Linije koje mislim da su problematicne su ove:
Code (php):
if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
{
$name = $_FILES['photoimg']['name'];
$size = $_FILES['photoimg']['size'];
if(strlen($name))
{
list($txt, $ext) = explode(".", $name);
if(in_array($ext,$valid_formats))
{
if($size<(1024*1024))
{
$code = generate_code(7);
$actual_image_name = $code.".jpg";
$tmp = $_FILES['photoimg']['tmp_name'];
if(move_uploaded_file($tmp, $path.$actual_image_name))
{
mysql_query("INSERT INTO logo VALUES ('', '$category_id', '$code', '$company', '$url', 'none')");
echo 'Uspešno ste dodali novi logo.';
}
else
echo '<div id="reg_alert">Greška! Molimo Vas pokušajte ponovo.</div>';
}
else
echo '<div id="reg_alert">Max veličina slike je 1Mb.</div>';
}
else
echo '<div id="reg_alert">Nedozvoljen format.</div>';
}
else
echo '<div id="reg_alert">Molimo Vas da izaberete sliku.</div>'.$name;
exit;
if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
{
$name = $_FILES['photoimg']['name'];
$size = $_FILES['photoimg']['size'];
if(strlen($name))
{
list($txt, $ext) = explode(".", $name);
if(in_array($ext,$valid_formats))
{
if($size<(1024*1024))
{
$code = generate_code(7);
$actual_image_name = $code.".jpg";
$tmp = $_FILES['photoimg']['tmp_name'];
if(move_uploaded_file($tmp, $path.$actual_image_name))
{
mysql_query("INSERT INTO logo VALUES ('', '$category_id', '$code', '$company', '$url', 'none')");
echo 'Uspešno ste dodali novi logo.';
}
else
echo '<div id="reg_alert">Greška! Molimo Vas pokušajte ponovo.</div>';
}
else
echo '<div id="reg_alert">Max veličina slike je 1Mb.</div>';
}
else
echo '<div id="reg_alert">Nedozvoljen format.</div>';
}
else
echo '<div id="reg_alert">Molimo Vas da izaberete sliku.</div>'.$name;
exit;
Code (html):
ceo PHP kod upload strane:
Code (php):
<?php
error_reporting(E_ALL);
ini_set('display_errors', '0');
$path = "./files/";
include('db_connect.php');
$category_id = $_POST['lista'];
$company = $_POST['company'];
$url = $_POST['url'];
if($category_id && $company && $url){
function generate_code($length)
{
$code='';
for ($i=0; $i<$length; $i++) {
$d=rand(1,30)%2;
$code.= $d ? chr(rand(97,122)) : chr(rand(48,57));
}
return $code;
}
$code = generate_code(7);
$count = 0;
$codecheck = mysql_query("SELECT code FROM logo WHERE code='$code'");
$count = mysql_num_rows($codecheck);
if ($count>0) die('Greška prilikom dodavanja slike.');
$valid_formats = array("jpg", "png", "gif", "jpeg", "JPG", "PNG", "GIF", "JPEG");
if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
{
$name = $_FILES['photoimg']['name'];
$size = $_FILES['photoimg']['size'];
if(strlen($name))
{
list($txt, $ext) = explode(".", $name);
if(in_array($ext,$valid_formats))
{
if($size<(1024*1024))
{
$code = generate_code(7);
$actual_image_name = $code.".jpg";
$tmp = $_FILES['photoimg']['tmp_name'];
if(move_uploaded_file($tmp, $path.$actual_image_name))
{
mysql_query("INSERT INTO logo VALUES ('', '$category_id', '$code', '$company', '$url', 'none')");
echo 'Uspešno ste dodali novi logo.';
}
else
echo '<div id="reg_alert">Greška! Molimo Vas pokušajte ponovo.</div>';
}
else
echo '<div id="reg_alert">Max veličina slike je 1Mb.</div>';
}
else
echo '<div id="reg_alert">Nedozvoljen format.</div>';
}
else
echo '<div id="reg_alert">Molimo Vas da izaberete sliku.</div>'.$name;
exit;
}else echo '<div id="reg_alert">Niste popunili sve potrebna polja.</div>';
}
?>
<?php
error_reporting(E_ALL);
ini_set('display_errors', '0');
$path = "./files/";
include('db_connect.php');
$category_id = $_POST['lista'];
$company = $_POST['company'];
$url = $_POST['url'];
if($category_id && $company && $url){
function generate_code($length)
{
$code='';
for ($i=0; $i<$length; $i++) {
$d=rand(1,30)%2;
$code.= $d ? chr(rand(97,122)) : chr(rand(48,57));
}
return $code;
}
$code = generate_code(7);
$count = 0;
$codecheck = mysql_query("SELECT code FROM logo WHERE code='$code'");
$count = mysql_num_rows($codecheck);
if ($count>0) die('Greška prilikom dodavanja slike.');
$valid_formats = array("jpg", "png", "gif", "jpeg", "JPG", "PNG", "GIF", "JPEG");
if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")
{
$name = $_FILES['photoimg']['name'];
$size = $_FILES['photoimg']['size'];
if(strlen($name))
{
list($txt, $ext) = explode(".", $name);
if(in_array($ext,$valid_formats))
{
if($size<(1024*1024))
{
$code = generate_code(7);
$actual_image_name = $code.".jpg";
$tmp = $_FILES['photoimg']['tmp_name'];
if(move_uploaded_file($tmp, $path.$actual_image_name))
{
mysql_query("INSERT INTO logo VALUES ('', '$category_id', '$code', '$company', '$url', 'none')");
echo 'Uspešno ste dodali novi logo.';
}
else
echo '<div id="reg_alert">Greška! Molimo Vas pokušajte ponovo.</div>';
}
else
echo '<div id="reg_alert">Max veličina slike je 1Mb.</div>';
}
else
echo '<div id="reg_alert">Nedozvoljen format.</div>';
}
else
echo '<div id="reg_alert">Molimo Vas da izaberete sliku.</div>'.$name;
exit;
}else echo '<div id="reg_alert">Niste popunili sve potrebna polja.</div>';
}
?>
HTML kod
Code (html):
<?php
session_start();
if(!isset($_SESSION['username']))
{
header("location:login.php");
}
?>
<!doctype html>
<html lang="sr">
<head>
<meta name="description" content="Dobrodošli u WebCaffe, mesto gde ćete pronaćin sigurno nešto za sebe."/>
<meta name="keywords" content="webcaffe,veliki broj sajtova na jednom mestu,reklamiraj te se,vaša firma na našem sajtu,svi popularni sajtovi na jednom mestu,serbia,srbija,"/>
<meta charset="utf-8">
<meta name="author" content="Anciger Perica">
<title>WebCaffe / Reklamirajte se /</title>
<script src="http://modernizr.com/downloads/modernizr-2.5.3.js"></script>
<link href="css/styles.css" rel="stylesheet">
<link rel="shortcut icon" href="images/favicon.ico">
</head>
<body>
<div id="container">
<?php include("inc/header.php") ?>
<section id="main_section_one" role="main">
<h1 class="naslov_registracija">Reklamirajte se</h1>
<p class="registracija-tekst">Unesite osnovne podatke vaše firme.<br>
Napomena: Molimo Vas trudite se da logo bude u <span class="web">PNG</span> ili <span class="web">GIF</span> formatu.</p>
<div class="holder_form_height_two">
<form action="script/upload.php" method="post" class="registracija_form">
<fieldset>
<div class="elements">
<label for="name">Ime Firme :<br>
</label>
<input type="text" id="name" name="company" size="25">
</div>
<div class="elements">
<label for="adress">Adresa sajta :<br>
</label>
<input type="text" id="adress" name="url" size="25">
</div>
<div class="elements">
<p class="kategorije">
<label for="Lista">Izaberite kategoriju:</label>
<select name="lista" size="7" id="Lista">
<option value="alati">Alati i mašine</option>
<option value="saobracaj">Autobuski i avio saobraćaj</option>
<option value="bioskop">Bioskopi</option>
<option value="boje">Boje i lakovi</option>
<option value="butici">Butici</option>
<option value="forumi">Forumi</option>
<option value="gradjevinske">Gredjavinske firme</option>
<option value="hoteli">Hoteli, hosteli, sobe</option>
<option value="izdavastvo">Izdavaštvo</option>
<option value="menjacnice">Menjačnice</option>
<option value="namestaj">Nameštaj</option>
<option value="osiguranje">Osiguravajuća društva</option>
<option value="parfimerije">Parfimerije</option>
<option value="prevoznici">Prevoznici</option>
<option value="restorani">Restorani</option>
<option value="kozmeticki saloni">Kozmetički saloni</option>
<option value="sportska oprema">Sportska oprema</option>
<option value="stomatoloske ordinacije">Stomatološke ordinacije</option>
<option value="sve o vasim ljubimcima">Sve o vašim ljubimcima</option>
<option value="sve za decu">Sve za decu</option>
<option value="transport">Transport</option>
<option value="turisticke organizacije">Turističke agencije</option>
<option value="zlatare">Zlatare</option>
<option value="sve o vasim ljubimcima">Sve o vašim ljubimcima</option>
<option value="ostalo">Ostalo</option>
</select>
</p>
</div>
<div class="elements">
<label for="fileToUpload" class="fileToUploadtwo">Upload vašeg logotipa:</label>
<br/>
</div>
<input type="file" name="photoimg" id="fileToUpload" class="fileToUpload"/>
<div id="name"></div>
<div id="size"></div>
<div id="type"></div>
<div id="submit_four">
<input type="submit" name="submit" class="submit_four" value="Upload" />
</div>
<div id="progressNumber"></div>
</form>
</form>
</div>
</section>
</div>
<?php include("inc/footer.php") ?>
</body>
</html>
<?php
session_start();
if(!isset($_SESSION['username']))
{
header("location:login.php");
}
?>
<!doctype html>
<html lang="sr">
<head>
<meta name="description" content="Dobrodošli u WebCaffe, mesto gde ćete pronaćin sigurno nešto za sebe."/>
<meta name="keywords" content="webcaffe,veliki broj sajtova na jednom mestu,reklamiraj te se,vaša firma na našem sajtu,svi popularni sajtovi na jednom mestu,serbia,srbija,"/>
<meta charset="utf-8">
<meta name="author" content="Anciger Perica">
<title>WebCaffe / Reklamirajte se /</title>
<script src="http://modernizr.com/downloads/modernizr-2.5.3.js"></script>
<link href="css/styles.css" rel="stylesheet">
<link rel="shortcut icon" href="images/favicon.ico">
</head>
<body>
<div id="container">
<?php include("inc/header.php") ?>
<section id="main_section_one" role="main">
<h1 class="naslov_registracija">Reklamirajte se</h1>
<p class="registracija-tekst">Unesite osnovne podatke vaše firme.<br>
Napomena: Molimo Vas trudite se da logo bude u <span class="web">PNG</span> ili <span class="web">GIF</span> formatu.</p>
<div class="holder_form_height_two">
<form action="script/upload.php" method="post" class="registracija_form">
<fieldset>
<div class="elements">
<label for="name">Ime Firme :<br>
</label>
<input type="text" id="name" name="company" size="25">
</div>
<div class="elements">
<label for="adress">Adresa sajta :<br>
</label>
<input type="text" id="adress" name="url" size="25">
</div>
<div class="elements">
<p class="kategorije">
<label for="Lista">Izaberite kategoriju:</label>
<select name="lista" size="7" id="Lista">
<option value="alati">Alati i mašine</option>
<option value="saobracaj">Autobuski i avio saobraćaj</option>
<option value="bioskop">Bioskopi</option>
<option value="boje">Boje i lakovi</option>
<option value="butici">Butici</option>
<option value="forumi">Forumi</option>
<option value="gradjevinske">Gredjavinske firme</option>
<option value="hoteli">Hoteli, hosteli, sobe</option>
<option value="izdavastvo">Izdavaštvo</option>
<option value="menjacnice">Menjačnice</option>
<option value="namestaj">Nameštaj</option>
<option value="osiguranje">Osiguravajuća društva</option>
<option value="parfimerije">Parfimerije</option>
<option value="prevoznici">Prevoznici</option>
<option value="restorani">Restorani</option>
<option value="kozmeticki saloni">Kozmetički saloni</option>
<option value="sportska oprema">Sportska oprema</option>
<option value="stomatoloske ordinacije">Stomatološke ordinacije</option>
<option value="sve o vasim ljubimcima">Sve o vašim ljubimcima</option>
<option value="sve za decu">Sve za decu</option>
<option value="transport">Transport</option>
<option value="turisticke organizacije">Turističke agencije</option>
<option value="zlatare">Zlatare</option>
<option value="sve o vasim ljubimcima">Sve o vašim ljubimcima</option>
<option value="ostalo">Ostalo</option>
</select>
</p>
</div>
<div class="elements">
<label for="fileToUpload" class="fileToUploadtwo">Upload vašeg logotipa:</label>
<br/>
</div>
<input type="file" name="photoimg" id="fileToUpload" class="fileToUpload"/>
<div id="name"></div>
<div id="size"></div>
<div id="type"></div>
<div id="submit_four">
<input type="submit" name="submit" class="submit_four" value="Upload" />
</div>
<div id="progressNumber"></div>
</form>
</form>
</div>
</section>
</div>
<?php include("inc/footer.php") ?>
</body>
</html>