Anonymous

<?php   
$root = "../..";
var_dump($_FILES);
if(isset($_FILES['name'])) {  
          if($_FILES['name']['type'] == 'image/gif' ||  
          $_FILES['name']['type'] == 'image/pjpeg' ||  
          $_FILES['name']['type'] == 'image/jpeg' ||  
          $_FILES['name']['type'] == 'image/jpg' &&  
          is_uploaded_file($_FILES['filename']['tmp_name']) == true) {  
                move_uploaded_file($_FILES['name']['tmp_name'],'images/uploads/'. $_FILES['name']);   
                $sql .= " ,imgname = '". DBUploadDir . $_FILES['files']['name'] . "'";  
        $uploadFile = "images/uploads/" . $_FILES['files']['name']; 
        chmod($uploadFile, 0644);  
          } else {  
              $noimg_comment="you did not upload any files"; //whatever//   
          }  
    }  

if(isset($_POST['done']))
{
    $connect = mysql_connect("localhost", "", "");
    if (!$connect) {
        die('Could not connect: ' . mysql_error());
    }
    echo 'Connected successfully';

    $select = mysql_select_db("zzonemot_vt");
    if (!$select) {
        die ('Can\'t use this database : ' . mysql_error());
    }
    $cat = $_POST["cat"];
    $filename_normal = $_FILES["filename_normal"]["name"]; 
    $name = $_POST["name"];  
    $comment = $_POST["comment"]; 
    $result = mysql_query("INSERT INTO newgallery(filename_normal, name, comment) VALUES ('{$filename_normal}','{$name}','{$comment}')");
    var_dump($result);
    if (!$result) {
        die('Invalid query: ' . mysql_error());
    }
}
?>
<form enctype="multipart/form-data" action="" method="post">
<input type="hidden" name="MAX_FILE_SIZE" value="3000000">
<tr><th>Add new image:</th></tr>
<tr><td>
<table>

<tr>
<td >Name:</td>
<td><INPUT name="name" size="27" type="text" >
<!--<textarea name="name"></textarea>-->
</td>
</tr>

<tr>
<td>Comment:</td>
<td><INPUT name="comment" size="100" type="text" >
<!--<textarea name="comment"></textarea>-->
</td>
</tr>

<tr>
<td>Image: (
<?
if(function_exists("imagegif"))echo "*.gif";
if(function_exists("imagepng"))echo " *.png";
if(function_exists("imagejpeg"))echo " *.jpg";
?>)
</td>
<td><INPUT name="filename_normal" size="30" type="file" ></td>
</tr>

</table>
</td></tr>

<tr><td align="center" bgcolor="Silver">
<INPUT type="submit" value="Submit" name="done">
</td></tr>
<INPUT type="hidden" name="action" value="gallery_add">
<INPUT type="hidden" name="lang" value="<?=$template["lang"]?>">
<INPUT type="hidden" name="page" value="<?=$template["page"]?>">

</form>
</TABLE>