.= "\n".'table.modtable { font-family: verdana; font-size: 8pt; }'; $validextensions = array("jpg", "jpeg", "png", "gif"); $action = isset($_POST["action"]) ? $_POST["action"] : ""; $messages = array(); $uploaddir = '/usr/local/palace/palace/media/'; function showMessages() { global $messages; if (empty($messages)) { return; } else { echo '
'; } } if (!isset($_FILES['file'])) { $messages[] = 'Please select a file to upload.'; } else { // don't let them upload all sorts of stupid shit if (!preg_match("#^(.*)\.(".implode("|", $validextensions).")$#", $_FILES['file']['name'], $matches)) { $messages[] = ''.$matches[2].' is not a valid file extension.'; } else { $originalfilename = $matches[1]; $extension = $matches[2]; $destinationfilename = $originalfilename; $copy = 0; // see if this file exists in uploader while (file_exists("./$uploaddir/".$destinationfilename.".".$extension)) { $copy++; $destinationfilename = $originalfilename.'_copy'.$copy; } // move uploaded file to destination directory if (!move_uploaded_file($_FILES['file']['tmp_name'], "./$uploaddir/".$destinationfilename.".".$extension)) { $messages[] = 'Unable to move file to '."./$uploaddir/".$destinationfilename.".".$extension.''; } else { $messages[] = 'Uploaded file to '."./$uploaddir/".$destinationfilename.".".$extension.''; $uploadedImage = "/$uploaddir/".$destinationfilename.".".$extension; } } } ?>