<?php

   // Connect to DB
   require_once ("includes/dbconnect.php");
   if (!($db = mysql_pconnect($hostname, $mysql_login , $mysql_password))){
  die("Can't connect to database server.");    
}else{
    if (!(mysql_select_db("$database",$db))){
      die("Can't connect to database.");
    }
}
   
   // Configuration - Your Options

   $allowed_filetypes = array('.jpg','.jpeg','.JPEG','.gif','.bmp','.png','.JPG','.GIF','.BMP','.PNG'); // These will be the types of file that will pass the validation.
   $max_filesize = 5242880; // Maximum filesize in BYTES (currently 0.5MB).
   $upload_path = 'uploads/'; // The place the files will be uploaded to (currently a 'files' directory).
 
   $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension).
   $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.
 
   // Check if the filetype is allowed, if not DIE and inform the user.


   if(!in_array($ext,$allowed_filetypes))
   die('dead');
 
   // Now check the filesize, if it is too large then DIE and inform the user.

   if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize)
   die('The file you attempted to upload is too large.');
 
   // Upload the file to your specified path.

   $newname = substr(sha1(time().$_POST['filename']) ,0, 10).'.'.$ext;
   if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $newname))
{
$uploadedpath = ('http://www.imgdash.com/' . $upload_path . $newname .'');
   echo 'success';
}   
else
{
echo 'It has died, unknown O.o';
   mysql_query ("insert_into 'uploads' (path, userid) values ('$uploadedpath', '$userid')")
}



?>