<?php

   // Connect to DB
   require_once ("includes/dbconnect.php");
   
   // Configuration - Your Options

   $allowed_filetypes = array('.jpg','.jpeg','.JPEG','.gif','.bmp','.png','.JPG','.GIF','.BMP','.PNG'); // These will be the types of file that will pass the validation.
   $max_filesize = 5242880; // Maximum filesize in BYTES (currently 0.5MB).
   $upload_path = 'uploads/'; // The place the files will be uploaded to (currently a 'files' directory).
 
   $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension).
   $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.
 
   // Check if the filetype is allowed, if not DIE and inform the user.


   if(!in_array($ext,$allowed_filetypes))
   die('');
 
   // Now check the filesize, if it is too large then DIE and inform the user.

   if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize)
   die('The file you attempted to upload is too large.');
 
   // Upload the file to your specified path.

   $newname = substr(sha1(time().$_POST['filename']) ,0, 10).'.'.$ext;
   if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $newname))
   mysql_query ("insert_into 'uploads' (path, userid) values ('$uploadpath', '$userid')")
   echo '';

echo '';

// Close DB connection
mysql_close();

?>