case 'addPhotoBatch':{ $partyid = $_POST['_PARTYID']; if (preg_match('/^[0-9]+$/', $partyid)) // it's a valid number { Query("DELETE FROM photos WHERE party_id=$partyid") or die("error=".mysql_error()); if(is_dir("../images/parties/$partyid")) // directory exists { foreach(glob("../images/parties/$partyid/*.jpg") as $file) { $cutdir = str_replace("../images/parties/$partyid/", "", $file); Query("INSERT INTO photos (party_id, url) values ($partyid, $cutdir);") or die("error=".mysql_error()); } echo("error=success"); } } break;}