<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HEAD>
<TITLE>Upload Files @_@</TITLE>
<META http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</HEAD>
<?php
if( IsSet($POST['submit']) ) {
#echo $POST['desc']; # Print description!
#echo $FILES['userfile']['name']; # Print file name
echo $POST['filepath'];
include("inc/vars.php"); # Include file
mysql_connect($hostname, $user, $passwd);
mysql_select_db($db_file);
$fp = fopen(stripslashes($_POST['filepath']), "r");
$data = addslashes(fread($fp, $_FILES['userfile']['size']));
$mysql_query = "INSERT INTO title ( id , file_name , file_size , file_data , content_type , grp_id ) VALUES ('0', '".$_FILES['userfile']['name']."', '".$_FILES['userfile']['size']."', '".$data."', '".$_FILES['userfile']['type']."', '".$_SESSION['GroupID']."')";
$result = mysql_query($mysql_query);
echo "<BR>".$mysql_query;
fclose ($fp);
if($result) {
$id = mysql_insert_id();
}
}
else {
?>
<BODY bgcolor="#FFFFFF" text="#000000">
<FORM name="form1" method="post" enctype="multipart/form-data" action="<?php echo $_SERVER['PHP_SELF'];?>">
<INPUT type="hidden" name="filepath" value="">
<INPUT type="text" name="desc"><BR>
<INPUT type="file" name="userfile" onchange="this.form.filepath.value=this.form.userfile.value;"><BR>
<INPUT type="submit" name="submit" value="submit">
</FORM>
</BODY>
<?php
}
?>