HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/SBogers10/rooymansde.komma-mediadesign.nl/wwwroot/kms/categoriefoto_toevoegen.php
<?php

include_once('resizer.inc.php');

$categorie_id = $_GET['categorie_id'];

$categorie_id = checkData($categorie_id);

$q_categorie_naam = sprintf("SELECT kms_en_categories.categorie_name, kms_en_categories.image_dir FROM kms_en_categories WHERE kms_en_categories.categorie_id='%s' LIMIT 0,1", $categorie_id);
$r_categorie_naam = mysql_query($q_categorie_naam);
$rec_categorie_naam = mysql_fetch_assoc($r_categorie_naam);

$categorie_naam = $rec_categorie_naam['categorie_name'];
$image_dir = $rec_categorie_naam['image_dir'];

if(isset($_POST['verzenden'])){
	$verzenden = true;
}
if($_FILES['image_file']['tmp_name']){
	
	$valid_file = true;
	$extensions = array("image/jpg", "image/jpeg", "image/pjpeg");
	
	if(in_array($_FILES['image_file']['type'], $extensions)) { 
	   $valid_type = true; 
	}else{	
		$valid_type = false;
	}
}else{
	$valid_file = false;
	$valid_type = false;
}


if($verzenden && $valid_type && !$file_tegroot ){
	
	$root = $_SERVER['DOCUMENT_ROOT']."/";
	
	if($valid_file && $_FILES['image_file']['tmp_name']){
		
		$dirname = $image_dir;
		
		$foto_dir_naam = time();		
		
		$extensions = array("image/jpg", "image/jpeg", "image/pjpeg");
		
		if(in_array($_FILES['image_file']['type'], $extensions)) 
		{ 
			if($_FILES['image_file']['type'] == "image/jpg"){
				$ext = ".jpg";
			}else if($_FILES['image_file']['type'] == "image/jpeg"){
				$ext = ".jpg"; 
			}else if($_FILES['image_file']['type'] == "image/pjpeg"){
				$ext = ".jpg";
			}
		   
		   $picture = $_FILES['image_file']['tmp_name'];
		   
		   list($width, $height) = getimagesize($picture);
		   
		   $objResize = new RVJ_ImageResize($_FILES['image_file']['tmp_name'], $root . '/categorie_images/'. $dirname . '/foto_'. $foto_dir_naam . '.jpg', 'W', '840');
		}
	}
	
	$q_order = "SELECT MAX(kms_en_categorie_images.sort_order) AS max_order FROM kms_en_categorie_images WHERE kms_en_categorie_images.categorie_id ='$categorie_id'";
	$r_order = mysql_query($q_order);
	$rec_order = mysql_fetch_assoc($r_order);
	$order = $rec_order['max_order'] + 1;
	
	$q_cases = sprintf("INSERT INTO kms_en_categorie_images (categorie_id, icon_dir, sort_order) VALUES ('%s','%s','%s')", $categorie_id, $foto_dir_naam, $order);
	$r_cases = mysql_query($q_cases);
	
	if($r_cases){
        header ('Location: /kms/index.php?p=categoriefoto_thumbFoto&categorie_id='.$categorie_id.'&icon_dir='.$foto_dir_naam);
        exit;
	}else{
		echo("Er is iets fout gegaan.");
	}
	
}else{
?>

<h1>Foto toevoegen aan product: <?php echo(html_entity_decode($categorie_naam)); ?></h1>
<p>Vul onderstaande gegevens in om een foto toe te voegen aan het product.</p>
<span class="label">* = verplicht</span><br /><br />
<form enctype="multipart/form-data" action="<?php $_SERVER['PHP_SELF']; ?>" id="aanmelden" name="aanmelden" method="post">
    	    
	<div>
      
       	<label>Foto selecteren <br />(.jpg)</label>
     	<input class="file_input" type="file" name="image_file" />
       	
        <br />
		<?php if(!$valid_type && !$valid_file && $verzenden && !$file_tegroot){ print("<span class=\"error\"><br />(Selecteer een afbeelding)</span>"); }?>
        <?php if(!$valid_type && $valid_file && $verzenden && !$file_tegroot){ print("<span class=\"error\"><br />(Alleen jpg bestanden)</span>"); }?>
		<?php if($file_tegroot && $verzenden){ print("<span class=\"error\"><br />(Uw bestand is te groot. Max 1 MB)</span>"); }?><br />
         
        <br /><br />
     
        <input name="verzenden" type="submit" value="Toevoegen" class="submit" />
        <a class="submit_annuleren" href="index.php?p=categoriefoto_overzicht&amp;categorie_id=<?php echo($categorie_id); ?>" title="Annuleren">Annuleren</a>
	</div>
</form>

<?php
}
?>