if(isset($_POST['upload']))
{
$fileName = $_FILES['userfile']['name'];
$tmpName = $_FILES['userfile']['tmp_name'];
$fileSize = $_FILES['userfile']['size'];
$fileType = $_FILES['userfile']['type'];
$fp = fopen($tmpName, 'r');
$content = fread($fp, $fileSize);
$content = addslashes($content);
fclose($fp);
if(!get_magic_quotes_gpc())
{
$fileName = addslashes($fileName);
}
////////////////////////////////////////////////
include("config/config.php");
////////////////////////////////////////////////
///////DO NOT CHANGE////////////////////////////
$con = mysql_connect("$host","$dbuser","$dbpass");
if (!$con)
{
die('Could not connect: ' . mysql_error());
}
mysql_select_db("$dbname", $con);
////////////////////////////////////////////////
if($fileSize >= 5000) && dir $fileName{
echo "Your file size is over limit
";
}
else
{
$query = "INSERT INTO upload (name, size, type, content ) ".
"VALUES ('$fileName', '$fileSize', '$fileType', '$content')";
mysql_query($query) or die('Error, query failed');
mysql_close($con);
echo "
File $fileName uploaded
\n \n You can now go to download page Continue";
}
}
?>