rendered paste body<form enctype="multipart/form-data" action="index.php?a=members.php&b=profile.php" method="POST"> Change Avatar: <input name="avatar" type="file" /> <input type="submit" name="saveav" value="Send File" /></form><?phpif(isset($_POST['saveav'])) { $uploaddir = 'avatars/'; $uploadfile = $uploaddir . md5(time()); $ext = strtolower(substr(strrchr($_FILES['avatar']['name'], "."), 1)); if($ext == 'jpg' or $ext == 'jpeg' or $ext == 'gif' or $ext == 'png') { if($_FILES['avatar']['size'] > 102400) { die("File is too large, keep it 100 kilobytes or smaller."); } } else { die("Wrong file type. Your image must be jpg, jpeg, gif, or png."); } if(move_uploaded_file($_FILES['avatar']['tmp_name'], $uploadfile)) { echo '<meta http-equiv="Refresh" content="0;url=index.php?page=profile.php">'; if($avatar != 'avatars/newbie.png') { unlink($avatar); } $query = "UPDATE users SET avatar = '".$uploadfile."' WHERE login_name = '".$session."'"; connect(); mysql_query($query); mysql_close(); } else { echo "Failed to upload file.".$_FILES['avatar']['error'].""; }}