Viewing File: /home/cienp/public_html/portal/sql_patr_galr.php

<?php

    $dt_atua = date("Y-m-d");
    echo ".";

    require "$this->include_dir/conecta.php";
    require "$this->include_dir/thumbjpg.php";

    $s_id_patr = $_POST[id_patr];
    settype($s_id_patr,'integer');

    if ($s_id_patr > 0) {

        // A list of permitted file extensions
        $allowed = array('jpg', 'jpeg');

        if (isset($_FILES['upl']) && $_FILES['upl']['error'] == 0) {

            if ((strtoupper(substr($_FILES['upl']['type'], -3)) != "JPG") && (strtoupper(substr($_FILES['upl']['type'], -4)) != "JPEG")) {
                echo '{"status":"error"}';
                exit;
            }

            if (!is_file($_FILES['upl']['tmp_name'])) {
                echo '{"status":"error"}';
                exit;
            }

            if (is_dir($_FILES['upl']['name'])) {
                echo '{"status":"error"}';
                exit;
            }

            $sql  = "INSERT INTO " . $pref_tabl . "patr_foto ";
            $sql .= "(id_patr, dt_cads, id_cads) ";
            $sql .= "VALUES ('$s_id_patr', '$dt_atua', $linhau[id_user])";
            #echo $sql.'<br>';
            $res  = mysqli_query($conn, $sql);

            if ($res) {
                $sql2  = "SELECT MAX(id_foto) as id_foto ";
                $sql2 .= "FROM " . $pref_tabl . "patr_foto ";
                $res2  = mysqli_query($conn, $sql2);
                if (mysqli_num_rows($res2) > 0) {
                    $linha2 = mysqli_fetch_array($res2);

                    $de_foto = "galr_" . $linha2[id_foto] . ".jpg";

                    move_uploaded_file($_FILES['upl']['tmp_name'], "img_patr/$de_foto");
                    $imagp = resize_img($de_foto, "img_patr/", "tb_", 350, 250);
                    $imagr = redi($de_foto, "img_patr/");

                    echo '{"status":"success"}';
                    exit;
                } else {
                    echo '{"status":"error"}';
                    exit;
                }
            } else {
                echo '{"status":"error"}';
                exit;
            }
        }
    } else {
        echo '{"status":"error"}';
        exit;
    }

    echo '{"status":"error"}';
    exit;

?>