<?php
include_once("include/db_connection.php");
header("Expires: Thu, 17 May 2001 10:17:17 GMT"); // Date in the past
header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
header ("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1
header ("Pragma: no-cache"); // HTTP/1.0
session_start();
if($_SESSION["loggedIn"] == FALSE){
header("Location:user_login.php");
exit;
}include_once("config.php");
$UserName=$_SESSION['UserName'];
include('header1.php');
$query1=mysql_fetch_array(mysql_query("select UserName FROM users WHERE Type='1' AND UserName='$UserName'" ));
if($UserName==$query1['UserName'] ){
echo $UserName;
include('left_user.php');}
else{
include('left_coord.php');
}?>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>upload files</title>
<meta name="keywords" content="" />
<meta name="Premium Series" content="" />
<link href="default.css" rel="stylesheet" type="text/css" media="screen" />
<script language="JavaScript" src="gen_validatorv31.js" type="text/javascript"></script>
<title>Untitled Document</title>
</head>
<body>
<div id="wrapper">
<!-- start page -->
<div id="page">
<!-- start content -->
<div id="prtCnt" align="center">
<div id="content" align="center">
<div class="post">
<h2 class="title"> </h2>
<div class="entry">
<?php
$UserName=$_SESSION['UserName'];
if ($_FILES["file"]["size"] < 200000)
{
if ($_FILES["file"]["error"] > 0)
{
echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
}
else
{
echo "Upload: " . $_FILES["file"]["name"] . "<br />";
echo "Type: " . $_FILES["file"]["type"] . "<br />";
echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />";
if (file_exists("upload/" . $_FILES["file"]["name"]))
{
echo $_FILES["file"]["name"] . " already exists. ";
}
else
{
$datetime=date("d/m/y h:i:s");
move_uploaded_file($_FILES["file"]["tmp_name"],
"upload/" . $_FILES["file"]["name"]);
echo "Stored in: " . "upload/" . $_FILES["file"]["name"];
$ReportType=$_POST["ReportType"];
$filename=$_FILES["file"]["name"];
$sql="INSERT INTO uploads(UserName,ReportType,Date,Status,ReportName)VALUES('$UserName', '$ReportType', '$datetime', '0', '$filename')";
$result=mysql_query($sql);
}
}
}
else
{
echo "Invalid file";
}
?>
</p>
</div>
</div>
</div>
</div>
<!-- end content -->
<!-- start sidebars -->
<!-- end sidebars -->
<div style="clear: both;"> </div>
</div>
<!-- end page -->
</div>
</html>
<?php
include('footer.php');
?>