File: /var/www/www-root/data/www/NEWs/news.automoon.click/actions/imgupload.php
<?php
include('../inc/conf.php');
crabs_adm_check();
$path = '../img/upl_news/';
function getExtension($str)
{
$i = strrpos($str,".");
if (!$i) { return ""; }
$l = strlen($str) - $i;
$ext = substr($str,$i+1,$l);
return $ext;
}
$valid_formats = array("jpg","png","gif","jpeg","PNG","JPG","JPEG","GIF");
if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
{
$name = $_FILES['photoimg']['name'];
$aname = mysqli_real_escape_string($connect_db, $name);
$size = $_FILES['photoimg']['size'];
if(strlen($name))
{
$ext = getExtension($name);
if(in_array($ext,$valid_formats))
{
if($size<(1024*1024))
{
$rand = rand(0,999);
$actual_image_name = time().'_'.$rand.'.'.$ext;
$tmp = $_FILES['photoimg']['tmp_name'];
if(move_uploaded_file($tmp, $path.$actual_image_name))
{
$site = SITE;
echo json_encode(array(
'initialPreview' => array("<img src='https://{$site}/img/upl_news/{$actual_image_name}' class='file-preview-image' />",),
'initialPreviewConfig' => array(array('caption' => "<input type='text' value='https://{$site}/img/upl_news/{$actual_image_name}' class='form-control' onclick='this.select()' />", 'width' => '120px', 'url' => 'https://{SITE}/img/upl_news/{$actual_image_name}', 'key' => $actual_image_name),),
'append' => true));
}
else {
echo json_encode(array('error'=>'Ошибка'));
}
}
else {
echo json_encode(array('error'=>'Размер изображения более 1 Мб'));
}
}
else {
echo json_encode(array('error'=>'Неверный тип файла'));
}
}
else {
echo json_encode(array('error'=>'Выберите изображение'));
exit;
}
}
?>