<?PHP
	function UploadImage($imagenumber,$prefix=''){
		global $database;	
		if(isset($_FILES[$prefix . "uploadimage" .$imagenumber])){
			if(isset($_POST[$prefix . "subdir" .$imagenumber]) && !empty($_POST[$prefix . "subdir" . $imagenumber])){
				$subdir = $_POST[$prefix . "subdir" . $imagenumber];
			}
			if(is_uploaded_file($_FILES[$prefix . "uploadimage" . $imagenumber]['tmp_name'])) {
		$uploaddir = IMAGE_UPLOAD_DIR;
		$lastchar = substr($subdir,-1,1);
		if($lastchar!=='/'){
			$subdir .= '/';
		}
		if($subdir=='/'){
			$subdir = '';
		}
		if(MakeDirectory($uploaddir . $subdir)){
			$uploadfile = basename($_FILES[$prefix . "uploadimage" . $imagenumber]['name']);
			if (move_uploaded_file($_FILES[$prefix . "uploadimage" . $imagenumber]['tmp_name'], $uploaddir . $subdir . $uploadfile)) {
				$badchars = array(' ','(',')','[',']','{','}','!','`','+','=');
				$goodchars = array('_','','','','','','','','','','');
				$cleanname = str_replace($badchars,$goodchars,$uploadfile);
				if($cleanname!==$uploadfile){
					if(!rename($uploaddir . $subdir . $uploadfile,$uploaddir . $subdir . $cleanname)){
						//$this->errors[] = "Error renaming file from $uploadfile to $cleanname";
						return;
					}
				}	
				//add to database;
				$q = "INSERT INTO `images` (`path`) VALUES ('$subdir$cleanname');";
				$q2 = "SELECT `id` FROM `images` WHERE `path`='$subdir$cleanname'";
				$database->query($q);
				$result = $database->query($q2);
				if($result){
					$newid = $database->dbResult($result,0,'id');
					$database->dbFreeResult($result);
				}
				else{
					$newid = -2; //error adding to db
				}
			}
			else{
				$newid = -1; //error moving file
			}
		}
		else{
			$newid = -3; //error creating subdirectory
		}
	}
	else{
		//$this->errors[] = "Not a valid file uploaded";
	}
}
else{
	$newid=0; //no file uploaded
}
return($newid);
}
?>