<?php // Connect to DB require_once ("includes/dbconnect.php"); if (!($db = mysql_pconnect($hostname, $mysql_login , $mysql_password))){ die("Can't connect to database server."); }else{ if (!(mysql_select_db("$database",$db))){ die("Can't connect to database."); }} // Configuration - Your Options $allowed_filetypes = array('.jpg','.jpeg','.JPEG','.gif','.bmp','.png','.JPG','.GIF','.BMP','.PNG'); // These will be the types of file that will pass the validation. $max_filesize = 5242880; // Maximum filesize in BYTES (currently 0.5MB). $upload_path = 'uploads/'; // The place the files will be uploaded to (currently a 'files' directory). $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension). $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename. // Check if the filetype is allowed, if not DIE and inform the user. if(!in_array($ext,$allowed_filetypes)) die('dead'); // Now check the filesize, if it is too large then DIE and inform the user. if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize) die('The file you attempted to upload is too large.'); // Upload the file to your specified path. $newname = substr(sha1(time().$_POST['filename']) ,0, 10).'.'.$ext; if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $newname)) $uploadedpath = ('http://www.imgdash.com/' . $upload_path . $newname .''); echo 'success';elseecho 'It has died, unknown O.o'; mysql_query ("insert_into 'uploads' (path, userid) values ('$uploadedpath', '$userid')")?>