= SECONDS_BETWEEN_UPLOADS || !$rumrows) {
$uploadfile = SONG_DIRECTORY . ($filename = getRewriteString(basename($_FILES['songfile']['name'])));
if(is_uploaded_file($tmpfile = $_FILES['songfile']['tmp_name'])) {
$suffix = strtolower(strrchr($filename, '.'));
if(!in_array($suffix, $allowed_suffixes)) {
echo "$suffix-filer ej tillåtna. Tillåtna:
\r\n";
foreach($allowed_suffixes as $s)
echo ".$s ";
} else {
if(filesize($tmpfile) > MAX_SONG_FILESIZE<<20) {
die("Högsta filstorlek: ".MAX_SONG_FILESIZE."Mb");
}
$md5 = md5_file($tmpfile);
$res = mysql_query("SELECT COUNT(*) FROM songs WHERE md5='$md5'");
list($cnt) = mysql_fetch_row($res);
mysql_free_result($res);
if($cnt) {
$res = mysql_query("SELECT filename FROM songs WHERE md5='$md5'");
list($already_uploaded) = mysql_fetch_row($res);
mysql_free_result($res);
echo "Låten finns redan uppladdad som: ".basename($already_uploaded)."
\r\n";
} else {
if (rename($_FILES['songfile']['tmp_name'], $uploadfile)) {
extract(getinfo($uploadfile));
mysql_query("INSERT INTO songs (filename, title, artist, album, genre, `year`, md5, num_votes, last_played, when_uploaded) VALUES ('$uploadfile', '$title', '$artist', '$album','$genre' ,".intval($year).", '$md5', 0, 0, NOW())");
$id = mysql_insert_id();
mysql_query("INSERT INTO uploads (ip, song, upload_time) VALUES (".ip2long($_SERVER['REMOTE_ADDR']).", $id, NOW())");
header("Location: index.php#".$id);
}
}
}
} else { echo "Nägot gick fel med filuppladdningen."; }
}
?>