baseline 7.4 as-is produzione

public/ayaximage.php

@@ -0,0 +1,39 @@
+<?php␍
+include('db.php');␍
+session_start();␍
+$session_id='1'; // User session id␍
+$path = "uploaddocuments/";␍
+␍
+$valid_formats = array("jpg", "png", "gif", "bmp","jpeg");␍
+if(isset($_POST) and $_SERVER['REQUEST_METHOD'] == "POST")␍
+{␍
+$name = $_FILES['photoimg']['name'];␍
+$size = $_FILES['photoimg']['size'];␍
+if(strlen($name))␍
+{␍
+list($txt, $ext) = explode(".", $name);␍
+if(in_array($ext,$valid_formats))␍
+{␍
+if($size<(1024*1024)) // Image size max 1 MB␍
+{␍
+$actual_image_name = time().$session_id.".".$ext;␍
+$tmp = $_FILES['photoimg']['tmp_name'];␍
+if(move_uploaded_file($tmp, $path.$actual_image_name))␍
+{␍
+mysqli_query($conn,"UPDATE users SET profile_image='$actual_image_name' WHERE uid='$session_id'");␍
+echo "<img src='uploaddocuments/".$actual_image_name."' class='preview'>";␍
+}␍
+else␍
+echo "failed";␍
+}␍
+else␍
+echo "Image file size max 1 MB";␍
+}␍
+else␍
+echo "Invalid file format..";␍
+}␍
+else␍
+echo "Please select image..!";␍
+exit;␍
+}␍
+?>