if (empty($prp->settings['image_ext'])) { fallback(FUSION_SELF . '?did=' . $review->id); } if (!empty($review->data['dl_pic'])) { $review->log_event($log_event, PRP_EIMG); fallback(FUSION_SELF . '?did=' . $review->id . '&errno=' . PRP_EIMG); } if (!isset($_FILES['upload'])) { $review->log_event($log_event, PRP_EUPLOAD); fallback(FUSION_SELF . "?did=" . $review->id . '&errno=' . PRP_EUPLOAD); } $ext = explode(',', $prp->settings['image_ext']); foreach ($ext as $key => $val) { $ext[$key] = '.' . $val; } $errno = prp_upload_file($_FILES['upload'], $prp->settings['upload_image'], $prp->settings['image_max'], $ext, $screen_fn); if ($errno) { $review->log_event($log_event, $errno); fallback(FUSION_SELF . '?did=' . $review->id . '&errno=' . $errno); } $file = $prp->settings['upload_image'] . $screen_fn; if (!verify_image($file)) { $review->log_event($log_event, PRP_EIMGVERIFY); unlink($file); fallback(FUSION_SELF . "?did=" . $review->id . "&errno=" . PRP_EIMGVERIFY); } // check size if ($prp->settings['image_max_w']) { $size = getimagesize($file); if ($size === false) { $log_event = PRP_EV_PICUPLOAD;
// try UPLOAD last } elseif (isset($_FILES['upload']) && $_FILES['upload']['error'] != UPLOAD_ERR_NO_FILE) { if (empty($prp->settings['file_ext'])) { fallback(FUSION_SELF . "?did=" . $review->id); } $log_event = PRP_EV_FILEUPLOAD; // cannot be updated. if (isset($file_id)) { $review->log_event($log_event, PRP_EACCESS); fallback(FUSION_SELF . "?did=" . $review->id . "&errno=" . PRP_EACCESS); } $ext = explode(",", $prp->settings['file_ext']); foreach ($ext as $key => $val) { $ext[$key] = "." . $val; } $errno = prp_upload_file($_FILES['upload'], $upload_dir, $prp->settings['file_max'], $ext, $url); if ($errno) { $review->log_event($log_event, $errno); fallback(FUSION_SELF . "?did=" . $review->id . "&errno={$errno}"); } if (empty($size)) { $size = parsebytesize(filesize($upload_dir . $url)); } } else { fallback(FUSION_SELF . "?did=" . $review->id); } $ver = stripinput($_POST['version']); $desc = stripinput($_POST['desc']); $now = time(); if (empty($url)) { $url = "file_url";