01.<?php
02.error_reporting(0);
03.
04.include('conn.php');
05.$date = date('Y-m-d H:i:s');
06.
07.define ("MAX_SIZE","5000");
08.function getExtension($str)
09.{
10.$i = strrpos($str,".");
11.if (!$i) { return ""; }
12.$l = strlen($str) - $i;
13.$ext = substr($str,$i+1,$l);
14.return $ext;
15.}
16.
17.$valid_formats = array("jpg", "png", "gif", "bmp","jpeg");
18.if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
19.{
20.$uploaddir = "picture/im/";
21.
22.foreach ($_FILES['photos']['name'] as $name => $value)
23.{
24.$filename = stripslashes($_FILES['photos']['name'][$name]);
25.$size=filesize($_FILES['photos']['tmp_name'][$name]);
26.
27.$ext = getExtension($filename);
28.$ext = strtolower($ext);
29.
30.if(in_array($ext,$valid_formats))
31.{
32.
33.if ($size < (MAX_SIZE*1024))
34.{
35.$image_name= $filename;
36.
37.$newname=$uploaddir.$image_name;
38.
39.
40.if (move_uploaded_file($_FILES['photos']['tmp_name'][$name], $newname))
41.{
42.
43.
44.$query=$conn->query("INSERT INTO picture(id,image_name,dateupload)VALUES('".$_GET["id"]."','".$image_name."','".$date."')");
45.mysqli_query($conn, "SET NAMES UTF8");
46.
47.}
48.else
49.{
50.echo '<span class="imgList">You have exceeded the size limit! so moving unsuccessful! </span>'; }
51.}
52.
53.else
54.{
55.echo '<span class="imgList">You have exceeded the size limit!</span>';
56.}
57.
58.}
59.
60.else
61.{
62.echo '<span class="imgList">Unknown extension!</span>';
63.}
64.
65.
66.}
67.
68.}
69.echo "<script>alert('อัพโหลดเสร็จสิ้น');</script>";
70.mysqli_close();
71.?>
