0byt3m1n1

Path: /home/neatitt/wl/admstr/school/ [ Home ]
File: upload.php
<?php
	if (isset($_POST["PHPSESSID"])) {
		session_id($_POST["PHPSESSID"]);
	}
	session_start();
///////////////////////////////////////////////////	
require_once "../../include/browsedb.php";    //==>>$incRtFldr
require_once "$pblcPath/wl/include/dbconn.php";
require_once "$pblcPath/wl/include/functions.php";
///////////////////////////////////////////////////

$_auth_str = "관리자";
athBrwse($C_Auth_Level,8,$_auth_str,2); //레벨8 이상만 볼 수 있다.

	if (!isset($_FILES["Filedata"]) || !is_uploaded_file($_FILES["Filedata"]["tmp_name"]) || $_FILES["Filedata"]["error"] != 0) 
	{
		// Usually we'll only get an invalid upload if our PHP.INI upload sizes are smaller than the size of the file we allowed
		// to be uploaded.
		header("HTTP/1.1 500 File Upload Error");
		if (isset($_FILES["Filedata"])) {
			echo $_FILES["Filedata"]["error"];
		}
		exit(0);
	}
	else 
	{
		$random=date("Ymdhis").rand(1000000,9999999);
		$tpefileType = substr($_FILES['Filedata']['name'],-4); //.(쩜)포함
		$tpefileSize=$_FILES['Filedata']['size'];
		$tpefileType2=$_FILES['Filedata']['type']; //필드 저장용 이름
		
		if (!move_uploaded_file($_FILES['Filedata']['tmp_name'], $incRtFldr."/admstr/".$dir1."/".$dir2."/".$random.$tpefileType)) 
		{
			 $img1 ="파일을 지정한 디렉토리에 저장하는데 실패했습니다.";      
		}

		$queCde = "select * from $table where code='$id'";
		$resultCde = mysql_query($queCde,$connect);
		$numbersCde = mysql_num_rows($resultCde);
		
			$photo		= "/".$dir2."/".$random.$tpefileType;
			$photosize  = $tpefileSize;
			$phototype 	= $tpefileType2;
			
			$photosize_FieldName =$imageKnd."size";
			$phototype_FieldName =$imageKnd."type";
			
			if($numbersCde > 0)
			{
				$queTpsIst ="update $table SET $imageKnd='$photo' , $photosize_FieldName ='$photosize' , $phototype_FieldName='$photo1type' where code='$id'";
			}
			else
			{}

	$resultTpsIst = mysql_query($queTpsIst,$connect);				
	}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>
    <title>SWFUpload v2.0 Multi-Upload Demo</title>
</head>
<body>
	<p>Upload Page</p>
</body>
</html>