<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
$set['title'] = 'ჭორბიურო';
include_once '../sys/inc/thead.php';
title();
aut();
if (!isset($user))
{
header('Location: /');
exit;
}
if ($user['chor']<50)
{
echo '<div class="list-body">';
?><div class="list-menu list-menu-title">ჭორბიუროში ფაილის გაგზავნა შეუძლია მომხმარებელს რომლიც პოსტების რაოდენობა აღემატება 50. </div>
<a href="/guest/"><div class="list-menu hover"><div class="menu-icons-small"><span class="icons-circle" style="background-color: #577CA5"><i style="font-size: 12px; vertical-align: middle; position: relative; top: -1px;" class="fa fa-comment "></i></span></div>
<span class="menu-icons-optimize">პოსტების დაგროვება </span></div></a>
</div>
</div>
<?
include_once '../sys/inc/tfoot.php';
exit;
}
if (isset($_POST['sim_go']))
{
for ($i=1; $i<=3; $i++)
{
if (isset($FILES['file'.$i]['name']))
{
$file = stripcslashes(htmlspecialchars($FILES['file'.$i]['name']));
$file = preg_replace('(\#|\?)', NULL, $file);
$name = preg_replace('#\.[^\.]*$#', NULL, $file);
$ras = strtolower(preg_replace('#^.*\.#', NULL, $file));
$type = $FILES['file'.$i]['type'];
$size = filesize($FILES['file'.$i]['tmp_name']);
if ($ras == 'png' || $ras == 'jpg' || $ras == 'jpeg' || $ras == 'gif' || $ras == 'bmp')
{
$ras_id = 1;
}
else if ($ras == 'mp3' || $ras == 'ogg')
{
$ras_id = 2;
}
else if ($ras == 'mp4' || $ras == 'mpeg')
{
$ras_id = 3;
} else {
$ras_id = 0;
}
mysql_query("INSERT INTO guest_post_files
(id_user
, name
, ras
, ras_id
, size
, time
) VALUES
('".$user['id']."', '".$name."', '".$ras."', '".$ras_id."', '".$size."', '".$time."')");
$id_f = mysql_insert_id();
if (!@copy($FILES['file'.$i]['tmp_name'], H.'guest/post_files/'.$id_f.'.dat'))
{
mysql_query("DELETE FROM guest_post_files
WHERE id
= '".$id_f."' LIMIT 1");
} else {
@chmod(H.'guest/post_files/'.$id_f.'.dat', 0777);
}
}
}
header('Location: /guest/');
exit;
}
?>
<div class="vk_mail">
<div class="list-menu list-menu-title">
<i class="fa fa-paperclip fa-fw"></i>
აირჩიეთ ფაილი (ერთ ჯერზე გაგზავნა შესაძლებელია ერთდროულად 3 ფაილის)
</div>
<div class="list-menu">
<form action="/guest/add_files.php" method="post" enctype="multipart/form-data">
<?
for ($i=1; $i<=3; $i++)
{
?>
<div class="upload_row">
<input type="file" class="upload_input" name="file_<?echo $i;?>" />
</div>
<?
}
?>
<br />
<button type="submit" class="button ajax-button" name="sim_go">
<i class="fa fa-send fa-fw" style="font-size: 15px"></i>
ფაილის ატვირთვა
</button>
<a href="/guest/" class="button-o">
უკან
</a>
</form>
</div>
</div>
<?
include_once '../sys/inc/tfoot.php';
?>
add_files.php eesss
post_file.php
<?
define('H', $_SERVER['DOCUMENT_ROOT'].'/');
include_once H.'sys/inc/start.php';
include_once H.'sys/inc/compress.php';
include_once H.'sys/inc/sess.php';
include_once H.'sys/inc/settings.php';
include_once H.'sys/inc/db_connect.php';
/*
include_once H.'sys/inc/ipua.php';
include_once H.'sys/inc/fnc.php';
$show_all = true;
include_once H.'sys/inc/user.php';
*/
if (isset($_GET['id']) && mysql_result(mysql_query("SELECT COUNT(*) FROM guest_post_files
WHERE id
= '".abs(intval($_GET['id']))."'"), 0) > 0)
{
$file = mysql_fetch_assoc(mysql_query("SELECT * FROM guest_post_files
WHERE id
= '".abs(intval($_GET['id']))."' LIMIT 1"));
if (is_file(H.'guest/post_files/'.$file['id'].'.dat'))
{
$file_link = H.'guest/post_files/'.$file['id'].'.dat';
$file_ras = stripcslashes(htmlspecialchars($file['ras']));
$file_name = stripcslashes(htmlspecialchars($file['name'])).'.'.stripcslashes(htmlspecialchars($file['ras']));
} else {
$file_link = H.'guest/no_file.png';
$file_ras = 'png';
$file_name = 'No_File.png';
}
} else {
$file_link = H.'guest/no_file.png';
$file_ras = 'png';
$file_name = 'No_File.png';
}
$mime_list = [
'bmp' => 'image/bmp',
'gif' => 'image/gif',
'jpeg' => 'image/jpeg',
'jpg' => 'image/jpeg',
'png' => 'image/png',
'mp3' => 'audio/mpeg',
'ogg' => 'application/ogg',
'mpeg' => 'video/mpeg',
'mp4' => 'video/mp4'
];
if (isset($mime_list[$file_ras]))
{
$mime_type = $mime_list[$file_ras];
} else {
$mime_type = 'application/octet-stream';
}
header('Content-Type: '.$mime_type);
if (preg_match('#^image/#i', $mime_type))
{
header('Content-Disposition: filename="'.basename($file_name).'";');
} else {
header('Content-Disposition: attachment; filename="'.basename($file_name).'";');
}
header('Content-Length: '.filesize($file_link));
readfile($file_link);
exit;