First Commit

upload.product-image.php

@@ -0,0 +1,84 @@
+<?php
+$ValidAccess = 2010;
+include "include/globals.php";
+include "include/queuemail.php";
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   writeLog("Session has expired");
+   header("Location: /?error_message=" . urlencode(getLanguageText('ERRORMSG-SESSION-EXPIRED')));
+   exit();
+}
+
+// startLog("upload.product-image.php");
+
+include "include/ajax.csrfToken.php";
+
+$return_data = array();
+$return_data['ajax_error_code'] = -1;
+
+
+$doc_path = sprintf("%08d",$school_num);
+$output_dir = "files/$doc_path/product_images/";
+writeLog("doc_path: $doc_path");
+writeLog("output_dir: $output_dir");
+writeLog(print_r($_FILES, true));
+
+if (array_key_exists('fileToSave', $_FILES)) {
+   $fileToSave = $_FILES['fileToSave'];
+
+   //Filter the file types , if you want.
+   if (array_key_exists('error', $fileToSave) && $fileToSave["error"] > 0) {
+      echo "Error: " . $fileToSave["error"] . "<br>";
+      writeLog("fileToSave['error']: ".$fileToSave["error"]);
+   }
+   else {
+      $file_name = $fileToSave["name"];
+      $file_name = str_replace("'","",$file_name);
+      $file_name = str_replace('"',"",$file_name);
+      $file_name = str_replace(" ","_",$file_name);
+      $file_name = str_replace("%20","_",$file_name);
+      $file_name = str_replace("$","_",$file_name);
+      $file_name = str_replace("/","_",$file_name);
+      $file_name = str_replace("\\","_",$file_name);
+      $file_name = str_replace("(","_",$file_name);
+      $file_name = str_replace(")","_",$file_name);
+      $file_name = str_replace("[","_",$file_name);
+      $file_name = str_replace("]","_",$file_name);
+      $file_name = str_replace("&","_",$file_name);
+      $file_name = str_replace(";","_",$file_name);
+      $file_name = preg_replace('/[^[:print:]]/', '', $file_name);
+      writeLog("file_name: $file_name");
+
+      // Check if file is there already
+      if (file_exists("$output_dir$file_name")) {
+         unlink("$output_dir$file_name");
+         writeLog("File deleted: $output_dir$file_name");
+      }
+
+      //move the uploaded file to uploads folder;
+      if (move_uploaded_file($fileToSave["tmp_name"],$output_dir. $file_name)) {
+         writeLog("File moved: $file_name");
+
+         // Set defaults
+         $maxImageSize = 900;
+         $thumbWidth = 200;
+
+         // Resize image and create thumbnail
+         $image_name = $file_name;
+         $image_path = $output_dir;
+         $thumbnail = resizeImage($image_name, $image_path, $maxImageSize, $thumbWidth);
+
+         $return_data['ajax_error_code'] = 0;
+         $return_data['image_file'] = $thumbnail;
+      }
+      else {
+         writeLog("Error Moving File: $file_name");
+      }
+
+   }
+}
+
+echo(json_encode($return_data));
+
+?>