<?php
// Connect to DB
require_once ("includes/dbconnect.php");
// Configuration - Your Options
$allowed_filetypes = array('.jpg','.jpeg','.JPEG','.gif','.bmp','.png','.JPG','.GIF','.BMP','.PNG'); // These will be the types of file that will pass the validation.
$max_filesize = 5242880; // Maximum filesize in BYTES (currently 0.5MB).
$upload_path = 'uploads/'; // The place the files will be uploaded to (currently a 'files' directory).
$filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension).
$ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.
// Check if the filetype is allowed, if not DIE and inform the user.
if(!in_array($ext,$allowed_filetypes))
die('');
// Now check the filesize, if it is too large then DIE and inform the user.
if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize)
die('The file you attempted to upload is too large.');
// Upload the file to your specified path.
$newname = substr(sha1(time().$_POST['filename']) ,0, 10).'.'.$ext;
if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $newname))
mysql_query ("insert_into 'uploads' (path, userid) values ('$uploadpath', '$userid')")
echo '';
echo '';
// Close DB connection
mysql_close();
?>