85 lines
2.6 KiB
PHP
85 lines
2.6 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
include "include/globals.php";
|
|
include "include/queuemail.php";
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
writeLog("Session has expired");
|
|
header("Location: /?error_message=" . urlencode(getLanguageText('ERRORMSG-SESSION-EXPIRED')));
|
|
exit();
|
|
}
|
|
|
|
// startLog("upload.product-image.php");
|
|
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
$return_data = array();
|
|
$return_data['ajax_error_code'] = -1;
|
|
|
|
|
|
$doc_path = sprintf("%08d",$school_num);
|
|
$output_dir = "files/$doc_path/product_images/";
|
|
writeLog("doc_path: $doc_path");
|
|
writeLog("output_dir: $output_dir");
|
|
writeLog(print_r($_FILES, true));
|
|
|
|
if (array_key_exists('fileToSave', $_FILES)) {
|
|
$fileToSave = $_FILES['fileToSave'];
|
|
|
|
//Filter the file types , if you want.
|
|
if (array_key_exists('error', $fileToSave) && $fileToSave["error"] > 0) {
|
|
echo "Error: " . $fileToSave["error"] . "<br>";
|
|
writeLog("fileToSave['error']: ".$fileToSave["error"]);
|
|
}
|
|
else {
|
|
$file_name = $fileToSave["name"];
|
|
$file_name = str_replace("'","",$file_name);
|
|
$file_name = str_replace('"',"",$file_name);
|
|
$file_name = str_replace(" ","_",$file_name);
|
|
$file_name = str_replace("%20","_",$file_name);
|
|
$file_name = str_replace("$","_",$file_name);
|
|
$file_name = str_replace("/","_",$file_name);
|
|
$file_name = str_replace("\\","_",$file_name);
|
|
$file_name = str_replace("(","_",$file_name);
|
|
$file_name = str_replace(")","_",$file_name);
|
|
$file_name = str_replace("[","_",$file_name);
|
|
$file_name = str_replace("]","_",$file_name);
|
|
$file_name = str_replace("&","_",$file_name);
|
|
$file_name = str_replace(";","_",$file_name);
|
|
$file_name = preg_replace('/[^[:print:]]/', '', $file_name);
|
|
writeLog("file_name: $file_name");
|
|
|
|
// Check if file is there already
|
|
if (file_exists("$output_dir$file_name")) {
|
|
unlink("$output_dir$file_name");
|
|
writeLog("File deleted: $output_dir$file_name");
|
|
}
|
|
|
|
//move the uploaded file to uploads folder;
|
|
if (move_uploaded_file($fileToSave["tmp_name"],$output_dir. $file_name)) {
|
|
writeLog("File moved: $file_name");
|
|
|
|
// Set defaults
|
|
$maxImageSize = 900;
|
|
$thumbWidth = 200;
|
|
|
|
// Resize image and create thumbnail
|
|
$image_name = $file_name;
|
|
$image_path = $output_dir;
|
|
$thumbnail = resizeImage($image_name, $image_path, $maxImageSize, $thumbWidth);
|
|
|
|
$return_data['ajax_error_code'] = 0;
|
|
$return_data['image_file'] = $thumbnail;
|
|
}
|
|
else {
|
|
writeLog("Error Moving File: $file_name");
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
echo(json_encode($return_data));
|
|
|
|
?>
|