88 lines
3.2 KiB
PHP
88 lines
3.2 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
include "include/globals.php";
|
|
include "include/queuemail.php";
|
|
|
|
// startLog("upload.doc.php");
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
writeLog("Session has expired");
|
|
header("Location: /?error_message=" . urlencode(getLanguageText('ERRORMSG-SESSION-EXPIRED')));
|
|
exit();
|
|
}
|
|
|
|
|
|
$doc_path = sprintf("%08d",$school_num);
|
|
$output_dir = "files/$doc_path/uploads/";
|
|
writeLog("doc_path: $doc_path");
|
|
writeLog("output_dir: $output_dir");
|
|
|
|
if (!is_dir($output_dir)) {
|
|
header("Location: /?error_message=" . urlencode(getLanguageText('ERRORMSG-UPLOAD-DIRECTORY-NOT-FOUND')));
|
|
exit();
|
|
}
|
|
|
|
if(isset($_FILES["myfile"])) {
|
|
//Filter the file types , if you want.
|
|
if (array_key_exists('error', $_FILES["myfile"]) && $_FILES["myfile"]["error"] > 0) {
|
|
echo "Error: " . $_FILES["file"]["error"] . "<br>";
|
|
writeLog("_FILES['myfile']['error']: ".$_FILES["file"]["error"]);
|
|
}
|
|
else {
|
|
$file_name = $_FILES["myfile"]["name"];
|
|
$file_name = str_replace("'","",$file_name);
|
|
$file_name = str_replace(" ","_",$file_name);
|
|
writeLog("file_name: $file_name");
|
|
|
|
// Check if file is there already
|
|
if (file_exists("$output_dir$file_name")) {
|
|
unlink("$output_dir$file_name");
|
|
$fname = db_escape_string($file_name);
|
|
db_query("DELETE FROM school_documents WHERE school_num = $school_num AND document_name = '$fname'");
|
|
}
|
|
|
|
//move the uploaded file to uploads folder;
|
|
move_uploaded_file($_FILES["myfile"]["tmp_name"],$output_dir. $file_name);
|
|
|
|
// Save image info into database
|
|
$table = new Table("school_documents");
|
|
|
|
$entry = array();
|
|
$entry['school_num'] = $school_num;
|
|
$entry['document_name'] = $file_name;
|
|
$entry['document_title'] = $_POST['document_title'];
|
|
$entry['name'] = $_POST['name'];
|
|
$entry['email'] = $_POST['email'];
|
|
$entry['notes'] = $_POST['notes'];
|
|
$entry['added_datetime'] = date("Y-m-d H:i:s",time());
|
|
|
|
$query = $table->BuildInsert($entry);
|
|
db_query($query);
|
|
|
|
echo "Uploaded File :".$_FILES["myfile"]["name"];
|
|
$notes = db_escape_string($entry['notes']);
|
|
$notes = str_replace("\\r","",$notes);
|
|
$notes = str_replace("\\n","\n",$notes);
|
|
$name = db_escape_string($entry['name']);
|
|
$email = db_escape_string($entry['email']);
|
|
|
|
$emailTo = "uploads@easyschoolsoftware.net";
|
|
$emailFrom = "uploads@easyschoolsoftware.net";
|
|
$emailReply = "File Upload";
|
|
$emailRecipient = "File Upload";
|
|
$emailSubject = "Uploaded by: ".$school_record['school_name'];
|
|
$emailMessage = "File Uploaded: ".$entry['document_name']."\n".
|
|
"File Title: ".db_escape_string($entry['document_title'])."\n".
|
|
"Notes: $notes\n\n".
|
|
"Name: $name\n".
|
|
"Email: <a href='mailto:$email'>$email</a>\n\n".
|
|
"Uploaded Time: ".$entry['added_datetime']."\n\n";
|
|
$emailMessage = nl2br($emailMessage);
|
|
QueueEmail($emailTo, $emailFrom, $emailSubject, $emailMessage, $emailReply, $emailRecipient);
|
|
|
|
header("Location: /?action=secure-document-upload&form_message=".urlencode("File Uploaded: $file_name"));
|
|
}
|
|
}
|
|
|
|
?>
|